CERTIFICATIONS

After completing IBM Cybersecurity Fundamentals, I gained a strong foundation in core cybersecurity concepts, including the CIA triad, common threat vectors, and security controls, along with the ability to identify and explain threats such as phishing, malware, ransomware, and basic network attacks. I developed practical security awareness around authentication, access control, encryption basics, identity management, and risk mitigation, and I can recognize indicators of compromise and understand the fundamentals of incident detection and response. I also strengthened my understanding of how operating systems, networks, and applications are secured, where vulnerabilities typically arise, and how cybersecurity functions within organizations, while adopting a security-first mindset that prioritizes confidentiality, integrity, and availability in everyday technical decisions.

Security Principles

In this domain, I learned to grasp the fundamentals of cybersecurity — what makes a system secure, the principles of confidentiality, integrity, and availability, and how they apply in real-world scenarios. I can now evaluate threats and vulnerabilities logically and make informed decisions about what controls to implement. It taught me to see security as both a mindset and a discipline, where proactive thinking is just as important as tools or technology.

Business Continuity

Here, I learned to ensure that an organization can survive and thrive despite disruptions. I now understand how to implement disaster recovery and business continuity plans, identify critical assets, and prioritize actions during incidents. I can assess organizational risks and design strategies that keep systems, data, and people operational, even under pressure.

Access Control

In the Access Control domain, I learned how to manage identity and permissions across users, devices, and applications. I understand authentication, authorization, and accounting (AAA), and I can implement policies to enforce least privilege and segregation of duties. By the end of this domain, I can confidently control who has access to what, when, and how, while preventing insider threats or unauthorized activities.

Network Security

This domain taught me the art and science of defending networks. I now understand network protocols, secure configurations, firewall and VPN deployment, and intrusion detection systems. I can analyze traffic for anomalies, detect attacks, and implement measures to harden network infrastructure. It gave me a deep appreciation for how attackers move laterally and how defenders can anticipate and block them.

Security Operations

In Security Operations, I learned the day-to-day mechanics of protecting an organization. I know how to monitor systems, analyze logs, and respond to incidents efficiently. I also learned incident handling, digital forensics basics, and continuous monitoring practices. This domain trained me to stay calm under pressure, making informed decisions to mitigate damage and restore secure operations quickly.