- certifications across 5 vendor families
- 28
- named people in Dorsa Bank
- 57
- standards and frameworks in the reference catalogue
- 279
What matters in cybersecurity
Demonstration articles are marked Sample. Stories marked Fictional scenario take place in the Dorsa Bank simulation and are not real-world reporting.
No articles are published yet.
Prepare for the certification. Understand the profession behind it.
28 certifications across 5 vendor families, mapped domain by domain to the current exam outlines. These are the ones most aligned with a security leadership role.
- CISSPCertified Information Systems Security ProfessionalISC2
- CCSPCertified Cloud Security ProfessionalISC2
- CGRCGovernance, Risk and Compliance CertificationISC2
- ISSMPInformation Systems Security Management ProfessionalISC2
- CISMCertified Information Security ManagerISACA
- CGEITCertified in the Governance of Enterprise ITISACA
- CRISCCertified in Risk and Information Systems ControlISACA
- GSLCSecurity Leadership CertificationGIAC / SANS
Meet Dorsa Bank.
A fictional regulated bank built so that security concepts have somewhere to live. Follow a policy to the people who own it, the assets it protects and the risks it answers, then make the decisions yourself in role desks and incident exercises.
57 people, 17 key assets, 12 controls and 36 core documents, including business continuity plans, audit findings and incident history.
Explore Dorsa Bank
How learning connects
One CISSP topic, business continuity, followed from the lesson to the bank’s evidence to a decision.
- LearnLesson · CISSP 1.7Business continuity requirementsThe BIA sets how long each process can be down. Which one breaches first?
- InvestigateDorsa Bank evidence · BIAProcessMTDRTORetail payments (instant)4 h2 hAtlas core banking8 h4 hDorsa Go mobile app8 h4 h
- DecideDecision · 08:10 · Nimbus eu-1 outageInvoke DR for payments first, then the restPayments back inside the 2 h RTO. Mobile banking in read-only mode.
See it in Dorsa Bank.
Lessons with an enterprise link carry a See this in Dorsa Bank panel. It opens the records that show the concept at work, with a short note on what to look for. 14 lessons are linked today, and more are being mapped.
The business impact analysis decides what matters most and how long each process can be down. Recovery objectives come from the business, not from IT, and the BIA must be refreshed when the business changes.
- Dorsa's BIAEight processes with MTD, RTO, RPO and recovery strategy.
- Ask Dorsa chatbotLaunched in 2025 but never added to the BIA. Can you spot why that matters?
- BC-001 Annual DR failover testWhere the BIA's numbers are proven, or not.
Learn from verified practitioners.
Every mentor’s certification is checked with the issuing body before their profile goes live. Ask a question for free, book a live session, or bring in a trainer for your team.
One subscription: every certification, Dorsa Bank and the Community.
Nothing is licensed separately. Cancel any time: access runs to the end of the period you paid for, and your notes and results stay exportable for 12 months after that.
SecLeaderAcademy issues course completion certificates. It does not award CISSP, CISM or any other professional certification; those come from the certifying body after you pass its exam.
Training a security team?
Team seats billed per person, one shared progress dashboard for the manager, cohorts and assigned training.
Start with the certification you are working toward.
Every plan includes every certification, Dorsa Bank and the Community. News & Insights stays free to read.
Start learningBuilt around the published objectives.
SecLeaderAcademy started as a study group of security managers comparing notes across CISSP, CISM and CRISC. There was plenty to read and plenty of question dumps, and nothing that connected the two.
- Objective-aligned
- Every question cites the domain and objective it tests, so a wrong answer tells you what to revisit.
- Original content
- No recalled exam content. Everything is written here and is legal to study.
- Reviewed by holders
- Nothing ships without review from someone who holds the certification it targets.
- Maintained
- When an exam outline changes, affected questions are rewritten, not retired.
- Traceable
- Lessons link to the standards they draw on and to the Dorsa Bank records that show them at work.
Study on your phone, pick up on your laptop.
Flashcards, practice questions and lesson notes sync with your account, so a ten-minute review on the train counts toward your plan.
The mobile apps are planned and have no release date yet. The website works on phones today.