tl;dr: security.sharmaprateek.com - an interactive guide to enterprise security, told as the defense of a medieval castle.
Every semester, the enterprise security lecture in CMPE 272 is the one with the most ground to cover. Authentication, authorization, IAM, network security, Zero Trust, cloud posture management, the SOC, the CISO, data governance… and somehow, all of it has to land in a single session.
The concepts are not individually hard. The challenge is that there are so many of them, and they all depend on each other. Without a mental model to hang them on, they blur into a wall of acronyms.
Why a Castle?
So I reached for one of the oldest security systems humans have ever built: the castle.
A castle never relied on a single defense. It had a moat, walls, gates, guards who checked who was coming in, keys that only opened certain rooms, a chamberlain who knew who was allowed where, and lookouts in a watchtower scanning the horizon. That is defense in depth, centuries before anyone called it that.
Once you see it, the mapping is hard to unsee:
| In the castle | In the enterprise |
|---|---|
| Guards at the gate checking who you are | Authentication |
| Keys that open only certain rooms | Authorization |
| The chamberlain who manages who gets which keys | Identity & Access Management |
| Moats and walls | Network security |
| Trusting no one, even inside the walls | Zero Trust |
| The watchtower | Security Operations Center (SOC) |
| The King’s Master of Defense | The CISO |
The analogy started in my lecture slides. This guide is where it grew up.
What’s Inside
The guide is organized into seven modules that build on each other:
- Identity Layer: authentication, authorization, and IAM
- Network Security: the walls and moats
- Zero Trust Architecture: why “inside the walls” no longer means “safe”
- Cloud Security: protecting a castle you don’t own the land for
- Enterprise Security Teams: the CISO, security teams, and the SOC
- Cloud-Native & Data Security: CNAPP and data governance
- Future of Security: AI in security and quantum cryptography
Each topic starts with the castle analogy, then goes deeper with key points, technical details, and best practices. You can stay at the “castle” level for intuition, or keep reading for the real-world detail.
Playbooks: Making the Decisions Yourself
Reading about security is one thing. Making the calls under pressure is another.
The guide includes three interactive playbooks that put you in the driver’s seat:
- Incident Response: Data Breach Detected
- Zero Trust Migration
- Compliance Audit: SOC 2 Type II
Each one walks you through a realistic scenario where you decide what to do next and see how your choices play out.
Two Ways to Read It
The site opens in Hacker Mode: a black terminal with green text, Matrix rain, and CRT scan lines. It’s fun, and it sets the mood.
If you’d rather just read (or you’re putting it up on a projector), flip the toggle to Professional Mode for a clean, distraction-free layout.
And if you know your way around a classic cheat code, try it in Hacker Mode. 😉
Try It Yourself
Like IAM Tutor, this isn’t meant to replace the deep documentation, frameworks, and certifications out there. It is meant to be a friendly front door: a way to see how the pieces of enterprise security fit together before diving into any one of them.
It started as material for my students, and now I’m sharing it with everyone.