Professional depth
Advanced focuses on architecture choices, evidence quality, tradeoffs, ownership, validation, governance, and communication.
High SchoolAdvanced TrackProfessional Defensive Learning
CyberShield Academy
High School Advanced
Design, defend, monitor, and improve secure fictional systems through professional ethics, architecture, threat modeling, detection, response, cloud, identity, risk, privacy, automation, advanced labs, and portfolio projects.
Safe by design
Every system, identity, log, alert, supplier, incident, decision, and outcome remains fictional, defensive, and authorized.
Portfolio outcome
Every module contributes a substantial artifact suitable for learning, applications, interviews, and a final capstone.
Advanced Mission
Think Like a Defensive Security Professional
Advanced students will review fictional systems before and after problems occur. They will compare design options, map trust, define detection coverage, coordinate response, explain uncertainty, govern risk, and produce evidence-based portfolio work.
Safety and Authorization Boundary
Defensive Learning Only
Do not test, scan, access, change, bypass, or investigate real systems without explicit written authorization. Do not use real credentials, suspicious files, phishing links, private messages, employee records, school records, or confidential information. Use only the fictional evidence supplied inside CyberShield labs.
Advanced Learning Workflow
Six Steps Used throughout the Track
Define the authorized problem
Identify the fictional mission, written scope, systems, data, users, business needs, safety limits, owners, and decision authority.
Map architecture and trust
Document fictional assets, identities, services, data flows, trust boundaries, dependencies, inherited controls, and resilience needs.
Model risk and threats
Identify fictional harmful events, abuse cases, weaknesses, assumptions, likelihood, impact, mitigations, and evidence gaps.
Design visibility and detection
Select fictional evidence sources, coverage goals, detection logic, triage context, validation tests, metrics, and improvement loops.
Coordinate response
Separate fictional cases, assign authority, preserve service, plan containment and recovery, communicate, and validate outcomes.
Govern and improve
Record fictional risk, privacy, compliance, automation, ownership, residual uncertainty, portfolio evidence, and continuous improvement.
Professional Competency Map
What Advanced Students Will Learn to Produce
Architecture thinking
Design fictional systems with layered controls, trust boundaries, identity, visibility, resilience, secure defaults, and explicit tradeoffs.
Threat and risk reasoning
Connect fictional assets, harmful events, weaknesses, likelihood, impact, controls, options, owners, and residual risk without unsupported certainty.
Detection and triage
Create fictional coverage goals, evidence requirements, detection logic, validation tests, tuning decisions, case boundaries, and handoffs.
Incident leadership
Coordinate fictional scope, authority, containment, continuity, evidence, communication, recovery, validation, review, and improvement.
Cloud and identity design
Evaluate fictional shared responsibility, effective access, federation, conditional controls, storage, networks, logging, keys, suppliers, and resilience.
Governance and privacy
Build fictional policies, risk registers, audit evidence, exceptions, data inventories, retention decisions, privacy reviews, and leadership recommendations.
Safe automation
Plan fictional enrichment, ticketing, workflows, approval gates, rollback, failure handling, metrics, and human oversight without unsafe actions.
Professional communication
Explain fictional evidence, architecture, risk, decisions, validation, limitations, and next actions to technical and nontechnical audiences.
Advanced Curriculum
Twenty Professional-Level Modules
Every module card below includes all ten exact lesson titles, from A1.1 through A20.10, plus its 25-question module test, professional focus, and portfolio-ready outcome.
Advanced Phase
Professional Foundations
A110 lessons + test
Advanced Cyber Ethics and Legal Boundaries
Establish professional-level ethics, authorization, safe research, disclosure concepts, and legal boundaries.
Professional focus
Authorization, written scope, disclosure, sensitive information, research boundaries, AI ethics, trust, and professional communication.
Portfolio outcome
Ethics and authorization decision brief
Individual Lessons
10 lessonsA1.1Professional Responsibility in CybersecurityA1.2Authorization, Scope, and Written PermissionA1.3Legal Risk and ConsequencesA1.4Responsible Disclosure ConceptsA1.5Handling Sensitive Information EthicallyA1.6Research Boundaries and Safe EnvironmentsA1.7Conflicts of Interest and TrustA1.8Ethics in AI and AutomationA1.9Professional Communication During RiskA1.10Advanced Ethics Case LabTestA1 Module Test — 25 Questions
A210 lessons + test
Security Architecture
Teach how secure systems are designed with layers, segmentation, identity, logging, and resilience.
Professional focus
Defense-in-depth, trust boundaries, security zones, identity-centered design, visibility, resilience, secure defaults, and tradeoffs.
Portfolio outcome
Security architecture design package
Individual Lessons
10 lessonsA2.1What Security Architecture MeansA2.2Defense-in-Depth DesignA2.3Trust Boundaries and Security ZonesA2.4Network Segmentation StrategyA2.5Identity-Centered ArchitectureA2.6Logging and Visibility by DesignA2.7Resilience and Recovery PlanningA2.8Secure Defaults and Hardening StrategyA2.9Architecture Tradeoffs and ConstraintsA2.10Security Architecture Design LabTestA2 Module Test — 25 Questions
A310 lessons + test
Threat Modeling
Teach students to identify assets, threats, trust boundaries, abuse cases, risks, and mitigations safely.
Professional focus
Assets, data flows, trust boundaries, threat questions, abuse cases, risk ranking, mitigations, assumptions, and review.
Portfolio outcome
Threat model and mitigation map
Individual Lessons
10 lessonsA3.1Why Threat Modeling ExistsA3.2Assets, Actors, and Entry PointsA3.3Data Flows and Trust BoundariesA3.4Abuse Cases and Misuse ThinkingA3.5Threat Categories ConceptuallyA3.6Risk Ranking in Threat ModelsA3.7Choosing MitigationsA3.8Documenting Assumptions and LimitsA3.9Reviewing a Threat ModelA3.10Threat Modeling Workshop LabTestA3 Module Test — 25 Questions
A410 lessons + test
Advanced Networking Defense
Go deeper into network defense strategy, segmentation, monitoring, secure remote access, and defensive design.
Professional focus
Network architecture, firewall strategy, segmentation, IDS/IPS concepts, remote access, baselines, monitoring, and resilience.
Portfolio outcome
Defensive network architecture review
Individual Lessons
10 lessonsA4.1Defensive Network ArchitectureA4.2Segmentation and Microsegmentation ConceptsA4.3Firewall Strategy and Rule HygieneA4.4IDS/IPS Concepts and Network VisibilityA4.5Secure Remote Access ConceptsA4.6Wireless Defense StrategyA4.7Network Baselines and Anomaly ConceptsA4.8DNS Security ConceptsA4.9Network Resilience and RedundancyA4.10Advanced Network Defense LabTestA4 Module Test — 25 Questions
Advanced Phase
Detection and Response
A510 lessons + test
Detection Engineering
Teach how defenders design, test, tune, and improve detection logic conceptually with fake data.
Professional focus
Detection goals, evidence sources, logic design, testing, tuning, coverage, false positives, validation, and improvement.
Portfolio outcome
Detection plan and validation record
Individual Lessons
10 lessonsA5.1What Detection Engineering MeansA5.2Data Sources for DetectionA5.3Detection Logic ConceptsA5.4Behavior-Based Detection ThinkingA5.5False Positives and False NegativesA5.6Detection Tuning and ContextA5.7Mapping Alerts to Defender QuestionsA5.8Testing Detections Safely With Fake DataA5.9Detection DocumentationA5.10Detection Design LabTestA5 Module Test — 25 Questions
A610 lessons + test
SIEM and Alert Triage Concepts
Teach SIEM concepts, alert review, correlation, triage, escalation, and analyst workflow.
Professional focus
Normalization, correlation, enrichment, triage, case boundaries, escalation, dashboards, handoffs, and quality.
Portfolio outcome
SIEM triage and case package
Individual Lessons
10 lessonsA6.1What a SIEM DoesA6.2Log Collection and Normalization ConceptsA6.3Correlation and Alert RulesA6.4Alert Severity and PriorityA6.5Triage Questions and Evidence ReviewA6.6Escalation CriteriaA6.7Case Management and NotesA6.8Dashboards and MetricsA6.9Reducing Noise and Improving QualityA6.10SIEM Triage LabTestA6 Module Test — 25 Questions
A710 lessons + test
Incident Response Lifecycle
Develop professional incident response thinking across planning, technical containment, communication, recovery, and improvement.
Professional focus
Roles, playbooks, scoping, containment, recovery, evidence, communication, post-incident review, metrics, and simulation.
Portfolio outcome
Incident response playbook and tabletop
Individual Lessons
10 lessonsA7.1Advanced Incident Response RolesA7.2Preparation and Playbook DesignA7.3Detection and ScopingA7.4Containment StrategyA7.5Eradication and Recovery PlanningA7.6Stakeholder CommunicationA7.7Evidence Preservation ConceptsA7.8Post-Incident ReviewA7.9Metrics and Continuous ImprovementA7.10Incident Response Simulation LabTestA7 Module Test — 25 Questions
A810 lessons + test
Digital Forensics Concepts
Teach forensic reasoning, timelines, artifacts, preservation concepts, and reporting without teaching invasive techniques.
Professional focus
Scope, evidence integrity, chain of custody, timelines, artifact concepts, correlation, reporting, ethics, and limitations.
Portfolio outcome
Forensic reasoning and timeline report
Individual Lessons
10 lessonsA8.1Forensic Questions and Investigation ScopeA8.2Evidence Integrity and Chain of CustodyA8.3Timeline Analysis ConceptsA8.4Endpoint Artifact ConceptsA8.5Memory and Storage Evidence ConceptsA8.6Browser and Account Activity ConceptsA8.7Log Correlation for ForensicsA8.8Forensic Reporting StandardsA8.9Ethical Limits in InvestigationsA8.10Forensics Reasoning LabTestA8 Module Test — 25 Questions
A910 lessons + test
Malware Defense Concepts
Explain malware behavior only from a defensive viewpoint: prevention, detection, containment, recovery, and communication.
Professional focus
Defense boundaries, behavior categories, indicators, endpoint and network containment, backups, monitoring, awareness, and risk communication.
Portfolio outcome
Malware-defense case response package
Individual Lessons
10 lessonsA9.1Malware Defense BoundariesA9.2Malware Behavior Categories ConceptuallyA9.3Indicators of Compromise ConceptsA9.4Endpoint Containment StrategyA9.5Network Containment StrategyA9.6Backup and Recovery After MalwareA9.7User Reporting and AwarenessA9.8Detection and Monitoring IdeasA9.9Communicating Malware RiskA9.10Malware Defense Case LabTestA9 Module Test — 25 Questions
Advanced Phase
Application, Cloud, and Identity
A1010 lessons + test
Advanced Web Security Defense
Teach secure web design and defensive review practices without offensive exploitation steps.
Professional focus
Web architecture, authentication, sessions, authorization, input and output safety, APIs, headers, secrets, logging, and review.
Portfolio outcome
Web defense architecture review
Individual Lessons
10 lessonsA10.1Secure Web Architecture PrinciplesA10.2Authentication and Session DesignA10.3Authorization and Access Control DesignA10.4Input Handling and Output SafetyA10.5API Security ConceptsA10.6Secure Headers and Browser ProtectionsA10.7Secrets and Configuration ManagementA10.8Logging and Monitoring for Web AppsA10.9Web Security Review ProcessA10.10Web Defense Architecture LabTestA10 Module Test — 25 Questions
A1110 lessons + test
Secure Software Architecture
Teach secure development lifecycle, design patterns, dependencies, secrets management, and software risk decisions.
Professional focus
Secure lifecycle, design principles, dependency risk, secrets, code review, testing strategy, release decisions, and governance.
Portfolio outcome
Secure software design assessment
Individual Lessons
10 lessonsA11.1Security in the Software LifecycleA11.2Secure Design RequirementsA11.3Threat Modeling for SoftwareA11.4Secrets Management ConceptsA11.5Dependency and Supply Chain Risk ConceptsA11.6Secure Error Handling and LoggingA11.7Code Review for SecurityA11.8Testing Security Requirements SafelyA11.9Secure Deployment ConceptsA11.10Secure Software Design LabTestA11 Module Test — 25 Questions
A1210 lessons + test
Cloud Security Architecture
Develop cloud security architecture thinking across identity, storage, networks, logging, monitoring, and resilience.
Professional focus
Shared responsibility, cloud identity, storage, networks, logging, monitoring, encryption, resilience, suppliers, and architecture tradeoffs.
Portfolio outcome
Cloud security architecture package
Individual Lessons
10 lessonsA12.1Cloud Architecture and Shared ResponsibilityA12.2Cloud IAM ArchitectureA12.3Storage Security and Data ExposureA12.4Cloud Network BoundariesA12.5Cloud Logging and Monitoring DesignA12.6Secrets and Key Handling in CloudA12.7Backup, Recovery, and ResilienceA12.8Cloud Misconfiguration PreventionA12.9Cloud Governance ConceptsA12.10Cloud Architecture Review LabTestA12 Module Test — 25 Questions
A1310 lessons + test
Identity, Zero Trust, and Access Control
Teach advanced identity strategy, least privilege, federation concepts, conditional access, and zero trust thinking.
Professional focus
Identity architecture, federation, conditional access, privileged access, lifecycle, service identities, zero trust, and validation.
Portfolio outcome
Enterprise identity and zero-trust review
Individual Lessons
10 lessonsA13.1Identity as a Security PerimeterA13.2Zero Trust PrinciplesA13.3Federation and Single Sign-On ConceptsA13.4Conditional Access and Policy DecisionsA13.5Role-Based and Attribute-Based Access ConceptsA13.6Privileged Access Management ConceptsA13.7Identity Logging and MonitoringA13.8Access Reviews and GovernanceA13.9Balancing Security and UsabilityA13.10Zero Trust Design LabTestA13 Module Test — 25 Questions
A1410 lessons + test
Cryptography and Key Management Concepts
Teach cryptography design decisions, key management, certificates, hashing, and common mistakes at a conceptual level.
Professional focus
Encryption design, hashing and salting concepts, signatures, certificates, PKI, key storage, rotation, policy, and common mistakes.
Portfolio outcome
Key-management design recommendation
Individual Lessons
10 lessonsA14.1Cryptography in System DesignA14.2Symmetric and Asymmetric Encryption ConceptsA14.3Hashing, Salting, and Integrity ConceptsA14.4Digital Signatures ConceptuallyA14.5Certificates and PKI ConceptsA14.6Key Storage and RotationA14.7Common Crypto Design MistakesA14.8Encryption in Transit and At RestA14.9Crypto Policy and Compliance ConceptsA14.10Key Management Design LabTestA14 Module Test — 25 Questions
Advanced Phase
Governance and Automation
A1510 lessons + test
Risk Management and Compliance
Teach how cybersecurity supports business goals through risk registers, controls, audits, and decision-making.
Professional focus
Assets, threats, impact, likelihood, risk ownership, controls, testing, frameworks, audits, exceptions, suppliers, and leadership communication.
Portfolio outcome
Risk register and leadership recommendation
Individual Lessons
10 lessonsA15.1Risk Management in CybersecurityA15.2Assets, Threats, Impact, and LikelihoodA15.3Risk Registers and OwnershipA15.4Security Controls and Control TestingA15.5Compliance Framework ConceptsA15.6Audit Evidence and DocumentationA15.7Risk Acceptance and ExceptionsA15.8Third-Party Risk ConceptsA15.9Communicating Risk to LeadersA15.10Risk Decision LabTestA15 Module Test — 25 Questions
A1610 lessons + test
Privacy Engineering and Data Governance
Teach data minimization, classification, retention, consent, privacy risk, and governance by design.
Professional focus
Privacy principles, inventories, classification, minimization, purpose, consent, retention, deletion, governance roles, and privacy by design.
Portfolio outcome
Privacy engineering review
Individual Lessons
10 lessonsA16.1Privacy Engineering PrinciplesA16.2Data Classification and InventoryA16.3Data Minimization and Purpose LimitationA16.4Consent and User ExpectationsA16.5Retention and Deletion ConceptsA16.6Privacy Risk AssessmentsA16.7Data Governance RolesA16.8Privacy by Design in SystemsA16.9Balancing Security, Privacy, and UsabilityA16.10Privacy Engineering LabTestA16 Module Test — 25 Questions
A1710 lessons + test
Security Automation Concepts
Teach safe automation planning for alert enrichment, ticketing, workflows, and response support without unsafe actions.
Professional focus
Human judgment, enrichment, ticketing, playbooks, safe scripting boundaries, approval gates, failure modes, metrics, and governance.
Portfolio outcome
Safe automation design and governance plan
Individual Lessons
10 lessonsA17.1Why Security Automation ExistsA17.2Automation vs Human JudgmentA17.3Alert Enrichment ConceptsA17.4Ticketing and Workflow AutomationA17.5Playbooks and RunbooksA17.6Safe Scripting BoundariesA17.7Automation Failure ModesA17.8Measuring Automation ValueA17.9Governance for AutomationA17.10Security Automation Design LabTestA17 Module Test — 25 Questions
Advanced Phase
Professional Application
A1810 lessons + test
Advanced Defensive Labs
Give students complex but safe defensive cases using fake logs, fake alerts, diagrams, risk decisions, and reports.
Professional focus
Multi-source investigation, architecture review, cloud, IAM, incident response, detection tuning, risk, forensics, and executive summaries.
Portfolio outcome
Advanced multi-case lab portfolio
Individual Lessons
10 lessonsA18.1Multi-Source Alert InvestigationA18.2Network Defense Architecture ReviewA18.3Cloud Security Review CaseA18.4Identity Access Review CaseA18.5Incident Response Tabletop CaseA18.6Detection Tuning CaseA18.7Risk Register CaseA18.8Forensics Timeline CaseA18.9Executive Summary WritingA18.10Advanced Lab ChallengeTestA18 Module Test — 25 Questions
A1910 lessons + test
Cybersecurity Portfolio Projects
Guide students in producing portfolio-ready defensive artifacts suitable for learning, applications, and interviews.
Professional focus
Security diagrams, incident reports, threat models, risk assessments, detection plans, policies, cloud reviews, reflection, and presentation.
Portfolio outcome
Complete advanced cybersecurity portfolio
Individual Lessons
10 lessonsA19.1What Makes a Strong Cyber PortfolioA19.2Security Diagram ProjectA19.3Incident Report ProjectA19.4Threat Model ProjectA19.5Risk Assessment ProjectA19.6Detection Plan ProjectA19.7Security Policy Draft ProjectA19.8Cloud Security Review ProjectA19.9Portfolio Reflection and PresentationA19.10Portfolio Review LabTestA19 Module Test — 25 Questions
A2010 lessons + test
Advanced Capstone
Complete the Advanced Track with a professional-style defensive capstone and final exam readiness.
Professional focus
Architecture, threat modeling, detection, monitoring, response, cloud, identity, risk, privacy, executive communication, submission, and readiness.
Portfolio outcome
Professional-style advanced capstone
Individual Lessons
10 lessonsA20.1Advanced Track Knowledge ReviewA20.2Capstone Scenario BriefingA20.3Architecture and Threat Model PhaseA20.4Detection and Monitoring PhaseA20.5Incident Response PhaseA20.6Cloud and Identity Review PhaseA20.7Risk and Privacy Review PhaseA20.8Executive Communication PhaseA20.9Final Portfolio SubmissionA20.10Advanced Final Readiness ReviewTestA20 Module Test — 25 Questions
Portfolio Progression
Build One Connected Advanced Portfolio
Professional Foundations Portfolio
Authorization brief, ethics decision record, security architecture, threat model, trust-boundary map, and network-defense review.
Detection and Response Portfolio
Detection plan, validation record, SIEM triage package, incident playbook, forensic timeline, and malware-defense case.
Application, Cloud, and Identity Portfolio
Web architecture review, secure software assessment, cloud design, zero-trust review, and key-management recommendation.
Governance and Automation Portfolio
Risk register, compliance evidence plan, privacy engineering review, and safe automation governance package.
Professional Application Portfolio
Advanced lab cases, polished portfolio projects, final capstone, executive communication, reflection, and readiness defense.
Track Assessments
Practice, Apply, and Demonstrate Advanced Readiness
50 Questions
Advanced Practice Test 1
Review ethics, architecture, threat modeling, networking, detection, SIEM, response, forensics, malware defense, web, software, cloud, identity, cryptography, risk, privacy, automation, labs, and portfolio projects.
Open Practice Test 150 Applied Questions
Advanced Practice Test 2
Apply professional defensive reasoning to mixed fictional scenarios, fake evidence, architecture reviews, detection decisions, response choices, governance, and communication.
Open Practice Test 2125 Questions
Advanced Final Test
Demonstrate full-track readiness across architecture, threat modeling, detection, SIEM, incident response, cloud, identity, risk, privacy, automation, communication, and capstone work.
Open Final TestBegin the Final High School Track
Start A1: Advanced Cyber Ethics and Legal Boundaries
Advanced begins with professional responsibility, authorization, written scope, legal and research boundaries, responsible disclosure, sensitive information, AI ethics, conflicts of interest, trust, and communication during risk.