Cyber Defense Specialist Course Overview
A complete, hands-on introduction to cybersecurity — nine units that take you from the core principles of security all the way to professional incident response, forensics, and the ethics and law of the field. Built to align with the AP Cybersecurity framework.
About This Course
The Cyber Defense Specialist (CDS) course is a full-year introduction to defending modern systems. It moves deliberately from foundations to practice: you’ll start with the principles and threats that define the field, build up the networking, operating-system, and cryptography knowledge that security rests on, then apply it to secure coding, governance, monitoring, incident response, and digital forensics — finishing with the ethics, law, and professional skills that turn technical ability into a career.
Every unit pairs interactive lessons with a hands-on lab and a unit project, so you don’t just learn the concepts — you practice them and produce real work that demonstrates your skills.
How Each Unit Works
Every one of the nine units follows the same dependable structure, so you always know what to expect.
The unit’s roadmap, outcomes, and key concepts at a glance.
Interactive explorers, activities, flip-card terms, and auto-graded checks.
A multi-station workbench that applies the unit’s skills to a scenario.
A capstone deliverable graded on a 100-point rubric.
Pacing, teaching notes, an AP crosswalk, and full answer keys.
The Nine Units
Click any unit to open its overview. Each lists the hands-on lab and the unit project you’ll complete.
The CIA triad, threat actors, attack vectors, and the cyber kill chain — the vocabulary and mental models the whole field is built on.
The OSI and TCP/IP models, IP addressing, core protocols, and network security — how data moves and where it’s defended.
Operating-system hardening, command-line auditing, endpoint protection, and alert triage — securing the machines themselves.
Access control and RBAC, authentication methods, cryptography fundamentals, and applied crypto with hashing and keys.
Input validation, injection vulnerabilities, version control and DevSecOps, and building security into the SDLC.
Asset classification and risk, security controls and standards, policies and incident response, and privacy regulations.
SIEM pipelines, brute-force detection, log sources, and dashboards and triage — the blue-team work of catching attacks.
The NIST IR lifecycle, evidence collection and integrity, forensic tools and indicators of compromise, and incident reporting.
Ethical hacking guidelines, legal boundaries, responsible disclosure, and teamwork and documentation — the capstone unit.
Aligned to Three Core Skills
The course is built around the AP Cybersecurity framework’s three skill categories. Every unit develops one or more of them.
🔎 Analyze Risk
Identifying assets, threats, vulnerabilities, and their potential impact — the foundation laid in Units 1, 2, and 6 and applied throughout.
🛡️ Mitigate Risk
Applying controls and safeguards — hardening, access control, cryptography, secure coding, and governance — across Units 3 through 6.
🚨 Detect Attacks
Monitoring, detecting, and analyzing digital evidence to find and respond to attacks — the focus of Units 7 and 8.
Where the Course Leads
By the final unit, you’ll have a complete picture of the cybersecurity profession and the pathways into it. The course maps directly to in-demand entry points and the skills each requires:
SOC Analyst — monitoring and triage (Units 7–8). Incident Responder — leading containment and recovery (Unit 8). Penetration Tester — authorized offensive testing within a legal and ethical framework (Unit 9). Security Engineer / Architect — designing defenses (Units 2–5). GRC Analyst — governance, risk, and compliance (Unit 6). Each pairs technical depth with the professional and communication skills the course builds along the way.
Note: This course is designed to align with the AP Cybersecurity framework, including its three skill categories and its emphasis on legal and professional norms. Any references to AP skills or topics throughout the course reflect instructional judgment about where content best supports the framework and are a teaching aid, not an official College Board alignment. Always consult the current AP Cybersecurity Course and Exam Description for authoritative scope.
Course Content
