Offensive and Defensive Security

4.5 CPEInformation Technology

Learn how organizations defend against cyber threats by exploring offensive security (red teams), defensive security (blue teams), and incident response fundamentals. This beginner-friendly course introduces real-world tools, attack simulations, and practical strategies used to strengthen cybersecurity resilience.

VIDEO COURSE

Included with Premium

View plans Already enrolled? Sign in to continue

About this course

Course 8 of 9 in our IT Audit Learning Path! This course provides a comprehensive introduction to the core practices of offensive and defensive security, giving learners a clear understanding of how modern organizations identify, defend against, and respond to cyber threats. You’ll explore how red teams simulate attacks to uncover vulnerabilities, how blue teams detect and contain threats in real time, and how both sides collaborate to improve overall security posture.

Through practical explanations, real-world examples, and tool demonstrations, you’ll gain insight into threat simulations, phishing exercises, network reconnaissance, incident response workflows, and post-incident analysis. The course also highlights the role of cybersecurity in broader governance, risk management, and compliance functions, helping learners understand how technical events translate into business risk.

Designed for beginners, this course equips you with foundational knowledge to confidently engage with cybersecurity concepts and better understand how organizations build resilience against today’s evolving digital threats.

This course covers topics that align with concepts addressed in Domain 4 of the Certified Information Systems Auditor (CISA®) exam framework. It is not affiliated with, endorsed by, or sponsored by ISACA®, nor does it guarantee exam preparation or certification outcomes.

What you’ll learn

Upon completion of this course, you will be able to:

To differentiate between Red Team and Blue Team roles and objectives in cybersecurity simulations.
To identify common techniques used in Red Team exercises and recognize key defensive strategies used by Blue Teams.
To understand the purpose and structure of incident response plans (IRPs) and how they align with broader governance frameworks.
To evaluate post-breach audit findings and understand the auditor’s role in tracking remediation and control maturity.
To assess the business and financial impact of cybersecurity incidents and their implications for audit and risk reporting.
To apply practical knowledge of basic cybersecurity tools for understanding offensive and defensive methods in a safe environment.

Your instructor

Michael Carroll, CPA, CISA, CISM

Course content

5 lessons · 28 steps · 2h 8m of video

01LESSON 1Introduction to Offensive & Defensive Security5 items

02LESSON 2Red Team Operations & Techniques7 items

03LESSON 3Blue Team Operations & Defense Strategies4 items

04LESSON 4Red vs. Blue Collaboration & Purple Teaming4 items

05LESSON 5Incident Response & Post-Incident Processes7 items

Locked

Final assessment

Course access is required to take this assessment.

25 questions70% to passUnlimited attempts

On course completion: 4.5 CPE and a certificate

Course details

CPE: 4.5
Field of study: Information Technology
Course level: Not specified
Delivery method: QAS™ Self Study
Prerequisites: Completion of prior courses in Wisdify’s <a href="https://wisdify.com/it-auditing-learning-path-cpe-courses/">IT Audit Learning Path</a> is recommended.
Advance preparation: Not specified
Course content: 5 lessons · 28 steps
Assessment: Final assessment · 25 questions · pass 70%
Completion deadline: 365 days from enrollment
Last updated: January 2026
Registration: A Wisdify account, eligible subscription, and course enrollment are required.