Here's how you can begin your journey in the field of Information Security, even with no prior experience.

Begin your journey in Information Security by gaining foundational education and certifications like CompTIA Security+. Utilize virtual labs for hands-on experience in penetration testing and security configurations. Engage in online communities to learn from professionals and seek mentorship. Self-study cybersecurity basics through books and articles. Pursue internships or volunteer projects to gain practical skills and build a portfolio. Develop interpersonal skills alongside technical expertise. Stay updated with industry trends through continuous learning and participation in events.

Apesar de serem temas extensos, as informações sobre a área estão acessíveis por diversos meios gratuitos (principalmente num nível básico). Ter curiosidade é a chave para esse aprendizado. Acredite ou não, mesmo um tema que parece "chato" irá enriquecer drasticamente o seu conhecimento

Begin your journey in Information Security by building a strong foundation. Understand core principles like confidentiality, integrity, and availability (CIA triad). Familiarize yourself with basic networking concepts, data transmission, and types of malware. You don't need to become an expert overnight, but grasping these basics will prepare you for more advanced topics. Starting with a solid understanding of these fundamentals is crucial for success as you delve deeper into the technicalities of InfoSec.

Para aprender o básico, é necessário que conheça os pilares de Segurança da Informação: Confidencialidade, Disponibilidade e Integridade. Há inúmeros artigos disponíveis na internet que além de dar uma explicação aprofundada, irão dar exemplos cotidianos do mercado e seus desafios a cerca destes pilares. Além disso, o conhecimento de frameworks de segurança vão dar um norte do que é o padrão de segurança, pois segurança da informação é baseado em controles e estes controle são definidos internacionalmente como ISO27001 e CIS CONTROLS 8. A partir dessas leitura você já terá um bom insumo do que estudar para adentrar ao mundo de Segurança da Informação

Based on my experience, it was about the CIA triad principles confidentiality, integrity, and availability of information at the very beginning of it. Second, one would be becoming accustomed to the different sections of networking.

As for me, the majority of the beginner certificates such as Network+, BTL1 etc. will go through main subjects that are responsible for proper handling of InfoSec. For instance, when I was studying for Security+ test, I was touching on everything from basic cryptography and malware analysis etc. I, however, suggest that you consider getting certified in the discipline of your interest considering that we have many certifications that take care of different aspects of information security.

Certificações são uma excelente maneira de adquirir conhecimento e demonstrar suas capacidades. Nesse mercado, algumas certificações valem muito mais do que um diploma. Evite certificações de "memorização" e comece por certificações práticas, que podem testar seu conhecimento num ambiente real.

Certifications are a great way to prove your knowledge and commitment to potential employers. Start with entry-level certifications like CompTIA Security+, which covers a broad range of Information Security topics. While certifications aren't a substitute for experience, they can open doors and provide structured learning paths. Remember, the goal is to understand the material deeply, not just to pass the test. Earning these certifications demonstrates your dedication and can significantly enhance your credibility as you begin your InfoSec career.

Beginning in Information Security without prior experience involves balancing theory with practical application. Establish a home lab using old computers or virtual machines to apply learned concepts. Experiment with various operating systems, configure firewalls, and practice using penetration testing tools. This hands-on approach builds confidence and deepens understanding beyond theoretical knowledge. It's crucial for developing practical skills that are essential in real-world InfoSec scenarios, setting a strong foundation for future learning and career advancement.

In my experience, participating in CTFs can improve your experience as it simulates real world examples of what you might face in your chosen role/field. Also, platforms like Tryhackme, Letsdefend etc. can also be used to improve your hand-on skills

To get started in information security, emphasis on hands-on experience. Start with beginner-friendly CTF challenges on PicoCTF, OverTheWire, and HackThisSite. Progress to HackTheBox, beginning with "Starting Point" machines. Explore TryHackMe's guided learning paths. Practice with vulnerable VMs from Vulnhub or Metasploitable. Learn about web security with OWASP WebGoat. Set up a home lab with VirtualBox or VMware. As your skills develop, consider participating in bug bounty programs like HackerOne or Bugcrowd.

Networking is crucial when starting in Information Security without prior experience. Join online forums, subscribe to InfoSec blogs, and follow industry experts on social media to stay updated on trends and threats. Engaging in discussions allows learning from others' experiences and gaining insights into the field. Networking not only expands knowledge but also cultivates relationships that may lead to job opportunities or mentorship, accelerating your growth in the InfoSec community.

Beginning in Information Security without prior experience can be facilitated by seeking volunteer opportunities or internships. Many non-profit organizations require help securing their systems but lack resources for full-time professionals. Volunteering allows you to apply your skills in a practical setting, gaining valuable experience while contributing meaningfully. It also showcases initiative and commitment to potential employers, building a foundation for future career growth in InfoSec.

Although it may sound silly, undertaking personal projects such as a password manager, malware, or basic encryption programs can be very beneficial for demonstrating the innate passion of a cybersecurity expert for learning. Additionally, it will help you better understand other concepts.

According to me, your dedication and focus plays a big role. Don't learn the basics or step into this domain, just for the sake of it. You must enjoy what you do, otherwise do not do. Secondly, when you have started working, as you will learn there are multiple domains in Information Security, like SOC, IAM, NETWORKING etc. it becomes important for you to Identify which domain excites you the most and how it correlates with other domains. Hence early identification of which domain you want to continue your journey with becomes important as that gives you a path for future in information Security.