$ show jassics/security-study-plan
This repository is a comprehensive, curated collection of cybersecurity study plans covering 20+ specialized domains such as application security, cloud security (AWS/Azure/GCP), DevSecOps, threat modeling, GRC, GenAI security, and more. It is not a software application or data research project; rather, it is a knowledge base of structured markdown roadmaps designed to guide learners and professionals through role-specific cybersecurity skill development. The plans reference up-to-date frameworks (OWASP Top 10:2025, NIST CSF 2.0, EU AI Act), include curated resources (books, videos, courses, certifications), and are consistently maintained. The repository has high community engagement (5k+ stars) and remains actively updated, though it contains no executable code, data pipelines, or notebooks.
The LLM identified 3 files worth highlighting for reuse:
A self-contained, comprehensive study plan for threat modeling. It covers methodologies (STRIDE, PASTA, Attack Trees, MAESTRO for agentic AI), tools (OWASP Threat Dragon, Microsoft Threat Modeling Tool), and includes hands-on practice guidance. It is reusable as a standalone learning module or as part of a broader security curriculum.
An extensive and current study plan for GenAI/LLM security, covering OWASP Top 10 for LLM Applications 2026, agentic AI, MCP security, AI governance, and incident response. It references the latest frameworks and incidents (e.g., tj-actions supply chain compromise, deepfake social engineering). This is one of the most detailed and up-to-date public resources on the topic, suitable for both learning and reference.
A practical study plan for DevSecOps that explains how to integrate security into CI/CD pipelines, manage cloud and container security, and build platform guardrails. It includes sections on metrics, feedback culture, and AI-in-pipeline risks, making it a reusable guide for teams adopting DevSecOps practices.