Security & Infrastructure
Cybersecurity
Protect systems and data from attacks with practical security techniques and tools.
Prerequisites
No prior experience required — open to beginners.
Certificate
Awarded by Rescue Academy on successful completion of the program's assessments and final project.
Learn Online — Live Classes
Register, receive your schedule, and join live instructor-led Cybersecurity classes on Zoom. Assignments, instructor feedback, and a certificate on completion.
Learn In Person
Attend Cybersecurity classes in person in Juba with hands-on labs, instructor mentorship, and a certificate on completion.
What You'll Learn
- Account security: passwords, password managers and MFA
- Phishing and social engineering defence
- Device, network and system hardening
- Logging, detection and incident response
- Security policies, awareness and data protection
- Risk management with the NIST Cybersecurity Framework 2.0 and CIS Controls
- Vulnerability management and authorised, ethical testing in a lab
Program Objectives
- Protect people, accounts and devices against common attacks
- Secure small office networks, systems and cloud services
- Detect and respond to incidents and preserve evidence
- Assess and manage cyber risk with recognised frameworks
- Work legally and ethically, testing only with authorisation
Who It's For
- Office staff and managers who want to protect their organisation
- IT support staff moving into security
- Students preparing for entry-level cybersecurity roles
Where You'll Use It
- NGOs, schools and small businesses
- IT support and managed service providers
- Government and financial service offices
Curriculum
Instructor-led, practical training. Each level is a block of 4, 8 or 12 weeks; every module ends with a practical activity and an assessment, and every level with a project.
Module 1: Passwords, MFA and Account Safety 10 h
Protect accounts with long unique passwords, a password manager and multi-factor authentication. 3 lessons
Module 2: Phishing and Social Engineering Awareness 11 h
Recognise and report phishing messages, fake calls and other tricks that target people rather than technology. 3 lessons
Module 3: Device Security 10 h
Keep computers and phones updated, locked, encrypted and backed up. 3 lessons
Module 4: Safe Browsing and Data Privacy 11 h
Use the web, Wi-Fi and social media safely and control what personal information you share. 3 lessons
Module 5: Incident Response Basics 10 h
Respond correctly when an account or device is compromised, and recover safely. 3 lessons
Level project: Personal and Small-Office Security Check-Up
Module 1: Network Security Fundamentals 15 h
Protect a small network with firewalls, secure Wi-Fi, segmentation and secure router management. 3 lessons
Module 2: System Hardening and Access Management 16 h
Reduce attack surface on computers and accounts with secure configuration, patch management and least privilege. 3 lessons
Module 3: Web and Application Security Awareness 16 h
Understand common web application weaknesses and how to choose, configure and procure software securely. 3 lessons
Module 4: Logging and Detecting Suspicious Activity 13 h
Collect and review logs to notice attacks early. 3 lessons
Module 5: Security Policies and Awareness 13 h
Write short, practical policies and help staff follow them. 3 lessons
Module 6: Small Organisation Security Assessment 17 h
Assess an organisation against essential safeguards, with permission, and recommend improvements. 3 lessons
Level project: Small Organisation Security Assessment
Module 1: Security Governance and Risk Management 22 h
Govern cybersecurity as a business risk using the NIST Cybersecurity Framework 2.0. 4 lessons
Module 2: Vulnerability Management and Authorised Testing 22 h
Find and fix weaknesses systematically, and understand the legal and ethical rules for security testing. 4 lessons
Module 3: Incident Response and Digital Evidence 22 h
Prepare for, handle and learn from incidents, preserving evidence properly. 4 lessons
Module 4: Identity, Email and Cloud Security 24 h
Secure the identities, email and cloud services most organisations now depend on. 4 lessons
Module 5: Data Protection, Ethics and Security Culture 20 h
Protect personal data, act ethically as a security professional and build a lasting security culture. 4 lessons
Module 6: Capstone: Organisational Security Programme 30 h
Combine the level into a complete, realistic security programme for an organisation. 5 lessons
Level project: Organisational Security Programme
Final practical project
Organisational Security Programme
A complete, authorised security programme for an organisation: CSF 2.0 profiles, risk register, vulnerability, identity and email plans, a tested incident response plan and a costed 12-month roadmap presented to leadership.
Deliverables
- Current and target CSF 2.0 profiles and a risk register
- Vulnerability management and identity, email and cloud hardening plans
- Incident response plan and tabletop exercise report
- Costed 12-month roadmap and leadership presentation
Assessed on
- Priorities are evidence-based and linked to the mission
- Plans fit the organisation's size, skills and budget
- All testing was authorised and in scope
- The presentation is clear to non-technical leaders
Worked Examples
A selection of the visual, practical examples used in this program's lessons — each teaches a different skill.
- Worked calculation How long does a password survive a cracking attempt? Comparing random characters and random-word passphrases by the number of guesses an attacker needs. Beginner · Module 1 · Lesson 2
- Troubleshooting tree Is this message safe to act on? A quick path for deciding what to do with an unexpected email, SMS or chat message. Beginner · Module 2 · Lesson 1
- Step-by-step Responding to a hacked email account The order of actions when someone else has been using your email account. Beginner · Module 5 · Lesson 1
- Data and chart Spotting password guessing in sign-in logs Failed sign-ins per hour reveal a guessing attack at 04:00 — and one success that needs urgent action. Intermediate · Module 4 · Lesson 2
- Data and chart A small NGO's top cyber risks Rating risks by likelihood and impact shows where to invest first. Advanced · Module 1 · Lesson 3
- Workflow The vulnerability management cycle How an organisation finds, fixes and verifies weaknesses continuously. Advanced · Module 2 · Lesson 2
Free Course: Cybersecurity Starter
A free, practical introduction to staying safe online: strong passwords and MFA, recognising phishing, securing devices, protecting privacy and what to do after an incident. Free, self-study, about 4 hours — no certificate. The full program above is taught live by an instructor, with practical assignments, assessments and a certificate.
- 1Free lesson 1Passwords, MFA & Account Safety
- 2Free lesson 2Phishing & Social Engineering Awareness
- 3Free lesson 3Device Security: Updates, Antivirus & Backups
- 4Free lesson 4Safe Browsing & Data Privacy Basics
- 5Free lesson 5Intro to Incident Response: What to Do When Hacked
- Final checkQuick Quiz — Cybersecurity Basics
Tools & Technologies
Primary Tools
- Bitwarden or another password manager — Generating and storing unique passwords Practice: Strong account security
- Authenticator apps and security keys — Multi-factor authentication Practice: Protecting accounts against stolen passwords
- Built-in OS security tools (Microsoft Defender, Windows Firewall, Event Viewer) — Protection, hardening and log review Practice: Securing and monitoring computers
Supporting Tools
- Router and cloud admin consoles — Wi-Fi, firewall, sharing and sign-in settings Practice: Secure configuration
- Virtual lab environment — Safe, isolated practice Practice: Hands-on skills without risk to real systems
Professional / Industry Tools
- Vulnerability scanner (lab use) — Authorised discovery of weaknesses Practice: Vulnerability management
- NIST CSF 2.0 and CIS Controls — Frameworks for assessment and planning Practice: Risk-based security programmes
Career Opportunities
- IT support technician
- Network or systems administrator
- Cybersecurity analyst at a bank, telecom, or government office
Practical Projects
- Conduct a personal or small-office security audit and produce a remediation checklist
- Design a short security-awareness training for a small team or organization
- Check whether any of your own accounts appear in a known data breach using a safe, reputable checker, then document and apply a remediation plan (password changes, MFA, password manager adoption)
Problem-Solving Focus
Problem: An employee reuses the same password across multiple accounts, and one of those accounts is exposed in an unrelated data breach
Approach: Check the account against a breach database (Have I Been Pwned), then require a unique password per account via a password manager and enable MFA everywhere it's offered.
Problem: An email looks like it's from a bank or employer, urgently asking to "verify your account"
Approach: Apply a phishing checklist — checking the sender address, hovering over links before clicking, and treating urgency itself as a red flag — then verify through a separate, trusted channel before acting.
Problem: A small organization has no real idea which of its systems or accounts are actually vulnerable
Approach: Run a basic vulnerability scan and a structured security audit rather than guessing, then prioritize fixes by real risk instead of by whatever seems most visible.
Problem: Everyone in a small office shares one admin login and one Wi-Fi password that has never been changed
Approach: Apply least-privilege access control — separate accounts per person with role-appropriate permissions, and a documented password/access policy — instead of one shared credential kept "for convenience."
Ready to register for Cybersecurity?
Register — Learn Online Register — Learn In Person WhatsApp: +211926196668 Email: rescueacademy26@gmail.com