Educational Simulation & Safety Notice

This interactive guide is an educational portfolio project designed to demonstrate core cybersecurity principles through safe simulations. It is not a formal certification, compliance audit, penetration-testing service, security assessment, or guarantee of safety. All organizations, clinical scenarios, network models, and messages depicted are strictly fictional.

Real-World Prerequisite: Security testing against live systems requires explicit, documented written authorization and defined scope. In healthcare environments, incident containment must strictly adhere to local clinical safety and emergency downtime procedures; staff must never automatically disconnect life-critical medical equipment without clinical coordination.

0 of 5 levels completed · In-memory simulation · Zero trackers

5-Level Interactive Learning Map

Direct access — non-linear exploration
Level 1

Foundations: Confidentiality, Integrity, and Availability

Learning Objective: Distinguish between confidentiality, integrity, and availability (the CIA triad), and define asset, threat, vulnerability, and risk in plain language.

Core Concepts: The CIA Triad

Information security is fundamentally anchored by three core objectives. Click each concept below to inspect practical definitions and clinical safeguards:

Plain-Language Glossary

Asset Anything of value that requires protection (e.g., patient health records, diagnostic machines, cryptographic keys).
Threat Any circumstance or event with the potential to adversely impact an asset (e.g., malware, ransomware, hardware malfunction).
Vulnerability A flaw or weakness in system design, implementation, or operation that could be exploited by a threat.
Risk The measure of the extent to which an entity is threatened by a potential circumstance or event (likelihood × impact).

Decision Scenario: The Clinic Records Outage

Interactive Exercise

At 8:00 AM on Monday, staff at St. Jude Community Outpatient Clinic arrive to find their electronic health records (EHR) server completely offline due to an unexpected storage array crash. Clinicians cannot retrieve patient schedules, medication allergy warnings, or clinical histories. Database backups stored in a secondary server are intact and uncorrupted, and audit logs show no indication of unauthorized access or data theft.

Which security objective is most directly impacted by this outage?

Level 1 Takeaway

Availability failures directly impair clinical operations and patient safety even in the absence of a malicious data breach or ransomware extortion.

Primary Sources: NIST Cybersecurity Framework 2.0 (Functions: Protect, Respond) · NIST SP 1800-28 (Data Confidentiality) · NIST SP 1800-25 (Data Integrity).

Verified Primary References & Review Limitations

All curriculum topics and concepts are anchored in primary cybersecurity standards checked as of November 3, 2026. Hyperlinks provide direct provenance and do not constitute an endorsement.

Topic Area Primary Authority & Document Relevance & Scope
Governance & Functions NIST Cybersecurity Framework 2.0 NIST.CSWP.29 Establishes the six core functions: Govern, Identify, Protect, Detect, Respond, and Recover.
Incident Handling NIST CSRC Incident Response Project SP 800-61 Series Guidance for log analysis, evidence preservation, and coordinated containment cycles.
Application Security OWASP Top 10:2025 Open Worldwide Application Security Project Application risk awareness, broken access control, and cryptographic failures.
Data Confidentiality NIST SP 1800-28 Data Confidentiality Practice Guide Identifying and protecting enterprise assets against unauthorized disclosure and breaches.
Data Integrity & Resilience NIST SP 1800-25 Data Integrity: Destructive Events Detecting and responding to unauthorized data corruption and ransomware attacks.
Curriculum Author: Prasanjith Chanaka · November 3, 2026
Review Status: Authored educational simulation (Independent peer review pending)
Simulation Boundary: All exercises execute purely in-browser memory without network telemetry or data persistence beyond optional browser local storage.

Welcome to the Interactive Cybersecurity Learning Lab. This educational simulation guides you through five core levels of modern cybersecurity—from fundamental CIA triad principles to real-world healthcare threat modelling and least-privilege network segmentation.