🔐 Systems Security & Data Protection: Sub-Curriculum Index

Welcome to the Systems Security & Data Protection curriculum. This track covers identity authentication, cryptographic data protection (encoding, encryption, tokenization), sensitive data/PII governance, Zero Trust architecture (ZTA), and STRIDE threat modeling.

Every guide in this series strictly follows a two-part learning format:

  • ⚡ Quick Dive: Security matrices, comparison tables, and framework cheat sheets.
  • 📖 Extended Guide: Deep cryptographic architectures, identity federation sequence diagrams, and compliance engineering standards.

📚 Curriculum Roadmap

# Guide Primary Topics Covered
01 Authentication & Access Control Multi-Factor Authentication (MFA), FIDO2/WebAuthn, Session vs. Token auth, and password hashing algorithms (Argon2id, bcrypt).
02 Encoding, Encryption & Tokenization Structural differences, symmetric (AES) vs. asymmetric (RSA/ECC) encryption, and credit card tokenization (PCI-DSS).
03 Managing Sensitive Data & PII Data classification tiers, masking/pseudonymization, DLP pipelines, GDPR/CCPA compliance, and secure key deletion.
04 Zero Trust Architecture & Identity BeyondCorp model, Policy Enforcement Points (PEP), micro-segmentation, SPIFFE workload identities, and least privilege.
05 Vulnerability Management & Threat Modeling The STRIDE framework, CVSS v3.1/v4 vulnerability scoring, remediation SLAs, and automated security triage.
⌂ All Guides