Baitaphish
Security intelligence
SearchLatest briefing
SCS-C03 learning path

Choose intensity from evidence.

Day 0 checks prerequisites and diagnostic performance. The recommended route is always overridable, and every day combines learning, application, recall, assessment, and remediation.
50 core hours7, 14, or 30 daysProgress stays on this device

Routing rules

7-day intensive

Overall at least 75%, every domain at least 60%, and prerequisites met.

14-day balanced

Overall 60–74% or materially inconsistent domain results.

30-day foundation

Overall below 60%, a domain below 45%, or missing foundations.

These are Baitaphish recommendations, not provider rules or pass guarantees.

Choose your path

Experienced practitioners who meet prerequisites, score at least 75% overall, and have no domain below 60%.

  1. Day 17h

    Identity and access

    Objectives
    4.1, 4.2
    Lesson
    Evaluate authentication, federation, sessions, trust, and every authorization policy layer.
    Decision matrix
    Complete the IAM policy-layer matrix from memory.
    Application
    Run SCS-L04 and map one cross-account case from SCS-L05.
    Recall
    Complete D4 concept and decision cards.
    Check
    Take the D4 domain check and explain each explicit deny.
    Remediation
    Below 70%: repeat policy evaluation with a new principal/resource pair before continuing.
  2. Day 27h

    Detection and incident response

    Objectives
    1.1, 1.2, 1.3, 2.1, 2.2
    Lesson
    Connect telemetry, findings, routing, triage, containment, evidence, recovery, and exercises.
    Decision matrix
    Complete signal-to-detection and incident-action matrices.
    Application
    Run SCS-L01 through validation and rehearse SCS-L03.
    Recall
    Complete D1–D2 cards.
    Check
    Take D1 and D2 checks; build one end-to-end event timeline.
    Remediation
    If a signal cannot be tied to an owner and response, repair that route before continuing.
  3. Day 38h

    Infrastructure security

    Objectives
    3.1, 3.2, 3.3
    Lesson
    Trace edge, compute, network, hybrid, inspection, endpoint, and workload-identity decisions.
    Decision matrix
    Complete the infrastructure-control matrix for three architectures.
    Application
    Run SCS-L08 in a sandbox or complete the architecture-only mode.
    Recall
    Complete D3 cards.
    Check
    Take the D3 check and redraw all traffic paths.
    Remediation
    Below 70%: rebuild one route table/inspection example and explain return traffic.
  4. Day 47h

    Data protection

    Objectives
    5.1, 5.2, 5.3
    Lesson
    Reason from classification, ownership, data state, key lifecycle, secret lifecycle, and evidence.
    Decision matrix
    Complete the encryption/key matrix.
    Application
    Run SCS-L06 and SCS-L07 with non-sensitive data.
    Recall
    Complete D5 cards.
    Check
    Take the D5 check and defend one key-ownership decision.
    Remediation
    Below 70%: compare AWS-owned, AWS-managed, customer-managed, imported, and multi-Region choices.
  5. Day 57h

    Foundations and governance

    Objectives
    6.1, 6.2, 6.3
    Lesson
    Turn requirements into organization design, versioned controls, drift evidence, compliance, and exceptions.
    Decision matrix
    Complete the governance/assurance matrix.
    Application
    Finish the governance portions of SCS-L01, L05, and L08.
    Recall
    Complete D6 cards and mixed recall.
    Check
    Take D6 plus a cumulative 30-item check.
    Remediation
    Any domain below 70% becomes the first remediation block on Day 6.
  6. Day 67h

    Practice A and targeted repair

    Objectives
    1.1, 1.2, 1.3, 2.1, 2.2, 3.1, 3.2, 3.3, 4.1, 4.2, 5.1, 5.2, 5.3, 6.1, 6.2, 6.3
    Lesson
    Review only missed objectives after completing the assessment closed-book.
    Decision matrix
    Rebuild the two matrices associated with the weakest domains.
    Application
    Repeat the validation step from one missed critical lab.
    Recall
    Use error-log cards only.
    Check
    Complete fresh timed Practice A.
    Remediation
    Below 80% or a domain below 70%: route to the 14-day extension and repair before Practice B.
  7. Day 77h

    Practice B and exam execution

    Objectives
    1.1, 1.2, 1.3, 2.1, 2.2, 3.1, 3.2, 3.3, 4.1, 4.2, 5.1, 5.2, 5.3, 6.1, 6.2, 6.3
    Lesson
    Close repeated misses and rehearse evidence-first, least-complex, reversible decisions.
    Decision matrix
    Complete every matrix from a blank copy.
    Application
    Explain three critical lab tradeoffs without notes.
    Recall
    Final mixed recall; stop adding new material.
    Check
    Complete fresh timed Practice B and evaluate every readiness hard gate.
    Remediation
    If any hard gate fails, do not label exam-ready; schedule focused remediation and another fresh assessment.