Course content
8 modules. Open a module to see what it covers.
1 Introduction to CybersecurityObjectives · topics · practical exercise
This module introduces the concept of cybersecurity and establishes the importance of protecting computers, networks, applications and information from unauthorised access, damage, disruption and misuse.
Learning objectives
By the end of the module, learners should be able to:
- Define cybersecurity and information security.
- Explain why cybersecurity is important.
- Identify common cyber risks and threats.
- Explain the CIA Triad.
- Recognise the responsibilities of individuals and organisations in maintaining cybersecurity.
Topics covered
- Introduction to Cybersecurity
- Cybersecurity vs. Information Security
- Importance of Cybersecurity
- Cybersecurity terminology
- Information assets and their value
- Threats, vulnerabilities and risks
- The CIA Triad: Confidentiality, Integrity, Availability
- Cybersecurity roles and responsibilities
- Cybersecurity in organisations and everyday life
- Introduction to ethical and responsible cybersecurity
Practical exercise
- Identify valuable information assets in a typical organisation.
- Classify examples according to confidentiality, integrity and availability.
- Identify potential threats and vulnerabilities affecting a sample organisation.
- Conduct a basic personal cybersecurity self-assessment.
Expected outcome
Learners will understand the purpose of cybersecurity and be able to identify basic cyber risks, assets, threats and vulnerabilities.
2 Cyber Threats, Attacks and Social EngineeringObjectives · topics · practical exercise
This module examines common cyber threats and attack techniques, with emphasis on recognising and preventing attacks rather than conducting attacks.
Learning objectives
Learners should be able to:
- Identify common cyber threats.
- Explain how common cyberattacks occur.
- Recognise phishing and social engineering attempts.
- Identify suspicious online behaviour and communications.
- Apply appropriate defensive responses to common threats.
Topics covered
- Malware
- Viruses and worms
- Trojans
- Ransomware
- Spyware
- Phishing
- Spear phishing
- Social engineering
- Password attacks
- Identity theft
- Denial-of-Service concepts
- Insider threats
- Common attack vectors
- Cybercrime awareness
Practical exercise
- Analyse sample emails and identify phishing indicators.
- Examine simulated social-engineering scenarios.
- Identify suspicious links, attachments and requests.
- Develop a personal response checklist for suspected phishing.
Expected outcome
Learners will be able to recognise common cyber threats and identify indicators of phishing, social engineering and other malicious activities.
3 Password Security, Authentication and Access ControlObjectives · topics · practical exercise
This module focuses on protecting user accounts and organisational systems through effective authentication, password management and access-control practices.
Learning objectives
Learners should be able to:
- Explain authentication and authorisation.
- Create and manage strong passwords.
- Explain multi-factor authentication.
- Understand the principle of least privilege.
- Identify different forms of access control.
Topics covered
- Authentication
- Authorisation
- Identification
- Strong password principles
- Password managers
- Password security risks
- Multi-Factor Authentication (MFA)
- Biometrics
- Role-Based Access Control (RBAC)
- Principle of least privilege
- User accounts and permissions
- Account security policies
Practical exercise
- Evaluate sample passwords against security criteria.
- Configure MFA in a supported training environment.
- Create a basic user-access matrix for a sample organisation.
- Assign appropriate permissions based on job roles.
Expected outcome
Learners will understand how identity and access controls protect systems and will be able to apply basic account-security practices.
4 Network Security FundamentalsObjectives · topics · practical exercise
This module introduces basic networking concepts and explains how networks can be protected against unauthorised access, interception and disruption.
Learning objectives
Learners should be able to:
- Explain basic computer networking concepts.
- Identify common network devices.
- Explain common network security controls.
- Understand the purpose of firewalls.
- Recognise secure and insecure network practices.
Topics covered
- Networking fundamentals
- LAN, WAN and Internet concepts
- IP addresses
- MAC addresses
- Routers and switches
- Wireless networks
- Firewalls
- Network segmentation
- VPN concepts
- Secure Wi-Fi
- Network monitoring
- Basic network security controls
- Public vs. private networks
Practical exercise
- Draw a basic organisational network diagram.
- Identify devices and communication paths.
- Configure basic security settings on a training network.
- Examine firewall rules in a controlled environment.
- Identify risks associated with unsecured public Wi-Fi.
Expected outcome
Learners will understand basic networking and be able to identify fundamental controls used to protect networks.
5 Data Protection, Encryption and Secure ComputingObjectives · topics · practical exercise
This module introduces methods for protecting sensitive information through encryption, secure data handling, backups and safe computing practices.
Learning objectives
Learners should be able to:
- Explain the importance of data protection.
- Distinguish between encryption and hashing.
- Explain basic encryption concepts.
- Identify sensitive information.
- Apply secure data-handling practices.
- Explain the importance of backups.
Topics covered
- Data security fundamentals
- Sensitive and confidential information
- Data classification
- Encryption concepts
- Symmetric and asymmetric encryption
- Hashing
- Digital signatures – introduction
- Secure file handling
- Data backup
- Data recovery
- Data loss prevention concepts
- Secure disposal of information
- Data privacy principles
Practical exercise
- Classify sample organisational data.
- Demonstrate basic file encryption using an approved training tool.
- Compare encryption and hashing conceptually.
- Develop a simple backup plan for a small organisation.
- Identify insecure data-handling practices.
Expected outcome
Learners will understand fundamental data-protection techniques and be able to apply secure practices for storing, transferring and managing information.
6 Endpoint Security and Secure SystemsObjectives · topics · practical exercise
This module focuses on protecting computers and other endpoint devices from malware, unauthorised access and security weaknesses.
Learning objectives
Learners should be able to:
- Explain endpoint security.
- Identify common endpoint vulnerabilities.
- Apply basic system-hardening practices.
- Explain the importance of software updates.
- Recognise the role of antivirus and endpoint protection.
Topics covered
- Endpoint security
- Computer and mobile device security
- Operating system security
- Software updates and patching
- Antivirus and anti-malware
- Endpoint Detection and Response (EDR) concepts
- Secure configuration
- Application security
- Device access controls
- USB and removable-media risks
- Browser security
- Secure workstation practices
Practical exercise
- Conduct a basic security checklist on a training computer.
- Review operating-system update settings.
- Configure basic endpoint security controls.
- Identify unnecessary services or applications in a controlled environment.
- Develop a secure workstation checklist.
Expected outcome
Learners will be able to identify common endpoint risks and apply basic measures to secure computers and user devices.
7 Security Monitoring, Incident Response and Risk ManagementObjectives · topics · practical exercise
This module introduces the processes used to identify, report, investigate and respond to cybersecurity incidents.
Learning objectives
Learners should be able to:
- Explain cybersecurity incidents.
- Identify indicators of compromise at a basic level.
- Explain the incident-response lifecycle.
- Understand basic risk assessment.
- Report security incidents appropriately.
- Recommend basic preventive and corrective measures.
Topics covered
- Cybersecurity incidents
- Indicators of compromise
- Security logs – introduction
- Security monitoring
- Incident identification
- Incident reporting
- Incident Response Lifecycle:
- Preparation
- Identification
- Containment
- Eradication
- Recovery
- Lessons learned
- Risk assessment
- Threat likelihood and impact
- Business continuity concepts
- Disaster recovery concepts
- Security awareness and reporting procedures
Practical exercise
- Analyse a simulated security incident.
- Identify what happened, what was affected and possible indicators.
- Complete a basic incident-reporting form.
- Develop a simple incident-response checklist.
- Conduct a basic risk assessment for a sample organisation.
Expected outcome
Learners will understand how organisations identify, report and respond to cybersecurity incidents and assess basic security risks.
8 Cybersecurity Assessment, Security Awareness and Capstone ProjectObjectives · topics · practical exercise
The final module integrates knowledge from the programme through a practical cybersecurity assessment. Learners will evaluate a simulated organisation, identify risks and recommend appropriate security controls.
Learning objectives
By the end of the module, learners should be able to:
- Conduct a basic cybersecurity assessment.
- Identify vulnerabilities and security risks.
- Recommend appropriate security controls.
- Develop basic cybersecurity policies and procedures.
- Demonstrate responsible cybersecurity behaviour.
- Present cybersecurity findings professionally.
Topics covered
- Cybersecurity assessment fundamentals
- Security checklists
- Vulnerability vs. risk
- Basic risk rating
- Security controls
- Security policies
- Acceptable Use Policy
- Password and account-security policy
- Security awareness
- Cybersecurity governance basics
- Ethical cybersecurity practices
- Capstone project planning
- Security assessment reporting
Practical exercise: Capstone Project
Learners will conduct a Basic Cybersecurity Assessment of a Simulated Organisation.
The project should include:
- Identify important information assets.
- Identify potential threats.
- Identify vulnerabilities.
- Assess basic risks.
- Review password and access-control practices.
- Review network-security practices.
- Review endpoint-security practices.
- Review data-protection practices.
- Recommend appropriate security controls.
- Develop a basic cybersecurity improvement plan.
- Present findings to the class or assessment panel.
Expected outcome
Learners will demonstrate the ability to assess basic cybersecurity risks, recommend appropriate controls and communicate security findings in a professional manner.
