4.1. Risk Management Frameworks (NIST, ISO 27001, etc.) 4.2. Vulnerability Scanning and Assessment 4.3. Penetration Testing (White-box, Black-box, Gray-box) 4.4. Risk Mitigation and Remediation

8.1. Web Application Security Risks and Threats 8.2. Web Application Security Testing (OWASP ZAP, Burp Suite, etc.) 8.3. Secure Coding Practices (Input Validation, Output Encoding, etc.) 8.4. Web Application Firewalls (WAFs)

3.1. Network Security (Firewalls, IDS/IPS, VPNs, etc.) 3.2. Endpoint Security (Antivirus, Host-based IDS, etc.) 3.3. Cryptography (Encryption, Decryption, Hashing, etc.) 3.4. Identity and Access Management (IAM)