Qualifi Level 5 Extended Diploma in Cyber Security

Cyber Security Threat and Risk

• Understand complex business cyber security threats and risks
• Understand recent mega breaches and explain malware and ransomware attacks
• Understand how threats and malicious hackers are advancing and developing customised intrusion tools

Network Security and Data Communications

• Understand how computers and digital devices communicate with one another over a network
• Understand, at a strategic level, how computer networking, web applications and software can be exploited
• Understand methods of security prevention and systems hardening
• Understand key network security and systems resilience tools, terminology and models

Database Security and Computer Programming

• Understand the broad range of information security controls to protect databases
• Understand types of database categories of control
• Understand the underpinning concepts and models of cloud-based storage solutions
• Understand the relationship between computer programming and computer hacking
• Understand the ‘interpreted’ general-purpose programming language, Python

Incident Response, Investigations and Forensics

• Understand the role and composite parts of Incident Response as a business function and how CERTS operate
• Understand aligned task/task forces for Business Continuity, Disaster Recovery and Crisis Management
• Understand how major computer incidents are formally investigated
• Understand laws and guidance in relation to the conduct of planned and structured major incident investigations

Security Strategy: Laws, Policies and Implementation

• Understand the concept of strategy, strategic management, planning and buy-in in relation to cyber security 
• Understand how legislation, formal industry standards, training and accreditations support cyber security 
• Understand how to implement Plan, Do, Check and Act security and risk management policies
• Understand the future legal and technical environment and the impact on cyber security planning and digital risk management
• Understand how to plan and design a security audit for a cyber network

Cyber Security Threats and Risks: Banking and Finance

• Understand the threats and risks facing traditional and emerging financial services
• Understand the architectural structures of traditional and emerging financial markets
• Understand how payments systems connect to underpinning financial services architecture
• Understand how cryptocurrencies connect to underpinning financial services architecture

Cyber Wars

• Understand how nation states are potentially engaged in cyber defence and offensive capability strategy
• Understand the motivations and causes behind nationstate-linked cyber-attacks and breaches
• Understand how private sector industry has been targeted by potentially statesanctioned cyber-crime groups and/or armies
• Understand how CNI has been targeted by statebacked cyber-crime groups and/or armies

Cryptography

• Understand key cryptographic principles and modes
• Understand the standards, regulations and laws that apply to business and government organisations in relation to encryption
• Design an encryption plan and courses of action for a given organization

Digital Investigations and Forensics

• Understand the core principles of digital investigations
• Apply the types of tool that support professional digital investigations at a strategic level
• Plan for an investigations and forensics teams
• Understand the importance of safeguarding evidential integrity in digital investigations

Communications and Incident Management

• Understand the physical and human resources required to manage a major suspected cyber security incident
• Apply Business Continuity Management to major incident planning and response
• Understand how Disaster Recovery and Crisis Management are integrated into a suspected major cyber-enabled incident
• Evaluate the potential impact of NOT planning crisis communications and incident response

Strategic Leadership

• Understand how data protection legislation impacts considerations of strategy-setting and strategic leadership
• Understand the role senior leaders and strategic leadership
• Evaluate the management streams and performance monitoring mechanisms that relate to information security
• Understand how threat and risk identification and management is integrated into C-Suite considerations and governance