Cybersecurity

Level 3 of 3

Advanced Level

Prerequisites

Cybersecurity Intermediate level, or equivalent experience securing networks, systems and accounts in an organisation. Basic networking (IP addressing, DNS) is required.

Duration

12 weeks · 140 guided hours · 6 modules. Taught live by an instructor — online or in person.

By the end of this level you can

  • Lead cybersecurity risk management using the NIST Cybersecurity Framework 2.0
  • Run a vulnerability management programme, including authorised testing in a lab
  • Plan and lead incident response and preserve digital evidence
  • Secure identities, email and cloud services in an organisation
  • Apply data protection principles and professional ethics, and design awareness programmes
  • Design and present a security improvement programme for an organisation

Modules

  1. 1Module 1 · 22 h · 4 lessonsSecurity Governance and Risk Management
  2. 2Module 2 · 22 h · 4 lessonsVulnerability Management and Authorised Testing
  3. 3Module 3 · 22 h · 4 lessonsIncident Response and Digital Evidence
  4. 4Module 4 · 24 h · 4 lessonsIdentity, Email and Cloud Security
  5. 5Module 5 · 20 h · 4 lessonsData Protection, Ethics and Security Culture
  6. 6Module 6 · 30 h · 5 lessonsCapstone: Organisational Security Programme

Advanced level project

Organisational Security Programme

For a real organisation (with written permission) or a detailed case organisation, build a security programme: a CSF 2.0 profile, risk register, vulnerability management process, incident response plan tested by a tabletop exercise, identity and email hardening plan and an awareness plan, presented to leadership.

Deliverables

  • Current and target CSF 2.0 profiles with a gap analysis and risk register
  • Vulnerability management and identity, email and cloud hardening plans
  • An incident response plan and a tabletop exercise report
  • A 12-month roadmap with budget estimates and a leadership presentation

Assessed on

  • Risks and priorities are evidence-based and linked to the organisation's mission
  • Plans are realistic for the organisation's size, skills and budget
  • All testing was authorised, in scope and documented
  • The presentation is clear to non-technical leaders

All levels are taught live by an instructor — online or in person — see registration options.