The field manual for security leaders
BECOME
THE CISO.
154 lessons and 12 working tools, organised as a route, not a library. No fluff. No paywalls. Free, forever.
START MODULE 01 — NO ACCOUNT →01 — Where are you now?
02 — Your route
Aspiring CISO
I
Foundations
01
CISO Foundations
START HERE
START HERE
- The Modern CISO Role
- Security Governance Frameworks
- Risk Management Fundamentals
- Network Security Fundamentals
- Cloud Security
- Identity & Access Management
- Building a Security Program from Zero
- Security Team Structure
- Hiring & Retaining Security Talent
II
Core domains
03
Threat & Vulnerability Management
- Threat Intelligence Fundamentals
- Vulnerability Management Lifecycle
- Penetration Testing
- The Compliance Landscape
- GDPR Deep Dive
- NIS2 Directive
- Cloud-Native Architecture & Security Implications
- Container Security
- Kubernetes Security
- Privacy by Design
- Data Minimization & Purpose Limitation
- Anonymization & Pseudonymization
III
Frontier + context
05
AI Security & Governance
- The AI Threat Landscape
- Securing LLM Deployments
- AI Data Security
- The Agentic Revolution
- Autonomous Exploitation
- Agentic Attack Frameworks (ReAct)
- SMB Security (Under 100 Employees)
- SMB Security (100-500 Employees)
- Mid-Market Security (500-2000 Employees)
Modules 01 and 02 are open with no account. Browse the full curriculum →
03 — Specialise by industry
Six verticals, eight lessons each — threat landscape, regulation and technology stack per industry.
04 — The toolkit
Every lesson ends in a tool you can use on Monday.
Policy Generator
AI-assisted security policy templates mapped to ISO 27001, NIST CSF, and CIS Controls.
Free · Open →
Risk Assessment Engine
Interactive risk register with scoring, heat maps, and treatment planning workflows.
Free · Open →
Compliance Mapper
Cross-reference controls across GDPR, NIS2, SOX, PCI-DSS with gap analysis dashboards.
Free · Open →
IR Playbook Builder
Incident response workflow designer with role assignments and escalation paths.
Free · Open →
AI Risk Assessor
Evaluate AI/ML deployments against the EU AI Act and NIST AI RMF, with mitigation plans.
Free · Open →
Vendor Risk Scorer
Third-party risk questionnaire engine with automated scoring, tracking, and reporting.
Free · Open →
DLP Simulator
Build and test DLP policies with simulated data sets and tuning feedback loops.
Free · Open →
Tabletop Generator
Incident scenarios tailored to your industry vertical and organization size.
Free · Open →
Security Budget Planner
ROI calculator, budget allocation tool, and vendor comparison worksheets.
Free · Open →
Audit Readiness Checker
Self-assessment against common frameworks with evidence tracking and gap reporting.
Free · Open →
Cloud Config Scanner
Assess cloud infrastructure configurations against CIS Benchmarks and best practices.
Free · Open →
Privacy Impact Tool
Guided DPIA process with templates for GDPR, cross-border transfers, and consent flows.
Free · Open →
Pentest Tool
Autonomous penetration testing with Nmap, Nuclei, ffuf, and an AI red team agent. Self-hosted; authorized targets only.
Coming soon
OmniCalyx
Universal data discovery and labeling via GPU-accelerated pipelines. Identify and classify sensitive data automatically.
Coming soon
05 — Access
● Why free? This platform was built for learning and knowledge sharing. Content is AI-generated and human-reviewed. Charging for it would create a conflict of interest and invite legitimate concerns about fraudulent training, fake content, or credential harvesting. By keeping it free, there is no argument to be made. The content stands on its own merit.
● What you get:
- 10 training modules (foundations through org-type adaptation)
- 6 industry vertical deep-dives
- All security tools — policy generator, risk engine, compliance mapper, and more
- AI-assisted features (bring your own API key)
- Progress tracking and 209 quiz questions
- No tracking, no ads, no data selling
$ curl -s modularciso.com/api/stats
{ …loading… }
$ █
{ …loading… }
$ █