The essential starting point: landscape of modern cyber threats, core domains of security, the CIA triad, threat modeling, and defense-in-depth principles.
What you'll practise: Check whether an email address appears in known data breaches; Analyse a suspicious file hash with VirusTotal; Explore internet-exposed services with Shodan, passively and responsibly; Map the CIA triad to a published breach case study; Build a simple threat and risk list for a sample small business.