Curriculum Sequence

The academy curriculum: what a security company teaches, in what order, and why the sequence matters.

Curriculum Sequence

The academy did not begin as a curriculum. It began as a list of everything the lab learned the hard way, written down so the next practitioner would not have to learn it the same way. That list became modules. The modules became a sequence. The sequence is the curriculum.

The order is deliberate. Failure modes come first, detection second, deployment last. Every module assumes the ones before it, and every module ends in a drill.

Failure modes come first

A practitioner who cannot name a failure mode cannot detect one. The academy's first modules teach the taxonomy: escape, deletion, fraud, exfiltration. Not as abstract categories, but as behaviors the practitioner will watch for in the field.

The reason the order matters is simple. Detection tools produce signals. A practitioner without the vocabulary underneath the signal reads it as noise. A practitioner with it reads the same signal as a story. The curriculum builds the vocabulary before it hands over the instruments.

Detection second

Detection comes after failure modes for the same reason map-reading comes after terrain. The instrument shows a threshold crossing. The practitioner has to know what crosses it, what it means when it does, and what does not cross it but should.

The academy teaches detection as a design discipline, not a product category. What you log, where you log it, and what threshold you set are engineering decisions that outlive any incident. Practitioners learn to make those decisions before they learn to run the tools that depend on them.

Deployment last

Deployment is the last module on purpose. The first live fleet a practitioner meets should not be the first failure mode they see. The industry's usual order is reversed: ship first, learn during the incident. The academy refuses that order.

By the time a practitioner reaches deployment, they have named the failure modes, run the detection drills, and instrumented a test fleet. The live fleet arrives as the fourth thing they have seen, not the first.

The sequence compounds

Practitioners who learn the sequence in the wrong order build systems that fail in ways they were never taught to see. Practitioners who learn it in order recognize the failure in the drill, months before it would have arrived in production.

The curriculum ships in the order the lab wishes it had learned the material. That order is the whole design.