CIS 201 · Information Systems and Cyber Security · Level 200 (Phase Two)
A Royal Army College course in the everyday habits that keep the Principality's accounts, devices, and information safe.
Course length: 10 hours, studied online and asynchronously at the student's own pace, together with any in-person practical instruction and assessment the course requires.
Foreword
The Principality of Kaharagia is not held together by territory; it is held together by information. Its records, its services, its communications, and the trust of its nationals all live in digital systems, and those systems are only as safe as the everyday habits of the people who use them. A single reused password, one clicked link, one unpatched phone, can undo a great deal of careful work. Cyber security, for most members, is not a dark art performed by specialists; it is a set of plain, learnable habits that anyone can keep.
This course teaches those habits. It explains why cyber security matters to a digital state and what we are protecting; it teaches strong passphrases and multi-factor authentication, how to recognise and report phishing and social engineering, how to keep a device safe, how to handle and back up information, how to browse the web safely, how to avoid malware, ransomware, and scams, why keeping software updated matters, how to guard your privacy and digital footprint, and how to spot and report trouble early. It is built on the recognised foundations, the NIST Cybersecurity Framework, the CIS essential cyber-hygiene controls for small organisations, and current guidance on passwords and identity, brought down to earth for an ordinary member.
Everything here is defensive and lawful. This is the speciality that guards Kaharagia's systems, records, and people. It is never about attacking, intruding upon, or surveilling anyone. The most valuable security tool the Army has is an alert, disciplined member, and this course sets out to build one.
Who this course is for
This course is for every member of the Royal Kaharagian Army, whatever their speciality, because everyone uses accounts and devices on Army business. It is also the entry course for the Information Systems and Cyber Security speciality. It assumes no technical background.
What this course covers
| Lesson | Title |
|---|---|
| 01 | Why Cyber Security Matters to a Digital Principality |
| 02 | Passwords, Passphrases, and Multi-Factor Authentication |
| 03 | Phishing and Social Engineering |
| 04 | Device and Endpoint Security |
| 05 | Safe Data Handling and Communication |
| 06 | Safe Browsing and the Web |
| 07 | Malware, Ransomware, and Online Scams |
| 08 | Updates, Patching, and Keeping Software Current |
| 09 | Privacy, Social Media, and Your Digital Footprint |
| 10 | Spotting and Reporting Trouble |
How this course fits the catalogue
CIS 201 is the foundation of the Information Systems and Cyber Security speciality and the natural partner of SIG 220 · Communications Security and Digital Discipline, sharing one disciplined, defensive mindset. It supports HCR 220 · Emergency Preparedness and Civil Resilience (continuity) and PME 210 · Basic Staff Duties and Written Orders (handling records). It leads on to CIS 210 (Information Systems for Small Forces), CIS 220 (Identity, Access, and Records Security), and CIS 310 (Cyber Incident Response and Continuity).
A note on scope and access
This speciality is defensive only: cyber hygiene, access control, system security, records protection, continuity, and incident reporting. It is not cyber warfare, hacking, or unauthorised access. And no member receives administrative access to a system merely by completing a course: access follows appointment, is limited to what the appointment needs, and is granted by the authority responsible for the system.
Crown Copyright © 2026 | Published by Authority of H.R.H. The Prince of Kaharagia