Data Security
Data Protection & Encryption
Classify it, encrypt it, control the keys, and prove it.
- 7 modules
- 11 labs
- ~14 hours
- Intermediate
- Hands-on Labs
- Certificate
Course overview
Data security fails at the boundaries: unclassified data, unmanaged keys and unmonitored egress. This course covers the full lifecycle from classification through cryptographic protection to DLP monitoring.
You implement encryption at rest and in transit, run a key rotation, and build a data protection standard backed by real configuration evidence.
What you will be able to do
- Classify data and apply handling requirements
- Implement encryption at rest and in transit correctly
- Design a key management and rotation process
- Deploy and tune basic DLP controls
- Document a defensible data protection standard
Curriculum
- 1
Data Classification
You cannot protect what you have not labelled.
- Classification schemes
- Data discovery
- Handling requirements
- 2
Cryptography Essentials
Enough crypto to make correct choices.
- Symmetric vs asymmetric
- Hashing and integrity
- TLS in practice
- Common mistakes
- 3
Encryption at Rest
Disks, databases and objects.
- Disk and volume encryption
- Database encryption
- Object storage encryption
- 4
Key Management
Keys are the real secret.
- KMS models
- Customer-managed keys
- Rotation and escrow
- Access control on keys
- 5
Data Loss Prevention
Watch the exits.
- DLP policy design
- Detection patterns
- False positive management
- 6
Privacy & Retention
Keep what you must, delete what you should.
- Retention schedules
- Secure deletion
- Privacy regulation basics
Labs you will build
PrimeSec does not hand you a pre-built machine. You get professional lab guides and build the environment yourself — that is where the skill comes from.
- Run a data discovery scan and classify results
- Encrypt a volume and verify recovery
- Enable database encryption with a managed key
- Rotate a key and validate application continuity
- Configure a DLP rule and test it
- Implement secure deletion and prove it
Portfolio projects
- A data classification and handling standard
- A key management design with rotation runbook
- A DLP policy set with tuning notes
Frequently asked questions
Do you provide the lab environment?
No — and that is intentional. PrimeSec gives you professional lab guides that teach you to build and configure the environment yourself using your own machine, Hyper-V, VMware, VirtualBox, Docker, or a cloud free tier. Building and troubleshooting the environment is part of the skill.
Is this course self-paced?
Data Protection & Encryption is self-paced. Lessons, knowledge checks, labs and projects unlock in order so you always know what to do next.
Do I get a certificate?
You receive a PrimeSec course completion certificate once every module, lab and project requirement is met. It demonstrates completion and practical work — not an accredited industry certification.
Will cloud labs cost me money?
Labs are designed around free tiers and local virtualisation wherever possible, and every cloud lab includes cleanup steps so you do not leave billable resources running.
Related courses
Cloud Security
Cloud Security Engineer Bootcamp
Intermediate · 14 modules · 22 labs
AI Security
AI Security Fundamentals: Protecting AI Systems
Intermediate · 10 modules · 16 labs
IAM & Identity
Entra ID & Identity Security Mastery
Intermediate · 9 modules · 14 labs