120 cards
This deck introduces the foundational concepts you need to know for the CompTIA Security+ (SY0) certification. The cards walk you through the core language of information security — things like the CIA triad, the Parkerian hexad, defense in depth, least privilege, separation of duties, and the difference between threats, vulnerabilities, and risks. You'll also get familiar with how vulnerabilities are catalogued and scored using systems like CVE and CVSS, which is knowledge that comes up again and again in real IT work.
It's a great fit if you're early in your cybersecurity journey, an IT support or admin professional looking to move into security, or a student preparing to sit the Security+ exam. Even if you're not pursuing the cert, the vocabulary and principles here are useful for anyone who touches systems, networks, or data as part of their job.
Because these concepts build on each other, try working through the cards in order the first time, then let spaced repetition do the heavy lifting on later passes. Pay special attention to terms that sound similar but mean different things — authentication versus authorization, for example — since the exam (and real-world security work) often hinges on telling those apart. And whenever a card references a principle like least privilege or separation of duties, try to think of a concrete scenario where you'd apply it; that small step of connecting the term to a situation makes it stick far longer than rote memorization alone.