Course

Zero Trust in a Nutshell

Zero trust in 25 minutes: why the castle and moat are gone, the measures that make zero trust real, and what changes when the user is an AI agent. Free, with a one-page self-check for your own organisation.

1 modules 3 lessons 2 videos · 9 min 8 quiz questions Personal coach Cerby Updated 10 Oct 2026 · sources to Oct 2026

Minimum requirements: None

Free Start free Sign in

Free: enter your email, set a password, start. Already have an account? Sign in.

What makes this course different

Learn with Cerby, your personal coach

Most online courses are the same for everyone. This one is not. Cerby, your AI coach, works through the course with you: he answers on the spot, notices where you struggle, and connects every topic to your own organisation.

Ask about any cardStuck on a concept, a control or a framework? Ask on the card you are reading. Cerby knows the whole course and takes you to the exact video, diagram or check that helps.

He gets to know youYour role, your goal, the time you have. He notices which topics click and which do not, and remembers it from session to session.

He teaches by askingInstead of handing out answers, Cerby asks, gives hints and short practice questions, and brings back the questions you missed when it is time to review them.

Made for your organisationWhat you write in the worksheets about your own systems, Cerby uses to make every explanation concrete for your situation, and it ends up in your action plan.

What Cerby knows about you is yours: he tells you on request, and you can reset it at any time.

The network perimeter is gone, and the AI agents now calling your APIs and retrieving your data never lived inside it anyway. Most organisations still run flat networks and single-factor logins while pretending the old moat still holds. This module lays out what replaces it and what to check first.

#### What you will learn
- Why castle-and-moat fails under cloud, remote work, and AI tool access
- The three zero trust principles: verify explicitly, least privilege, assume breach
- The concrete measures that enforce zero trust: MFA, micro-segmentation, continuous monitoring, endpoint health checks, RBAC/ABAC, encryption with your own keys, and incident response
- The question to ask your IT team for each measure
- What changes when the "user" is a model or an agent with tool access
- The three questions to ask before any AI system goes live

#### Who it is for
For anyone in IT, security, or management who needs a working grasp of zero trust, no prior security background required. If you're responsible for deciding how systems, people, or AI agents get access to your data, this is the 25 minutes that tells you what to check and what to ask.

What the course covers

1 Zero Trust in a Nutshell3 lessons