Bob Salmans
Cybersecurity & Governance, Risk, and Compliance (GRC)
Cybersecurity Training for SOC, Pentest, Cloud Security, and GRC Teams
Cross-vendor cybersecurity training covering ethical hacking, penetration testing, GIAC certifications, and security operations for your SOC team.
60
Courses
183
Labs
8,040
Videos
1,088h
Total
Where teams start
Most Popular Cybersecurity Courses
Core security paths for SOC analysts, penetration testers, cloud security engineers, and governance teams.
PEN-100
PEN-100: Network Penetration Testing Essentials is foundational OffSec training for aspiring ethical hackers. Learn Linux and Windows command line, network protocols, scripting with Bash and Python, and explore essential security tools like Nmap, Kali Linux, and Metasploit. Build a strong ethical hacking mindset with hands-on practice in reconnaissance, exploitation, and post-exploitation techniques. Perfect for beginners looking to start a cybersecurity career.
Erik Choron
Enterprise GRC
This Governance, Risk and Compliance training covers how to manage your organization's compliance-related requirements and balance them with operational risks to provide cost-efficient and in-compliance results. For systems administrators and security professionals, compliance is much more than ensuring that the right people are getting the right data — this training shows you how to prove your work, verify data integrity, and more.
Bob Salmans
AssociateLabs
CCNA Cybersecurity
This CCNA Cybersecurity training prepares you for the Understanding Cisco Cybersecurity Operations Fundamentals (200-201 CCNACBR) v1.2 exam (formerly called Cisco CyberOps). With virtual labs and unlimited practice exams included, you’ll gain experience with SIEM, NetFlow, tcpdump, malware analysis, access control models, and incident response workflows based on NIST.SP800‑61. You'll also learn how to detect network, application, and endpoint threats, investigate attacks like DDoS or man‑in‑the‑middle, and apply defense‑in‑depth. This course is deal for entry‑level security analysts or engineers ready to earn their CCNA Cybersecurity certification and launch an SOC career.
Keith Barker, Bob Salmans, John Munjoma, Kelvin Tran
Associate
Security+
This CompTIA Security+ (SY0-701) training prepares your team for a widely recognized entry-level cybersecurity certification. It covers network security fundamentals, cryptography basics, threat detection and mitigation, risk management, and compliance frameworks, and it builds the skills the SY0-701 exam tests: assessing the security posture of an enterprise environment and recommending solutions, monitoring and securing hybrid cloud and on-premises environments, responding to security incidents, and working within applicable regulations and governance policies. For an IT Director in a regulated industry, Security+ is the baseline many hiring rubrics and compliance programs expect of help desk analysts, network administrators, and security specialists alike. Individuals starting a security specialty earn the same credential on the same path.
Keith Barker, Erik Choron
Professional
CCNP Security
This CCNP Security training is designed to help you get comfortable with the 300-710 SNCF exam objectives, and earn your CCNP Security certification. Taught by networking expert Keith Barker and cybersecurity professional Bob Salmans, this course focuses on securing networks with Cisco Firewalls, including Firepower Threat Defense and Management Center. This training is ideal for Network Security Engineers and System Administrators seeking rigorous 300-710 SNCF exam prep, as well as IT managers looking for a streamlined onboarding tool or a high-level Cisco training resource for their technical teams.
Keith Barker, Bob Salmans
Entry
Microsoft SC-900
Cloud adoption spreads security, identity, and compliance work across help desk staff, sysadmins, and compliance stakeholders who often lack a shared vocabulary. When terms like Zero Trust, least privilege, and the shared responsibility model mean different things to different people, risk discussions stall and audit conversations take longer than they should. This entry-level SC-900 course gives IT Directors and Training Managers a single baseline to assign across the team. Learners cover Microsoft Entra ID (Azure AD) identity concepts, authentication and self-service password reset, Microsoft Defender threat protection, Intune endpoint security, and Microsoft Purview capabilities such as sensitivity labels, DLP, eDiscovery, audit, data lifecycle management, and insider risk. The course stays conceptual, with walkthroughs in Azure, Microsoft 365, Intune, and Purview, so new hires, help desk technicians, and non-technical risk stakeholders can all take part. After completion, your team can explain Microsoft security terminology to technical and non-technical audiences, identify which Microsoft tool fits a given identity, threat, or compliance use case, and route questions to the right platform capability or specialist team. The course also provides a structured review of the fundamentals covered by the SC-900 certification exam. At about 21.7 hours across 25 skills, the course fits an onboarding cohort or a team certification push. Team Leads can bundle it into Playlists, and Training Managers can track per-learner progress and completion with Team Reporting before moving the team on to role-based Microsoft security training.
John Munjoma, James Conrad, Bob Salmans
Capability ladder
Cybersecurity Certifications by Level
The most popular Cybersecurity courses at each certification level — from first credentials for new team members through expert and specialty tracks.
1
Certification tier
Tier 1 — Entry Certifications
First credentials for new team members and cross-trained roles — the on-ramp before vendor specialization.
Entry
Microsoft SC-900
Cloud adoption spreads security, identity, and compliance work across help desk staff, sysadmins, and compliance stakeholders who often lack a shared vocabulary. When terms like Zero Trust, least privilege, and the shared responsibility model mean different things to different people, risk discussions stall and audit conversations take longer than they should. This entry-level SC-900 course gives IT Directors and Training Managers a single baseline to assign across the team. Learners cover Microsoft Entra ID (Azure AD) identity concepts, authentication and self-service password reset, Microsoft Defender threat protection, Intune endpoint security, and Microsoft Purview capabilities such as sensitivity labels, DLP, eDiscovery, audit, data lifecycle management, and insider risk. The course stays conceptual, with walkthroughs in Azure, Microsoft 365, Intune, and Purview, so new hires, help desk technicians, and non-technical risk stakeholders can all take part. After completion, your team can explain Microsoft security terminology to technical and non-technical audiences, identify which Microsoft tool fits a given identity, threat, or compliance use case, and route questions to the right platform capability or specialist team. The course also provides a structured review of the fundamentals covered by the SC-900 certification exam. At about 21.7 hours across 25 skills, the course fits an onboarding cohort or a team certification push. Team Leads can bundle it into Playlists, and Training Managers can track per-learner progress and completion with Team Reporting before moving the team on to role-based Microsoft security training.
John Munjoma, James Conrad, Bob Salmans
Entry
ISC2 Certified in Cybersecurity
This ISC2 CC - Certified in Cybersecurity course is designed to lay the foundation for a professional cybersecurity career, and help you study for your ISC2 CC certification. You'll learn to understand the ethical and risk-based frameworks that define the industry, then dive into business continuity and incident response to learn how organizations survive and recover from disruption. From there, you'll explore cybersecurity topics such as access control and network security, and understand the mechanics of protecting digital borders and managing identities. Finally, you'll explore security operations for real-world system defense. To make sure you're ready for exam day, the course includes unlimited ISC2 Certified in Cybersecurity practice exams to build your confidence and reinforce skills.
Bob Salmans
EntryLabs
CCST Cybersecurity
Practical training to prepare for the Cisco CCST Cybersecurity exam. This entry‑level course takes you through essential security principles, from CIA triad and attack types to defenses like hardening and network segmentation. Learn real‑world threat and vulnerability types such as malware, phishing, denial of service, IoT exploits, and social engineering. You’ll walk through access management (AAA, MFA, RADIUS), encryption (hashing, certificates, PKI) for data at rest, in transit, and in use. Dive into TCP/IP vulnerabilities, network architecture (IDS/IPS, DMZ, VPN, NAC), and secure wireless setups. Master OS-level security for Windows, macOS, and Linux, endpoint tools like netstat and tcpdump, patching and compliance, and log analysis. Finally, explore vulnerability and risk management, threat intelligence, disaster recovery, plus SIEM, forensic, and incident response frameworks like MITRE ATT&CK and NIST. Learn in bite‑sized videos, designed to help you get certified and start protecting networks.
James Conrad, John Munjoma
EntryLabs
LPI Security Essentials
This Linux Professional Institute Security Essentials (020-100) training covers how to implement best practices in network security maintenance, identify vulnerabilities, and respond effectively to incidents in Linux-based IT infrastructures. You'll learn cybersecurity skills that apply in any environment, as well as techniques and tools that are particular to Linux environments. The LPI Security Essentials certification is an excellent start for a cybersecurity career, and this 020-100 exam prep will prepare you to earn it.
James Conrad
EntryLabs
Splunk Core Certified User
Many security and operations teams collect large volumes of machine data but lack a shared, repeatable way to search it and act on what they find. This course gives IT Directors and Training Managers a consistent Splunk baseline for SOC analysts, security analysts, SIEM users, and IT operations staff. Across 11 skills and about 9.3 hours, learners move from Splunk navigation and basic management into searching with indexes, hosts, and fields. They write foundational SPL, summarize data with the top, rare, and stats commands, and build reports, dashboards, lookups, scheduled reports, and alerts. All practice runs in an isolated lab loaded with realistic data from many system types, so no one touches production while they learn. The course aligns with the Splunk Core Certified User certification and fits teams adopting Splunk or moving past basic navigation into repeatable reporting. Assign it through Playlists, and use Team Reporting to track progress across your SOC and operations staff. The Splunk Core Certified Power User course is the natural next step.
Erik Choron, Bob Salmans
EntryLabs
Splunk Core Certified Power User
When only one or two analysts understand the saved searches, dashboards, fields, and event mappings a SOC depends on, every shift change and staff departure becomes a risk. This course helps IT Directors and Team Leads move Splunk users from personal searches to shared knowledge objects and repeatable workflows the whole team can rely on. Built for SOC analysts, SIEM administrators, and IT practitioners who already work with Splunk, the training covers charts, filtering and formatting, event correlation, fields, tags, event types, macros, workflow actions, data models, and the Common Information Model (CIM) add-on. Throughout, the instructor frames Splunk objects around SOPs, corporate policy, and team handoffs, so the skills apply directly to how your SOC operates. At 6.6 hours across eight skills, Training Managers can assign the course in short blocks alongside daily operations. CBT Nuggets Virtual Labs provide a Splunk VM with a preconfigured data set for hands-on practice, and the course aligns with the Splunk Core Certified Power User certification, a practical next step for teams standardizing Splunk skills.
Bob Salmans, Erik Choron
2
Certification tier
Tier 2 — Associate Certifications
Core role credentials — the level most teams standardize on for day-to-day operations.
AssociateLabs
CCNA Cybersecurity
This CCNA Cybersecurity training prepares you for the Understanding Cisco Cybersecurity Operations Fundamentals (200-201 CCNACBR) v1.2 exam (formerly called Cisco CyberOps). With virtual labs and unlimited practice exams included, you’ll gain experience with SIEM, NetFlow, tcpdump, malware analysis, access control models, and incident response workflows based on NIST.SP800‑61. You'll also learn how to detect network, application, and endpoint threats, investigate attacks like DDoS or man‑in‑the‑middle, and apply defense‑in‑depth. This course is deal for entry‑level security analysts or engineers ready to earn their CCNA Cybersecurity certification and launch an SOC career.
Keith Barker, Bob Salmans, John Munjoma, Kelvin Tran
Associate
Security+
This CompTIA Security+ (SY0-701) training prepares your team for a widely recognized entry-level cybersecurity certification. It covers network security fundamentals, cryptography basics, threat detection and mitigation, risk management, and compliance frameworks, and it builds the skills the SY0-701 exam tests: assessing the security posture of an enterprise environment and recommending solutions, monitoring and securing hybrid cloud and on-premises environments, responding to security incidents, and working within applicable regulations and governance policies. For an IT Director in a regulated industry, Security+ is the baseline many hiring rubrics and compliance programs expect of help desk analysts, network administrators, and security specialists alike. Individuals starting a security specialty earn the same credential on the same path.
Keith Barker, Erik Choron
Associate
SC-300
This Microsoft Identity and Access Administrator (SC-300) training prepares you to become a Microsoft identity and access admin. Expert-led training will teach you to implement and manage secure identity solutions using Microsoft Entra ID (Azure AD) and hybrid identities. You’ll set up and manage users, groups, devices, and custom roles. You’ll learn to configure passwordless and multifactor sign-in, apply conditional access policies, and use tools like PIM to support a zero-trust strategy. You’ll also manage app access with registrations, service principals, and entitlement controls. Bring on-prem and cloud together using Azure AD Connect and Active Directory Federation Services, and monitor and protect identities using Defender for Cloud Apps, Sentinel, Identity Protection and Identity Secure Score. With practice exams and real‑world scenarios, this course maps to the SC‑300 exam blueprint, giving you the skills and confidence to get certified and secure access to your organization’s cloud resources.
Bob Salmans, James Conrad
Associate
AZ-500
This intermediate Microsoft Azure Security Engineer Associate training prepares you for the AZ-500 exam, which is required to earn the Microsoft Certified: Azure Security Engineer Associate certification. Become an Azure security engineer associate by learning the skills needed to secure Azure-based networks by implementing security controls.
Bob Salmans, Trevor Sullivan, Knox Hutchinson
AssociateLabs
SSCP
This (ISC)² Systems Security Certified Practitioner (SSCP) training is designed for cybersecurity professionals seeking hands-on expertise in securing IT systems. This course covers application security, network defense, access control mechanisms, cryptographic solutions, and incident response techniques. It also covers cutting-edge topics like the MITRE ATT&CK framework, quantum cryptography, organizational compliance, and advanced network security appliances. A premier credential for systems administrators, the SSCP certifies your ability to implement, monitor, and manage secure infrastructure environments following globally recognized (ISC)² standards. The course includes interactive virtual labs and realistic practice exams, ensuring you’re ready to pass the SSCP exam and succeed in real cybersecurity roles.
Bob Salmans
AssociateLabs
Cybersecurity Fundamentals (ITCA)
This ITCA - Cybersecurity Fundamentals training covers how to perform the basic, professional tasks required of an entry-level IT professional in a cybersecurity capacity. Although earning the ITCA Cybersecurity Fundamentals certification is valuable for cybersecurity hopefuls, the training is also excellent for non-IT professionals and teams who need a well-rounded understanding of the threats that exist in the modern world, how best to avoid them, and what to do if there is a successful attack against your network.
James Conrad
3
Certification tier
Tier 3 — Professional Certifications
Advanced credentials for the engineers who own design, escalation, and complex environments.
Professional
CCNP Security
This CCNP Security training is designed to help you get comfortable with the 300-710 SNCF exam objectives, and earn your CCNP Security certification. Taught by networking expert Keith Barker and cybersecurity professional Bob Salmans, this course focuses on securing networks with Cisco Firewalls, including Firepower Threat Defense and Management Center. This training is ideal for Network Security Engineers and System Administrators seeking rigorous 300-710 SNCF exam prep, as well as IT managers looking for a streamlined onboarding tool or a high-level Cisco training resource for their technical teams.
Keith Barker, Bob Salmans
Professional
CRISC
This ISACA CRISC training is designed to help you earn your Certified in Risk and Information Systems Control credential. This course helps you learn to identify IT risks, build threat models, and align technology with business goals. Once you've completed this course, you'll know how to design effective control frameworks, manage vendor risk, and handle data lifecycles from start to finish. You'll also gain the skills to analyze risk appetite, report metrics through heatmaps and dashboards, and lead disaster recovery efforts.
Bob Salmans
Professional
FortiOS Administrator
This FortiOS 7.6 Administrator exam training prepares network administrators and security engineers for managing Fortinet firewalls. Configure dynamic routing, set up failover and ECMP routes, and manage DHCP services on FortiGate devices. Take this training and you’ll build the skills needed to secure and optimize enterprise networks using Fortinet’s powerful security infrastructure — plus, towards earning your Fortinet Certified Professional (FCP) - Secure Networking certification.
Keith Barker
Professional
CISA
This CISA online training prepares you for the Certified Information Systems Auditor certification. The course follows ISACA’s exam blueprint: you’ll learn audit standards and risk‑based planning, manage IT governance and strategy, guide systems through acquisition, development and implementation, oversee operations and business resilience, and protect information assets. Build hands‑on skills in evidence collection, analytics and reporting through engaging videos, practice exams, and real‑world scenarios, all while preparing for the CISA exam.
Bob Salmans
Professional
CISSP
Get ready to earn your ISC2 CISSP certification. This course covers all eight CISSP domains in clear, easy-to-follow lessons. Learn governance frameworks, secure design principles, and incident response while sharpening risk analysis, policy writing, and business continuity planning. Along the way, you’ll access unlimited CISSP practice exams and our downloadable CISSP study guide PDF to stay organized and on track. Whether you prefer a structured CISSP bootcamp-style, or flexible self-paced learning, this training helps you prepare smarter, stay focused, and get certified with confidence.
Bob Salmans
Professional
CCSP
This CCSP training prepares you to master the six domains of the ISC2 exam outline, focusing on the design, management, and protection of cloud data and infrastructure. You will gain a technical understanding of cloud architecture, security operations, and the implementation of robust security controls. This course covers critical areas including risk management, legal compliance, and the security of cloud platform components, providing the expert-level knowledge required to secure enterprise environments and earn your certified cloud security professional certification.
Bob Salmans
4
Certification tier
Tier 4 — Expert & Specialty Certifications
Expert tracks and specialty credentials for architects and niche platform owners.
Expert
SC-100
This Microsoft Certified: Cybersecurity Architect Expert (SC-100) training covers how to design a large network's protective security architecture, grounded in the Zero Trust strategy. You'll master the Microsoft Cybersecurity Reference Architecture (MCRA) and Zero Trust principles to design resilient security strategies for SaaS, PaaS, and IaaS environments. As you learn to translate complex requirements into technical safeguards (from Entra Global Secure Access to advanced identity and data protection) you'll gain the high-level skills necessary to secure enterprise infrastructures and pass the SC-100 exam.
Bob Salmans
ExpertLabs
CompTIA SecurityX (CAS-005)
Senior security staff often understand the technology but struggle to turn it into governance, risk, and budget decisions leadership will fund. This CompTIA SecurityX (CAS-005) training helps IT Directors close that gap by moving security architects and technical leads from implementation thinking to executive-level oversight. Learners work through governance frameworks like COBIT 2019 and ITIL, configuration and change management, GRC, data governance, threat modeling, cloud and zero trust architecture, threat hunting, and incident response. Realistic scenarios include evaluating an RFC for a subcontractor FTP share and framing a Windows 11 licensing rollout in budget terms. Your team comes away able to vet changes for risk before they reach production and present security proposals in language the C-suite will act on. SecurityX is DoD 8140/8570-approved, which makes this course a practical fit for government teams and contractors with role-based certification requirements. Virtual labs cover sandboxing in Active Directory, infrastructure as code with Terraform and PowerShell, and threat intelligence work in MISP. At about 26 hours across 32 skills, most under an hour each, the course fits weekly study blocks alongside normal workloads. Training Managers can use team reporting to follow per-learner progress and completion and export completion records for audit evidence.
Erik Choron
Specialist
AWS Certified Security Specialty
Prepare for the AWS Certified Security Specialty (SCS-C03) certification with expert-led training. Learn to secure AWS environments by managing access controls with IAM Roles Anywhere, protecting data through Amazon Security Lake, and responding to threats using Amazon CodeGuru Security. In this course, you'll cover securing GenAI applications and leveraging Amazon Q Developer alongside advanced networking like AWS Verified Access and Layer 3-7 firewall rules. This course covers essential tools and techniques, including AWS Verified Permissions, to safeguard cloud systems and make you stand out as a candidate for cloud security roles. This AWS training is ideal for cloud administrators and teams looking to enhance security skills or onboard new team members.
Scott Pletcher
Recently added
Newest Releases
The latest Cybersecurity training added to the catalog — new courses land here within a day of publication.
Vendor coverage
Cybersecurity Training by Vendor
The vendors behind the cybersecurity catalog — each vendor page maps its full certification landscape.
Professional
Professional
Professional
Associate
Expert
Associate
Associate
AssociateLabs
Professional
EntryLabs
Expert
Associate
Associate
Entry
Labs
ProfessionalLabs
ProfessionalLabs
Associate
ExpertLabs
Hands-on Cybersecurity practice
Human-led training is the point: engineers practice real skills with expert guidance, not just video playback.
Why CBT Nuggets
How CBT Nuggets is different for Cybersecurity teams
The platform features IT directors comparing training platforms ask about most often.
Full catalog
More Cybersecurity Courses
Everything else in the Cybersecurity catalog beyond the curated sections above.
AI compliance
Duration: 3hPreview a free skill
Labs
ProfessionalLabs
CMMC
Duration: 6hPreview a free skill
Professional
ProfessionalLabs
Professional
Professional
Professional
Professional
Associate
ProfessionalLabs
Taught by IT professionals
Cybersecurity training your team learns from
Built and taught by engineers with decades of experience running real-world IT infrastructure — not crowdsourced contributors.
Erik Choron
Offensive Security & Security Operations
Keith Barker
Networking & Network Security
Team outcome
Audit-ready training visibility
Manager reporting gives IT leaders a clearer view of assigned training, completion progress, and certification coverage.
What the team gets: Compliance-sensitive teams have training evidence before a review, renewal, or internal governance checkpoint.
Frequently asked questions about Cybersecurity training
Common questions IT directors ask when evaluating Cybersecurity training for their team.
Which cybersecurity training should our team start with?
Start with threats, attacks, vulnerabilities, cryptography, and secure design for shared vocabulary, then split into SOC, cloud security, GRC, or penetration testing by role.
Does this page include penetration testing?
Yes. It includes penetration testing foundations, tools, planning, scanning, Kali, PEN-100, PEN-103, and PEN-200 paths.
How should managers organize cybersecurity training?
Assign SOC/incident response to analysts, pentesting to red-team roles, cloud security to cloud engineers, and GRC/CMMC paths to governance and compliance teams.
How do you measure ROI on cybersecurity training?
Track role coverage for incident response, vulnerability testing, cloud hardening, compliance evidence, and risk ownership.
Can CBT Nuggets support cybersecurity training for teams?
Yes. Managers can assign paths by security role, track completion, and document readiness for audits and operations.