Thinking Like a Security Manager
Like Duolingo, but for Thinking Like a Security Manager. Tomo turns the whole topic into a game you play five minutes a day, until it actually sticks.
For the part of you with thirty open tabs that never became anything.
Free forever · No credit card · iPhone & Android

Key ideas in Thinking Like a Security Manager
- Confidentiality is about preventing unauthorized disclosure
- Integrity ensures data is accurate and hasn't been modified
- Encryption is a primary tool for protecting data privacy
- Unauthorized changes to data represent an integrity breach
- Access controls limit who can view sensitive information
- Digital signatures and hashing are used to verify data has not been tampered with
- Applying the concept of confidentiality to access control
- Recognizing an integrity failure in a real-world scenario
- Availability means systems are accessible when authorized users need them
- Redundant power supplies and backups prevent downtime
- DDoS attacks are the primary threat to availability
- Identifying measures that support system availability
- Increasing one pillar often creates friction for another
- Security professionals must balance protection with usability
- Extreme confidentiality measures can hinder system performance
- Understanding the trade-offs between the three pillars
You've tried the other tabs
Thirty open tabs. Four facts you actually kept.
You watched. You nodded. By Sunday it was gone.
One answer, then back to scrolling.
Eight weeks. You meant to finish. You didn't.
Tomo gives Thinking Like a Security Manager the Duolingo treatment: levels, streaks, and quick quizzes that test what you just learned. That game loop is what the tabs above never had, so it's the one you actually finish.
Here's what playing it feels like
A real question from this course. Take your best guess.
When we talk about 'Confidentiality' in security, what is our main goal?
Get it right to open this lesson and 11 more in the app.
Where Thinking Like a Security Manager takes you
Learn to view the digital world through the lens of the CISSP. You'll move beyond technical fixes to understand the high-level strategies that keep global organizations safe.
- 1
The Security Mindset
- The Three Pillars of Security
- The Logic of Risk
- 2
Building the Defense
- Defense in Depth
- Controlling Access
2 sections · 4 units · 12 levels. Built to play, not to enroll.
You pick the voice
Thinking Like a Security Manager is taught in the The Bestie style: your friend who just gets it. Want a different feel? In the app you can spin up the same topic in any of Tomo's teaching styles. Same facts, totally different vibe.
More Technology on Tomo
Thinking Like a Programmer
Learn to speak the language of logic. This course transforms the way you solve problems by teaching you how to give precise, powerful instructions to a computer.
Instagram Growth for Photographers
Move beyond basic posting and learn how to turn your photography portfolio into a high-engagement community by avoiding common growth traps and mastering the modern algorithm.
TypeScript for JavaScript Developers
Upgrade your JavaScript workflow by catching bugs before they happen. Learn to use TypeScript as a powerful safety net that makes your code easier to write and harder to break.
The Solo Developer's System Design
Master the architectural patterns and deployment strategies needed to build, ship, and maintain professional-grade web applications without a team.
Business Automation with n8n
Move beyond simple triggers to build complex, AI-powered business systems. Learn to orchestrate data, integrate LLMs like Claude, and solve real-world consulting challenges with node-based logic.
Ham Radio: Your First License
Get ready to pass your Technician Class exam and join the global community of amateur radio operators. Learn how to talk across town or into space using the right frequencies and rules.
Start Thinking Like a Security Manager today.
Download Tomo, search Thinking Like a Security Manager, and play your first lesson in under a minute.