Domain Security Practitioner

You will be able to

• Assess a whole estate and produce a finding per domain with evidence
• Quantify an impersonation exposure from public data alone
• Handle a domain whose administrator cannot be contacted
• Sequence remediation around constraints you cannot remove
• Write a 30/90/365 plan with owners and go/no-go criteria
• Defend an explicit list of what you are not doing, and why
• Present the work so that the highest-value items actually get done

Syllabus

1. 1. The Estate

   A real-shaped organisation, and what a brief does and does not tell you.

   1. The brief11 min
   2. What a brief always omits10 min

2. 2. The Assessment

   Posture per domain, the impersonation exposure, and what the evidence actually supports.

   1. Posture, domain by domain13 min
   2. The impersonation exposure12 min
   3. What the evidence supports11 min

3. 3. The Findings Nobody Can Fix Cleanly

   An unreachable agency, a signed zone you do not control, and a CNAME from 2024.

   1. The agency nobody can contact12 min
   2. A broken chain you cannot fix11 min
   3. The CNAME from 202411 min

4. 4. The Plan

   Thirty, ninety and three hundred and sixty-five days, with owners and criteria.

   1. The first thirty days11 min
   2. Ninety days, and a year12 min
   3. Owners and criteria11 min

5. 5. What You Are Not Doing

   The section that gets read after an incident, written before there is one.

   1. The list11 min
   2. Defending it afterwards10 min

6. 6. Delivering It

   Presenting the work so the highest-value items are the ones that get done.

   1. The shape of the report11 min
   2. The conversation10 min
   3. A year later11 min

7. 7. Final assessment

   15 scenario questions · 80% to pass · unlimited retakes

   What the assessment covers