Overview of All Cybersecurity Domains

What is cybersecurity, really?

Cybersecurity is the practice of protecting computers, networks, programs, and data from unauthorized access, change, or destruction. At its core it's a tradeoff problem: every security control adds friction. Good security professionals know how to lower risk without grinding the business to a halt.

The CIA triad

Three goals drive most security decisions: Confidentiality (only authorized people see data), Integrity (data isn't changed without permission), and Availability (systems stay up when users need them). Every control you'll meet, from a password to a firewall, exists to protect at least one corner of this triangle.

The 11 BiTree sub-tracks at a glance

Identity & Access Management, who logs in and what they can do. Vulnerability Management, finding and fixing weaknesses. Application Security, protecting the code itself. Incident Response, what to do when something goes wrong. Data Leakage Prevention, keeping sensitive data inside. Penetration Testing, authorized attack simulation. Risk Management & Governance, the business side of security. End User Device Management, laptops, phones, IoT. Threat Intelligence, knowing your adversaries. NIST Framework, the industry-standard playbook. AI in Cybersecurity, how AI changes both offense and defense.

Your practice toolkit, the same tools real professionals use

Every sub-track in this track points back to the same hands-on toolkit. Set it up once and you'll be ready for any lab. Kali Linux (or Parrot OS), the de facto security distro. It ships with hundreds of tools preinstalled (Nmap, Burp Suite, Metasploit, Wireshark, Hashcat, John the Ripper). VirtualBox or VMware Workstation Player, both free, lets you run Kali as a guest VM on your main computer so you never expose your host system to lab traffic. Docker, lighter than a full VM. Use it for spinning up deliberately vulnerable apps (DVWA, WebGoat, OWASP Juice Shop, Metasploitable 2) in seconds, no full VM required. HackTheBox and TryHackMe, online practice ranges that give you legal targets to attack. Free tiers cover months of learning. Wireshark, the standard packet capture and protocol analyser. Burp Suite Community Edition, the standard intercepting proxy for web app testing. Both run on Kali or any host OS.

Set up your practice environment

Do these once and you'll be ready for every cybersecurity sub-track. Don't worry about installing every tool, the VM and accounts are enough to start.

1. 1

   Install VirtualBox (free, virtualbox.org) or VMware Workstation Player on your main computer

2. 2

   Download the Kali Linux VirtualBox VM image from kali.org/get-kali and import it into VirtualBox

3. 3

   First boot of Kali: change the default password, run apt update + apt upgrade, snapshot the clean install so you can roll back after experiments

4. 4

   Install Docker Desktop (free for personal use, docker.com) so you can spin up vulnerable apps without a full VM

5. 5

   Create a free HackTheBox account at hackthebox.com (Starting Point machines are free and friendly)

6. 6

   Create a free TryHackMe account at tryhackme.com (the free rooms cover beginner to intermediate)

7. 7

   Create a free PicoCTF account at picoctf.org for capture-the-flag style challenges

8. 8

   Bookmark the NIST Cybersecurity Framework page at nist.gov/cyberframework, you'll reference it across sub-tracks

Which CIA triad goal is harmed if a database is wiped during an attack?

Think about what "wiped" actually does to legitimate users.