A hands-on cybersecurity course where nobody hands you a flag. You get a ticket, a messy network, and a manager who needs an answer by tomorrow. Investigate. Decide. Fix. Write it up so a human can act on it.
Every mission starts from one sentence you should be able to repeat to anyone. The environment teaches the rest. If a piece of content cannot name its principle and the job task it serves, we delete it.
One sentence at the top of the ticket. No slides. No lecture.
A real office that proves the sentence the hard way.
Walk the office. Read the logs. Confirm it is real. Stop it spreading. Fix it.
An incident report: timeline, impact, fix, and a summary the manager can read.
A rubric grades the principle applied, never the flag found. A person reads it.
You are the new IT hire at a small dental practice. Something is wrong. A weak credential was abused and the evidence is spread across the portal, the file server, and the workstation logs, mixed in with a week of ordinary traffic and at least one thing that looks bad and is not.
Beginners can reveal hints in three tiers. Practitioners get the principle and nothing else. Experts have a second, deeper problem hiding in the same environment, in the place nobody checks.
Deliverable: an incident report with a timeline, the impact, what you fixed, and a plain-language summary for the office manager.
Three tiers you can reveal, one at a time. You still do the work. The hints tell you where to look, not what you will find.
One sentence, the ticket, and the environment. The path is yours to find. The report is judged the way a lead would judge it.
The incident everyone finds is not the one that matters. Something deeper sits in the systems that control the other systems. Nobody tells you it is there.
Protecting information, and the systems that hold and run it, from anyone or anything that would steal it, change it, or take it away from you, and being ready to notice and recover when they do.
That is the whole job in one sentence. Every mission is one phrase of it, taken apart. If you can repeat it to the office manager on day one, you already know what to look for. If you cannot, you are just running tools.
Every mission ships with an instructor guide: the full evidence trail, the answer key, and the rubric. Grading is manual by design, because a report a human cannot judge is not a report.
The long game is a certification ladder topped by a practical exam that is hard enough to mean something, mapped to the NICE Workforce Framework. None of that is finished. Here is exactly where things stand.