Here's how you can start your journey in learning about Information Security for beginners.

Learn the basics of OS(Windows & Linux) architecture, and code weekly. Build a strong foundation in Networking and Operating Systems; Cisco Networking Essentials and the 3-course CCNA series were invaluable for me. For ethical hacking, watch TCM's free "Practical Ethical Hacking" course on YouTube. Once you've mastered the basics, practice meaningfully: Pentesting: Do bug bounties, join CTFs, and use TryHackMe/Hack The Box. Blue Teaming: Create a home lab with VirtualBox or VMware Player. Use VulnHub for practice and set up open-source security tools. Open Source: Contribute to Wireshark, Metasploit, and Nmap. That’s a solid start. Seek guidance from friends, mentors, colleagues, or communities on LinkedIn and other platforms if needed.

Start with the fundamentals to build a strong foundation. Books: "The Web Application Hacker's Handbook" by Dafydd Stuttard and Marcus Pinto "Hacking: The Art of Exploitation" by Jon Erickson Online Resources: What is Information Security? on CSO Online OWASP (Open Web Application Security Project)

The fundamentals of Information Security, encapsulated in confidentiality, integrity, and availability (CIA), are vital for data protection. Emphasizing human factors can greatly enhance these principles. Trust and psychological safety encourage adherence to confidentiality protocols, as users are more likely to follow guidelines and report issues. Ethical responsibility strengthens data integrity, ensuring accuracy and completeness. Human resilience and adaptability ensure availability during crises. Integrating human-centric strategies through continuous education, trust-building, ethical frameworks, and resilience training creates a robust security environment, effectively safeguarding information in a digital world.

Muitas vezes, o networking valerá muito mais que um diploma, então lembre-se ter um bom networking é essencial. Atividades como CTFs, publicações no Medium e Linkedin, projetos particulares e trabalhos freelance ajudam bastante no currículo. Essas experiências práticas demonstram seu compromisso e habilidade em resolver problemas reais. É importante também ter cuidado com a autossabotagem e não se cobrar excessivamente no processo de aprendizagem. Cada pessoa tem seu próprio ritmo e é fundamental respeitar o seu. Aprender novas habilidades e construir uma carreira leva tempo e paciência. Ao aceitar que o progresso é gradual, você evita o estresse e a frustração.

Familiarizarse con la terminología y acrónimos comunes en InfoSec es fundamental por varias razones: -Comprensión clara de las amenazas: Conocer términos como "phishing", "ransomware" y "DDoS" permite comprender mejor la naturaleza de las amenazas a la seguridad de la información. Esto facilita la identificación de posibles ataques y la toma de medidas para prevenirlos. -Comprensión de soluciones: Conocer la terminología relacionada con las soluciones de seguridad de la información facilita la evaluación y selección de las herramientas y tecnologías adecuadas para proteger la información.

- Subscribe to NetworkChuck & HackerSploit - Get PocketPrep for Security+ - Get Jason Dion Udemy Course for Sec+ - Study for a cloud cert (AZ-900 or AWS fund) - Talk to ChatGPT when you don't understand something

-> Get to know common terms like malware, phishing, encryption, firewall, and more. -> Understand industry-specific acronyms such as IDS, IPS, VPN, and MFA.

• Familiarize yourself with common cybersecurity terms and acronyms. Example: Learn what "malware" means (malicious software designed to harm your computer). • Start exploring basic certifications like CompTIA Security+(This certification teaches you the foundational language and concepts of cybersecurity).

-> Set up a home lab using virtual machines to practice different security tools and techniques. -> Use platforms like Hack The Box or TryHackMe to engage in practical hacking exercises.

La teoría es esencial en la seguridad informática, pero la práctica es donde realmente se consolida el conocimiento. Aplicar la practica ofrece los siguientes beneficios: -Aprendizaje activo: Experimentar de primera mano conceptos y técnicas nos permite internalizarlos mejor. -Desarrollo de habilidades: Practicar nos ayuda a dominar las herramientas y técnicas necesarias para enfrentar amenazas reales. -Preparación para el futuro: Nos permite adaptarnos a nuevas amenazas y desarrollar las habilidades para combatirlas. Implementa prácticas básicas en tus dispositivos: -Instala un cortafuegos, configura una VPN y crea contraseñas seguras. -Explora con máquinas virtuales: Experimenta de forma segura diferentes ataques y defensas.

Don't pay at first; you can learn from free resources and build your own lab. You must solve lab problems to understand the attacks.

- Doing projects and posting. If you have 0 experience - Get on TryHackMe and just look up the writeup when stuck - Build a lab in the cloud (Use privacy(.)com to avoid cloud costs) - Docker also makes things very easy to build impressive projects fast

Begin with foundational practices like setting up firewalls and VPNs, but don't stop there. Challenge yourself to understand the underlying principles and vulnerabilities. Experiment with different tools and techniques in a safe environment like virtual machines to simulate real-world scenarios. By doing so, you not only learn how to defend against attacks but also cultivate a proactive approach to cybersecurity that adapts to new threats. Remember, the key is continuous learning and practical application to stay ahead in this ever-evolving field. Do compete in CTF Challenges and later extend your scope to bug bounty

Understand the basics of networking Learn about OSI model Go deep into each layer Understand the protocols and how the data is transmitting

As a beginner interested in learning about Information Security: network basics, OSI Model in details and attacks on each layer and how to secure it.

-> Learn about computer networks, including how data travels over the internet. -> Understand how to secure networks using firewalls, VPNs, and intrusion detection/prevention systems.

Starting with networking in cybersecurity requires more than technical skills—it demands a strategic approach. Begin by understanding core protocols like TCP/IP and how data flows between devices. Explore network architecture to grasp how components interact and identify potential vulnerabilities. Gain practical experience with tools like Wireshark for capturing and analyzing network traffic. This hands-on approach not only enhances technical proficiency but also deepens your insight into real-world security challenges. By building a strong foundation and staying current, you can confidently navigate the complexities of cybersecurity networking.

Definitely take some sort of networking so that you understand communication between devices and how as well as when to prevent her allow those communication

- If interested in GRC just ask YouTube - "GRC projects" - Get some ideas and start writing policies of your own - Do an assessment on some vulnerable machines - Ask ChatGPT to give you some project ideas - Not all will be great but will definitely point you in the right direction

• Study best practices for creating and implementing security policies. Learn how companies decide who can access certain information with framework such privacy by design. • Learn about various compliance frameworks (e.g., Eu-GDPR, HIPAA, ISO etc..). Understand laws that protect your personal/sensitive data or medical information. Differentiate between legal and ethical security laws and regulations. • Understand the importance of incident response plans. Learn how organizations prepare to handle a data breach and also research on case studies of past incidents.

É importante criar um meio de se atualizar sem ter que buscar informações continuamente. Todos os dias, novas técnicas e ameaças surgem, procurar isso manualmente seria trabalhoso. É importante que essas informações cheguem até você de forma natural, seja através da sua rede, newsletters ou blogs que se atualizam diariamente.

Staying updated in the cybersecurity field is crucial for several reasons. First, it allows professionals to stay ahead of emerging threats by understanding new vulnerabilities and attack methods. Second, as technology evolves, staying current helps in adapting security measures to new technologies and digital landscapes. Third, continuous learning enhances technical skills and deepens knowledge of cybersecurity principles, making professionals more effective in their roles. Lastly, active participation in the cybersecurity community through updates and forums promotes collaboration and sharing of best practices, enriching overall strategies and defenses against cyber threats.

I have started my journey in cyber security domain by completing my bachelor degree in computer science. Later on I did some research about this domain on the internet then I started to watch some tech YouTube channel to understand correct road map, then completed some global certification to improve my skills.

Subscribe to Newsletters: Stay informed by subscribing to cybersecurity newsletters like Krebs on Security, The Hacker News, and SANS NewsBites. Webinars and Virtual Conferences: Attend webinars & virtual conferences such as Black Hat, DEF CON, and RSA Conference to gain insights from experts & stay ahead of the latest trends and technologies. Communication Skills: Improve your communication skills by writing clear, concise reports & practicing presentations. Mentorship and Networking: Find mentors through LinkedIn or professional organizations like (ISC)². Join local cybersecurity meetups, participate in online forums, & attend industry events to network. Home Lab Setup: Set up a home lab to practice penetration testing and forensics.

I would suggest starting with the basics of cybersecurity through free online resources like YouTube, Coursera, or Udemy. This will help you grasp fundamental concepts and terminologies. If you find the subject matter engaging and understandable, pursue entry-level certifications like the ISC2 Cybersecurity certification, which are tailored for beginners and is free. Follow this with CompTIA Network+ to understand networking, crucial for security, and Security+ for a broader foundation in information security. Once you have a theoretical base, gain practical experience through platforms like TryHackMe or HackTheBox, which offer gamified learning and real-world scenarios to solve rooms, learn new Tool and capture-the-flag (CTF) challenges.

Don’t sell yourself short anyone is capable of achieving anything if they give it a shot. Nobody can know everything all at once so include as many different sources of knowledge as possible and know when to ask for help.