All Courses

An introduction to the Saudi Central Bank's (SAMA) Cyber Security Framework: why it exists, its four control domains, and what it means for your everyday work at a regulated financial institution.

Learn the most common fraud schemes targeting employees and customers — from Business Email Compromise to invoice fraud — and the habits that prevent them.

Spot phishing, spear-phishing, smishing and vishing before they cost you — and know exactly what to do if you've already clicked.

Phishing is just one form of social engineering. Learn the psychological tactics attackers use in person, by phone, and in writing — and how to push back safely.

The practical habits behind good credential hygiene: passphrases, multi-factor authentication, password managers, and least-privilege access.

How ransomware actually spreads, the early warning signs before encryption hits, and the response habits that limit the damage.

How to classify, handle, and dispose of sensitive data responsibly — and the basics of operating under data protection regulations.

A practitioner-level foundation for anyone stepping into a security role: networking internals, OS hardening, applied cryptography, vulnerability management, and the frameworks (NIST CSF, ISO 27001) that govern how security programs actually run.

A structured look at how real red team engagements run: MITRE ATT&CK-driven planning, command-and-control infrastructure and OPSEC, the initial-access-through-lateral-movement chain, and the purple-teaming feedback loop that turns an engagement into lasting defensive improvement.

Structured, methodology-driven ethical hacking training for web and mobile applications: the OWASP Web Security Testing Guide and Top 10 in depth, authentication/authorization and business logic flaws, mobile testing under OWASP MASVS/MSTG, and API security — with an emphasis on findings that actually get fixed.