Build your practical portfolio.
Use these project briefs to produce your own evidence. Keep work in a private notebook or document; this page is a guide, not an upload or submission system.
1. Agency security review
List five assets, create a three-item risk register, define user roles, and propose a tested backup strategy. Deliver a prioritized report explaining each recommendation.
2. Website defense plan
Map browser-to-server flow, define invoice authorization rules, review hosting and WordPress controls, and describe logging and recovery. Use a fictional website or an authorized lab.
3. Cloud responsibility map
Separate provider and customer responsibilities, design least-privilege roles, keep storage private, and identify useful audit events. Deliver a responsibility table and a simple diagram.
4. AI assistant threat model
Identify sensitive data, untrusted inputs, available tools, and consequential actions. Propose permission boundaries and controlled tests using dummy records.
CyberPath · Learn. Practice. Protect.
Student help · My account · Practice only on systems you own or are authorized to assess.