Stage 1 · Lesson 7 of 8
The law and ethics of authorised testing
Getting into a computer system without permission is a crime in most countries. That is true even if you only look around, and even if you mean well. The UK and the US Computer Fraud and Abuse Act (CFAA) are two examples, and most countries have their own laws.
There are only a few safe places to practise. You can use systems you own, and labs and (practice competitions) built to be attacked. You can also join programmes, as long as you stay inside the scope they publish.
Professional testers work only under a written agreement. It says exactly what they may test and when. This matters on every path: defenders handle private data, and engineers test only their own company's systems.
Common traptesting a college portal or a friend's website "to help", which is unauthorised access and can end a career before it starts.
A question to check yourself, an AI practice session and 1 cheat sheet entry come with the full roadmap. Unlock
Resources for this stage
Start with· follow one of these
- CourseFreeProfessor Messer's Security+ (SY0-701) Course
Professor Messer · Beginner
Free video course whose early sections cover general security concepts, threats and cryptography at exactly the right depth
- PlatformFreeTryHackMe
TryHackMe · Beginner
The free pre-security and introductory rooms teach networking, Linux and web basics in guided, browser-based labs