avatarTeri Radichel

Free AI web copilot to create summaries, insights and extended knowledge, download it at here

6004

Abstract

ad_YPo2g.png)"></div> </div> </div> </a> </div><div id="9735" class="link-block"> <a href="https://readmedium.com/how-to-think-about-cybersecurity-7b87ed4357b3"> <div> <div> <h2>How to THINK about cybersecurity</h2> <div><h3>Long term strategies versus short term tactics</h3></div> <div><p>medium.com</p></div> </div> <div> <div style="background-image: url(https://miro.readmedium.com/v2/resize:fit:320/1*NJLH5DVNC-bOZOVo2T56rQ.jpeg)"></div> </div> </div> </a> </div><div id="b38c" class="link-block"> <a href="https://readmedium.com/cloud-governance-221b68d46b3d"> <div> <div> <h2>Cloud Governance</h2> <div><h3>Stories on Cloud Governance by Teri Radichel</h3></div> <div><p>medium.com</p></div> </div> <div> <div style="background-image: url(https://miro.readmedium.com/v2/resize:fit:320/1*X0EkFKdGYXsBEqVWHx9qtA.png)"></div> </div> </div> </a> </div><div id="cfbc" class="link-block"> <a href="https://readmedium.com/the-right-cybersecurity-training-8ababe19df00"> <div> <div> <h2>The right cybersecurity training</h2> <div><h3>Teach your team to make decisions that prevent data breaches</h3></div> <div><p>medium.com</p></div> </div> <div> <div style="background-image: url(https://miro.readmedium.com/v2/resize:fit:320/1*UPjoSp7oHIW2ADORYtaeCg.jpeg)"></div> </div> </div> </a> </div><p id="b0b7">If you want to be on the technical side of defending and attacking networks, you will want to learn cybersecurity fundamentals. I’ve written some posts that dive into some of the fundamentals of cybersecurity that might interest you.</p><div id="07b8" class="link-block"> <a href="https://readmedium.com/cybersecurity-math-34485d45c7d0"> <div> <div> <h2>Cybersecurity Math</h2> <div><h3>CM.1 How you can use math to reconcile cybersecurity</h3></div> <div><p>medium.com</p></div> </div> <div> <div style="background-image: url(https://miro.readmedium.com/v2/resize:fit:320/1*QUqD9Ydk-gzWkheORmuKsg.png)"></div> </div> </div> </a> </div><div id="28c0" class="link-block"> <a href="https://readmedium.com/secure-code-by-design-4ee8814021e6"> <div> <div> <h2>Secure Code By Design</h2> <div><h3>Programming tactics that prevent vulnerabilities and defend applications against cyber attacks</h3></div> <div><p>medium.com</p></div> </div> <div> <div style="background-image: url(https://miro.readmedium.com/v2/resize:fit:320/1*0H4nknh2pL8H8eVq8rkdjQ.jpeg)"></div> </div> </div> </a> </div><div id="a1c0" class="link-block"> <a href="https://readmedium.com/faulty-security-control-logic-f6ba70453867"> <div> <div> <h2>Faulty Security Control Logic</h2> <div><h3>Just because a security control has a potential attack vector doesn’t make it useless</h3></div> <div><p>medium.com</p></div> </div> <div> <div style="background-image: url(https://miro.readmedium.com/v2/resize:fit:320/1*e0RkZ3RNYqkoUwiWjDmF7w.png)"></div> </div> </div> </a> </div><p id="4ed3">If you want to start learning networking and how to look at logs from a security perspective and design effective firewall rules, I would recommend setting up a home network. I have some posts on doing that with pfSense and a UDM Pro. I’ve tried other products and these are the ones that fit my budget and work effectively at the moment for a home network. Every network device is constantly under attack so watch for vulnerabilities and keep your software and firmware up to date. If you cannot afford these devices you can use an open source version of pfSense on your own hardware.</p><div id="8001" class="link-block"> <a href="https://readmedium.com/configuring-pfsense-and-netgate-devices-b58fb6a1b078"> <div> <div> <h2>Configuring pfSense and Netgate Devices</h2> <div><h3>Stories on various settings available in PFSense and Netgate devices running it</h3></div> <div><p>medium.com</p></div> </div> <div> <div style="background-image: url(https://miro.readmedium.com/v2/resize:fit:320/0*1vTE3US8J-ylVWxR.png)"></div> </div> </div> </a> </div><p id="e97d">If you want to learn Cloud Security and AWS Security, I’m working through a whole series on AWS Security here. I’ve had a few fits and starts as I worked through the issues of setting up a security cloud environment. I also have a free open-source code repo associated with these posts. You will learn not only how to write the code but how I troubleshoot problems and think about how an attacker might get into my cloud environment. Ultimately I want to get to the point where I’m automating cybersecurity metrics in this environment but there’s a lot of ground to cover.</p><div id="6070" class="link-block"> <a href="https://readmedium.com/automating-cybersecurity-metrics-890dfabb6198"> <div> <div> <h2>Automating Cybersecurity Metrics (ACM)</h2> <div><h3>A series

Options

of blog posts on cybersecurity metrics and security automation</h3></div> <div><p>medium.com</p></div> </div> <div> <div style="background-image: url(https://miro.readmedium.com/v2/resize:fit:320/1*L9lEIsaWt6xm2Op2ww-G5w.png)"></div> </div> </div> </a> </div><p id="a33a">If you want to set up a website on AWS and secure your GitHub repositories I have posts on that too. Everything is always a work in progress so you may be reading this before it’s done.</p><div id="7355" class="link-block"> <a href="https://readmedium.com/components-for-a-static-web-site-on-aws-8ed895a8cf0f"> <div> <div> <h2>Components of a Static Web Site on AWS</h2> <div><h3>ACM.227 Route 53, TLS, S3, API Gateway, CloudFront, WAF, and triggering Lambda Functions</h3></div> <div><p>medium.com</p></div> </div> <div> <div style="background-image: url(https://miro.readmedium.com/v2/resize:fit:320/1*VRsacGrH9UkJT8HHnDSKZQ.png)"></div> </div> </div> </a> </div><div id="35f6" class="link-block"> <a href="https://readmedium.com/git-and-github-security-8728bef0a057"> <div> <div> <h2>Git and GitHub Security</h2> <div><h3>Stories about securing git, GitHub, and your code</h3></div> <div><p>medium.com</p></div> </div> <div> <div style="background-image: url(https://miro.readmedium.com/v2/resize:fit:320/1*LQ5l21ueAnPOGOnhukzTCQ.png)"></div> </div> </div> </a> </div><p id="ee77">If you want to be a penetration tester then check out these posts. Penetration testing and security assessments are something I do for a living, but I recommend starting on the builder or securing side of cybersecurity before moving into penetration testing to be a better pentester. Understanding how things are built and managed will provide you better information to perform useful attacks. Also, I’ve simply written much more about security things than attacking things to date, but I have more posts on penetration testing coming after I work through my AWS account and web site setup. How many stories you see depends on where I’m at by the time you read this.</p><div id="d689" class="link-block"> <a href="https://readmedium.com/pentesting-and-bug-bounties-46bd69ef486d"> <div> <div> <h2>Pentesting and Bug Bounties</h2> <div><h3>Stories about penetration testing, cloud pentesting, security testing, and cloud security assessments by Teri Radichel</h3></div> <div><p>medium.com</p></div> </div> <div> <div style="background-image: url(https://miro.readmedium.com/v2/resize:fit:320/1*nT0wIyzaJObeDS9FWJzAkA.png)"></div> </div> </div> </a> </div><p id="6b40">I hope those resources are helpful to anyone trying to learn and get a job in cybersecurity. Even if you aren’t working directly on the cybersecurity team, these stories will provide a better understanding of how cybersecurity works and what your security team is worrying about when they won’t let you do that risky thing you are trying to do. If you have a home network, you will be more secure at home and better protect your bank accounts and other people’s systems that may be attacked by your firewall. Understanding cybersecurity may help you better protect your business and if you are allowed to vote for elected officials in your country, you will be able to make more informed decisions when cybersecurity topics make their way into politics. If you plan to work for a large corporation or the government, you will be able to help stop insider threats and espionage that can harm your organization.</p><p id="ae6c">If you need more help, I have some services listed on LinkedIn at <a href="https://linkedin.com/in/teriradichel">https://linkedin.com/in/teriradichel</a> and on the home page of this blog: <a href="https://medium.com/cloud-security">https://medium.com/cloud-security</a>.</p><p id="6c11">Happy reading and learning!</p><p id="efa4">Follow for updates.</p><p id="4a3a">Teri Radichel | <i>© <a href="https://2ndsightlab.com/?source=post_page---------------------------">2nd Sight Lab</a> 2023</i></p><div id="8b5f"><pre><span class="hljs-section">About Teri Radichel:

⭐️ Author: Cybersecurity Books
⭐️ Presentations: Presentations by Teri Radichel
⭐️ Recognition: SANS Award, AWS Security Hero, IANS Faculty
⭐️ Certifications: SANS ~ GSE 240
⭐️ Education: BA Business, Master of Software Engineering, Master of Infosec
⭐️ Company: Penetration Tests, Assessments, Phone Consulting ~ 2nd Sight Lab</pre></div><div id="caae"><pre><span class="hljs-section">Need Help With Cybersecurity, Cloud, or Application Security?
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~</span>
🔒 Request a penetration test or security assessment
🔒 Schedule a consulting call
🔒 Cybersecurity Speaker for Presentation</pre></div><div id="5a42"><pre>Follow <span class="hljs-keyword">for</span> more stories like <span class="hljs-keyword">this</span>:

❤️ Sign Up my Medium Email List ❤️ Twitter: <span class="hljs-meta">@teriradichel</span> ❤️ LinkedIn: https:<span class="hljs-comment">//www.linkedin.com/in/teriradichel</span> ❤️ Mastodon: <span class="hljs-meta">@teriradichel</span><span class="hljs-meta">@infosec</span>.exchange ❤️ Facebook: 2nd Sight Lab ❤️ YouTube: @2ndsightlab</pre></div><figure id="faf5"><img src="https://cdn-images-1.readmedium.com/v2/resize:fit:800/0*H9Ew1KCl-29nZiPR.jpeg"><figcaption></figcaption></figure></article></body>

Learning Cybersecurity

Cybersecurity is a huge topic ~ where do you start?

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

⚙️ Check out my series on Automating Cybersecurity Metrics. The Code.

🔒 Related Stories: Cybersecurity | AWS Security | Appsec | Secure Code

💻 Free Content on Jobs in Cybersecurity | ✉️ Sign up for the Email List

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

This is a compilation of some of my post that might help someone who is trying to learn cybersecurity. Cybersecurity is a huge topic with many different paths to explore.

In my case, I started learning when I ran an e-commerce business, experienced a data breach, and started trying to learn cybersecurity any way I could.

First, I started reading books. I’ve reviewed some books on this page, but I also wrote my own book which a primer on cybersecurity at a high and fairly non-technical level. Cybersecurity is really about risk management. I like to say, “How many chances are you giving the attacker?” You’ll never plug all the holes but you want to plug as many as you can, and be able to effectively monitor what you need to leave open.

It’s also a good idea to understand how threat actors operate around the world and locally. The books I’ve reviewed include a lot of different aspects of cybersecurity and my own book sums it up at a high level. Although it the title is “Cybersecurity for Executives in the Age of Cloud” it could have been “An Executive Summary of Cybersecurity in the Age of Cloud.” I’ve had experienced security professionals and developers read it and give positive feedback, so it’s not only for executives.

Back when I started out, there were few training options, but I ran across SANS Institute and ultimately started following and reading their newsletters. Then I went on to take some classes there and get some certifications. I have some of the certifications I got listed on this page, which also includes information on getting a job in cybersecurity or recruiting cybersecurity professionals. There’s no paywalls on those stories, by the way. They are all free for anyone to read.

When you’re learning cybersecurity part of it is how to think about cybersecurity. It’s not about hacking into systems or changing firewall rules. It’s about designing systems that meet business needs to get business done while protecting business assets. In addition, cybersecurity is not about buying a product, setting it up, and you’re done. It’s a matter of constantly revisiting your configurations, monitoring what the attackers are doing, and adjusting accordingly.

When you design your systems you need to think about how you can design them in a way that they are manageable. Sometimes there are a myriad of things to configure and how will you make sure things are configured the way they are supposed to be? If you are working at a company with tens of thousands of developers, how will you ensure they are all abiding by the corporate standards and compliance rules? How will you make sure the security team can see all the logs and the logs have what they need in them if a breach occurs?

Here are some posts along those lines:

If you want to be on the technical side of defending and attacking networks, you will want to learn cybersecurity fundamentals. I’ve written some posts that dive into some of the fundamentals of cybersecurity that might interest you.

If you want to start learning networking and how to look at logs from a security perspective and design effective firewall rules, I would recommend setting up a home network. I have some posts on doing that with pfSense and a UDM Pro. I’ve tried other products and these are the ones that fit my budget and work effectively at the moment for a home network. Every network device is constantly under attack so watch for vulnerabilities and keep your software and firmware up to date. If you cannot afford these devices you can use an open source version of pfSense on your own hardware.

If you want to learn Cloud Security and AWS Security, I’m working through a whole series on AWS Security here. I’ve had a few fits and starts as I worked through the issues of setting up a security cloud environment. I also have a free open-source code repo associated with these posts. You will learn not only how to write the code but how I troubleshoot problems and think about how an attacker might get into my cloud environment. Ultimately I want to get to the point where I’m automating cybersecurity metrics in this environment but there’s a lot of ground to cover.

If you want to set up a website on AWS and secure your GitHub repositories I have posts on that too. Everything is always a work in progress so you may be reading this before it’s done.

If you want to be a penetration tester then check out these posts. Penetration testing and security assessments are something I do for a living, but I recommend starting on the builder or securing side of cybersecurity before moving into penetration testing to be a better pentester. Understanding how things are built and managed will provide you better information to perform useful attacks. Also, I’ve simply written much more about security things than attacking things to date, but I have more posts on penetration testing coming after I work through my AWS account and web site setup. How many stories you see depends on where I’m at by the time you read this.

I hope those resources are helpful to anyone trying to learn and get a job in cybersecurity. Even if you aren’t working directly on the cybersecurity team, these stories will provide a better understanding of how cybersecurity works and what your security team is worrying about when they won’t let you do that risky thing you are trying to do. If you have a home network, you will be more secure at home and better protect your bank accounts and other people’s systems that may be attacked by your firewall. Understanding cybersecurity may help you better protect your business and if you are allowed to vote for elected officials in your country, you will be able to make more informed decisions when cybersecurity topics make their way into politics. If you plan to work for a large corporation or the government, you will be able to help stop insider threats and espionage that can harm your organization.

If you need more help, I have some services listed on LinkedIn at https://linkedin.com/in/teriradichel and on the home page of this blog: https://medium.com/cloud-security.

Happy reading and learning!

Follow for updates.

Teri Radichel | © 2nd Sight Lab 2023

About Teri Radichel:
~~~~~~~~~~~~~~~~~~~~
⭐️ Author: Cybersecurity Books
⭐️ Presentations: Presentations by Teri Radichel
⭐️ Recognition: SANS Award, AWS Security Hero, IANS Faculty
⭐️ Certifications: SANS ~ GSE 240
⭐️ Education: BA Business, Master of Software Engineering, Master of Infosec
⭐️ Company: Penetration Tests, Assessments, Phone Consulting ~ 2nd Sight Lab
Need Help With Cybersecurity, Cloud, or Application Security?
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
🔒 Request a penetration test or security assessment
🔒 Schedule a consulting call
🔒 Cybersecurity Speaker for Presentation
Follow for more stories like this:
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 
❤️ Sign Up my Medium Email List
❤️ Twitter: @teriradichel
❤️ LinkedIn: https://www.linkedin.com/in/teriradichel
❤️ Mastodon: @teriradichel@infosec.exchange
❤️ Facebook: 2nd Sight Lab
❤️ YouTube: @2ndsightlab
Learning
Cybersecurity
Training
Education
Topics
Recommended from ReadMedium
avatarHarshad Shah
Cybersecurity Roadmap 2025

How to start cybersecurity in 2025?

6 min read
avatarEmanuele (Ebalo) Balsamo
Threat Intelligence Automation with AI/ML

Exploring AI/ML in Automating Threat Intelligence Processes

6 min read
avatarAdam Goss
The CTI Team: Roles and Responsibilities You Need

Discover the key roles and responsibilities required to build a successful cyber threat intelligence team.

17 min read
avatarAnu Shreya
Popular AI Certifications and Degree Programs to Excel in 2025

As AI is revolutionizing the industry, staying updated with AI skills is crucial. Explore the best AI certification and degree programs…

5 min read
avatarProf Bill Buchanan OBE FRSE
The Foundation of Cybersecurity: D3FEND™ 1.0

The New “Bible of Cybersecurity”

3 min read
avatarCyber Sam
My Experience Passing the ISC2 SSCP

In this article I’ll lay out my experience from revising, taking and receiving the ISC2 Systems Security Certified Practitioner (SSCP)

6 min read