SHIELD 2040: Cyber security for the next wave
The world needs a new wave of cyber professionals, and you do not need a degree or a budget to start. SHIELD 2040 is a free learning track that follows the real frameworks of the field, from the NIST NICE Framework and Cybersecurity Framework 2.0 to zero trust, AI security and post-quantum cryptography. Every course, lab and guide we recommend is free to use.
The track has 6 pages, six pillars and free hands-on practice, and your Curiosity Coach can fit it to any level, from first-time learners to career changers.
An honest note about “2040”
“2040” is our own forward-looking framing, not a NIST mandate. It is grounded in what NIST's published frameworks and timelines point toward, such as the transition plan in NIST IR 8547, which proposes deprecating quantum-vulnerable algorithms by 2030 and disallowing them by 2035. NIST does not require anything of learners “by 2040”. We use the year to help you think about the skills a career that starts today will need.
The six S.H.I.E.L.D. pillars
Security foundations · Hands-on defense · Identity & zero trust · Emerging threats (AI, post-quantum, OT/IoT) · Laws, governance & risk · Defend the future (careers).
S
S · Security foundations
Learn how networks, systems and people stay safe, with free beginner courses that need no experience.
Page: Cyber Security Foundations
I
I · Identity & zero trust
Understand identity, passkeys and zero trust, the idea of “never trust, always verify”.
Page: Identity & Zero Trust
L
L · Laws, governance & risk
Read the rules of the road: NIST frameworks, privacy, risk management and compliance, explained plainly.
Page: NIST Frameworks, Governance & Risk
The 6 SHIELD 2040 pages
Each page has what you will be able to do, free training with honest cost labels, hands-on practice, a guide for Curiosity Coaches and a resource library.
Cyber Security Foundations
Core security ideas and a free, ordered path from beginner to entry-level job skills, with free courses and badges from Cisco, IBM, Fortinet, CISA and more.
Pillar: S · Level: Beginner · Time: About 40 to 80 (estimate)
OPEN THE PAGE
Hands-on Defense: Labs, CTFs & Blue Team
Free practice platforms, competitions, a free-tools home lab and the ethics of legal hacking, so you can practise defending safely.
Pillar: H · Level: Beginner to Intermediate · Time: About 40 to 100 (estimate)
OPEN THE PAGE
Identity & Zero Trust
Zero trust and modern identity: NIST SP 800-207, SP 1800-35, SP 800-63-4, CISA's maturity model, passkeys, and free labs.
Pillar: I · Level: Beginner to Intermediate · Time: About 30 to 45 (estimate)
OPEN THE PAGE
Cyber 2040: Post-Quantum, AI Security & What's Next
Post-quantum cryptography, AI and agent security, OT/ICS, IoT, software supply chain, cloud and space, with free training for every area.
Pillar: E · Level: Beginner to Advanced · Time: 40-60 (estimate)
OPEN THE PAGE
NIST Frameworks, Governance & Risk
Plain-English guides to NIST CSF 2.0, SP 800-53, SP 800-171, the Privacy Framework, AI RMF, SSDF and incident response, with free official training.
Pillar: L · Level: Beginner to Intermediate · Time: About 25 to 40 (estimate)
OPEN THE PAGE
Defend the Future: Cyber Careers with the NICE Framework
Use the NICE Framework, CyberSeek and CISA career tools to choose a cyber role, then follow free training and programs toward it.
Pillar: D · Level: Beginner to Intermediate · Time: 20-40 (estimate)
OPEN THE PAGE
NIST frameworks you'll meet
Real cyber teams speak in NIST frameworks. SHIELD 2040 introduces each one in plain English and points to the free official documents.
NICE Framework
Work roles, tasks, knowledge and skills for the cyber workforce, and the basis for career pages.
Learn it on: SHIELD 2040 page
Cybersecurity Framework 2.0
Six functions (Govern, Identify, Protect, Detect, Respond, Recover) for managing cyber risk.
Learn it on: SHIELD 2040 page
SP 800-53 and the RMF
A catalogue of security and privacy controls, and the Risk Management Framework that uses them.
Learn it on: SHIELD 2040 page
Privacy Framework
A voluntary tool for managing privacy risk alongside cyber risk.
Learn it on: SHIELD 2040 page
AI Risk Management Framework
Guidance for building and using trustworthy AI systems.
Learn it on: SHIELD 2040 page
SSDF (SP 800-218)
Secure software development practices, from design to release.
Learn it on: SHIELD 2040 page
Zero Trust (SP 800-207)
The architecture behind “never trust, always verify”.
Learn it on: SHIELD 2040 page
Post-quantum standards (FIPS 203, 204, 205)
The first NIST standards for cryptography designed to resist quantum computers, with the IR 8547 transition plan.
Learn it on: SHIELD 2040 page
More learning adventures
Cyber and AI meet in many places. Explore the AI Academy Atlas for free AI learning, and QUBIT Quest to understand the quantum computers that post-quantum cryptography is built to resist.