55 courses. Pick a level or audience to narrow the list.
Where teams start
Most Popular Security Courses
Most teams start with CompTIA Security+ or ISC2 CC to give help desk, sysadmin, and junior security staff a shared baseline, then assign CySA+, SSCP, or vendor firewall courses based on each role's responsibilities.
CCNA Cybersecurity
This CCNA Cybersecurity training prepares you for the Understanding Cisco Cybersecurity Operations Fundamentals (200-201 CCNACBR) v1.2 exam (formerly called Cisco CyberOps). With virtual labs and unlimited practice exams included, you’ll gain experience with SIEM, NetFlow, tcpdump, malware analysis, access control models, and incident response workflows based on NIST.SP800‑61. You'll also learn how to detect network, application, and endpoint threats, investigate attacks like DDoS or man‑in‑the‑middle, and apply defense‑in‑depth. This course is deal for entry‑level security analysts or engineers ready to earn their CCNA Cybersecurity certification and launch an SOC career.
Keith Barker, Bob Salmans, John Munjoma, Kelvin Tran
Security+
This CompTIA Security+ (SY0-701) training prepares your team for a widely recognized entry-level cybersecurity certification. It covers network security fundamentals, cryptography basics, threat detection and mitigation, risk management, and compliance frameworks, and it builds the skills the SY0-701 exam tests: assessing the security posture of an enterprise environment and recommending solutions, monitoring and securing hybrid cloud and on-premises environments, responding to security incidents, and working within applicable regulations and governance policies. For an IT Director in a regulated industry, Security+ is the baseline many hiring rubrics and compliance programs expect of help desk analysts, network administrators, and security specialists alike. Individuals starting a security specialty earn the same credential on the same path.
Keith Barker, Erik Choron
CCNP Security
This CCNP Security training is designed to help you get comfortable with the 300-710 SNCF exam objectives, and earn your CCNP Security certification. Taught by networking expert Keith Barker and cybersecurity professional Bob Salmans, this course focuses on securing networks with Cisco Firewalls, including Firepower Threat Defense and Management Center. This training is ideal for Network Security Engineers and System Administrators seeking rigorous 300-710 SNCF exam prep, as well as IT managers looking for a streamlined onboarding tool or a high-level Cisco training resource for their technical teams.
Keith Barker, Bob Salmans
Microsoft SC-900
Cloud adoption spreads security, identity, and compliance work across help desk staff, sysadmins, and compliance stakeholders who often lack a shared vocabulary. When terms like Zero Trust, least privilege, and the shared responsibility model mean different things to different people, risk discussions stall and audit conversations take longer than they should. This entry-level SC-900 course gives IT Directors and Training Managers a single baseline to assign across the team. Learners cover Microsoft Entra ID (Azure AD) identity concepts, authentication and self-service password reset, Microsoft Defender threat protection, Intune endpoint security, and Microsoft Purview capabilities such as sensitivity labels, DLP, eDiscovery, audit, data lifecycle management, and insider risk. The course stays conceptual, with walkthroughs in Azure, Microsoft 365, Intune, and Purview, so new hires, help desk technicians, and non-technical risk stakeholders can all take part. After completion, your team can explain Microsoft security terminology to technical and non-technical audiences, identify which Microsoft tool fits a given identity, threat, or compliance use case, and route questions to the right platform capability or specialist team. The course also provides a structured review of the fundamentals covered by the SC-900 certification exam. At about 21.7 hours across 25 skills, the course fits an onboarding cohort or a team certification push. Team Leads can bundle it into Playlists, and Training Managers can track per-learner progress and completion with Team Reporting before moving the team on to role-based Microsoft security training.
John Munjoma, James Conrad, Bob Salmans
CRISC
This ISACA CRISC training is designed to help you earn your Certified in Risk and Information Systems Control credential. This course helps you learn to identify IT risks, build threat models, and align technology with business goals. Once you've completed this course, you'll know how to design effective control frameworks, manage vendor risk, and handle data lifecycles from start to finish. You'll also gain the skills to analyze risk appetite, report metrics through heatmaps and dashboards, and lead disaster recovery efforts.
Bob Salmans
SC-300
This Microsoft Identity and Access Administrator (SC-300) training prepares you to become a Microsoft identity and access admin. Expert-led training will teach you to implement and manage secure identity solutions using Microsoft Entra ID (Azure AD) and hybrid identities. You’ll set up and manage users, groups, devices, and custom roles. You’ll learn to configure passwordless and multifactor sign-in, apply conditional access policies, and use tools like PIM to support a zero-trust strategy. You’ll also manage app access with registrations, service principals, and entitlement controls. Bring on-prem and cloud together using Azure AD Connect and Active Directory Federation Services, and monitor and protect identities using Defender for Cloud Apps, Sentinel, Identity Protection and Identity Secure Score. With practice exams and real‑world scenarios, this course maps to the SC‑300 exam blueprint, giving you the skills and confidence to get certified and secure access to your organization’s cloud resources.
Bob Salmans, James Conrad
Recently added
Newest Releases
The latest Security training added to the catalog — new courses land here within a day of publication.
Vendor coverage
Security Training by Vendor
The vendors behind the security catalog — each vendor page maps its full certification landscape.
Full catalog
All Security Courses
Every Security course in the CBT Nuggets catalog.
Show all 55 Security coursesShow fewer
Frequently asked questions about Security training
Common questions IT directors ask when evaluating Security training for their team.
Which roles and experience levels does the Security catalog serve?
Entry-level options include Cybersecurity Awareness, ISC2 CC, Cisco CCST Cybersecurity, SC-900, and PCCET for help desk staff and new hires. Practitioner courses such as Security+, SSCP, CCNA Cybersecurity, and CySA+ suit admins and analysts. CISSP, CCSP, SecurityX, and CISM are built for senior engineers, architects, and security managers.
Which certifications do these courses prepare a team for?
Courses prepare learners for CompTIA Security+, CySA+, PenTest+, and SecurityX; ISC2 CC, SSCP, CISSP, and CCSP; ISACA CISA, CISM, and CRISC; Cisco CCNA Cybersecurity and CCNP Security exams 350-701, 300-710, and 300-715; Microsoft SC-200, SC-300, and AZ-500; AWS Certified Security Specialty; CKS; and Fortinet and Palo Alto Networks certifications. The vendor issues the certification; CBT Nuggets prepares the learner for it.
How should a Training Manager sequence a security team path?
Start everyone on a baseline such as ISC2 CC, CCST Cybersecurity, or Security+. Then branch by role: SOC analysts into CCNA Cybersecurity, CySA+, SC-200, and Splunk; firewall admins into Check Point, Fortinet, Palo Alto, or Cisco Firepower; cloud staff into AWS Security Specialty, AZ-500, CCSP, or CKS; and security leaders into CISSP, CISM, or CRISC.
How much time should we plan per learner?
It depends on the course. ISC2 CC runs about 8 to 9 hours, AWS Certified Security Specialty about 17 hours of video, Cisco CCST Cybersecurity about 23 hours, and CCNP Security Core about 32 hours, which lets Team Leads schedule training alongside normal duties.
Do the courses include hands-on practice?
Yes. The platform pairs on-demand video with virtual labs, practice exams, and pre- and post-assessments. Courses such as CCNP Security Core have learners configure Cisco FTD policies and VPNs in a lab environment, and the AWS security course includes hands-on build time.
How can we track team progress and show completion for audits?
Team reporting provides per-learner progress and completion, cohort and group views, and completion exports you can use as audit evidence. You can also see IT Trainerbot usage, including top topics and the training the answers came from.
How does this catalog support compliance and onboarding programs?
ISC2 CC helps standardize a security baseline for teams pursuing SOC 2, CMMC, or internal audit readiness, and CMMC Readiness and Compliance Training and Enterprise GRC cover compliance programs directly. Cybersecurity Awareness extends basic security habits to broader staff during onboarding.