Choose by the part of security you want to learn, then compare courses with the provider.
Some links on this page are affiliate links. We may earn a commission from qualifying purchases through these links, at no extra cost to you. Affiliate disclosure.
Choose by learning goal
Whether the course assumes networking or operating-system knowledge
Which exam and version it maps to, and what the certifying body requires
Hands-on labs and which tools you will use
Whether practice happens in legal, isolated lab environments
Learning resources and subject scope
The NIST CSF 2.0 Core organizes cybersecurity outcomes under Govern, Identify, Protect, Detect, Respond and Recover. (Nist Csf Faq — official reference)
NIST describes the CSF as outcomes to prioritize and address cybersecurity risks, not a prescribed checklist of actions. (Nist Csf Faq — official reference)
Organizational Profiles describe current and target cybersecurity posture. (Nist Csf Faq — official reference)
NIST does not offer certification or endorsement of CSF-related products, implementations or services. (Nist Csf Faq — official reference)
Put the subject into practice
For a fictional small organisation, describe one asset and risk, then draft a current-state and target-state note using the CSF functions. Keep any technical practice in an authorised lab.
This is a practice suggestion, not a promised course outcome.
Make a learning route, not a shopping list
Use the documented subject scope below to choose one manageable skill. As a planning exercise, write what you already know, one thing you want to make or explain, and how you will check your work. Then compare a course outline with those needs.
The providers below illustrate different published learning formats. Their inclusion is not a ranking or a promise that every course on the platform covers this exact route.
Documented platform formats
Coursera lists individual courses, Specializations, Professional Certificates and online degree programs. These are distinct types of offering, rather than interchangeable credentials. (Coursera — official documentation)
The platform works with universities and companies; its public catalog includes offerings from Google, IBM and universities. The named issuer should be checked on the individual program. (Coursera — official documentation)
Coursera describes previews, trials and paid access as different routes. A preview or a trial should not be described as unrestricted free access to every course or its certificate. (Coursera — official documentation)
Pluralsight lists courses and learning paths in AI, cloud, data, IT operations, security and software development. (Pluralsight — official documentation)
Hands-on labs and sandboxes are listed separately from video courses. A sandbox is described as a virtual environment for trying tools and practising skills. (Pluralsight — official documentation)
Skill IQ assessments and certification-preparation paths/practice exams are separate platform features. Preparation content is not the external certification itself. (Pluralsight — official documentation)
edX lists individual courses, certificates, executive education and online degrees. The qualification and assessment need to be read for the particular offering. (Edx — official documentation)
The catalog identifies the institution attached to a course or program, with university offerings in subjects such as computing, data science and business. (Edx — official documentation)
The edX site lists MicroMasters and MicroBachelors alongside bachelor’s and master’s degree categories. The name of a pathway alone should not be treated as a university degree or automatic credit. (Edx — official documentation)
Browse Cybersecurity courses on Udemy →
Sources and access details
Official sources read 29 October 2026. Descriptions concern the named resource, edition, model or learning format. They are not independent product tests or guarantees of learning or employment outcomes. Check current access, price and terms with the provider.