The Data and AI School of London is an NCFE approved centre for this qualification (NCFE Account No. 11001657). Enrol below to begin your learning journey.
← All courses
Level 2 · NCFE Self-paced
Enrolling now NCFE Approved Qualification number 603/5853/1

NCFE Level 2 Certificate in the Principles of Cyber Security

Understand cyber crime and its motives, cyber security terminology, the law and ethics, common threats, and how systems are protected. 110 guided learning hours, assessed by portfolio.

Duration: 110 guided learning hours, 185 total hours, self-paced online

Level
Level 2
Qualification number
603/5853/1
Awarding organisation
NCFE
Regulated status
On the RQF, regulated by Ofqual
Guided learning hours
110 hours
Total qualification time
185 hours
Delivery
100% online
Study pattern
110 guided learning hours, 185 total hours, self-paced online
NCFE This qualification is awarded by NCFE and regulated by Ofqual
NCFE Account No. 11001657

Course overview

This is a regulated Level 2 qualification (NCFE qualification number 603/5853/1). Its purpose is to provide learners with sector awareness. It introduces knowledge and understanding of the roles and issues relating to cyber security, and acts as a stepping stone that leads learners into studying cyber security at a higher level.

It is designed for those looking to gain a greater understanding of, or build upon their existing knowledge of, cyber security issues.

You study six mandatory units totalling 110 guided learning hours. Unit 01 covers cyber crime and its motives, threat actors, external and insider threats, targeted and untargeted attacks, the vulnerabilities and impact of cyber crime on an individual, a business and a nation, key organisations such as the NCSC, GCHQ and the ICO, hacking and the differences between white-hat, black-hat and grey-hat hackers.

Unit 02 covers terminology including hardware, software, data management and networking, the differences between LAN and WAN, and the terms vulnerability, threat, risk, attack, protection and recovery. It also covers organisational strategies including the security operations centre and network operations centre, current and emerging challenges such as the Internet of Things, the dark web, cloud services and deepfakes, and social engineering including phishing, spear phishing, vishing and smishing.

Unit 03 covers key legislation protecting individuals, businesses and the nation, ways to protect stored data, symmetric and asymmetric encryption, data in transit and data at rest, security checks before releasing information, and ethical and unethical conduct in cyber security.

Unit 04 covers common and emerging threats such as phishing, waterholing and synthetic identities, malicious software including ransomware, viruses, spyware, trojans and worms and how systems become infected and are cleaned, and physical threats including perimeter access control, personal and removable devices, networking infrastructure such as open Wi-Fi and routers, and remote working.

Unit 05 covers routine methods of maintaining cyber security, vulnerability testing, penetration testing, security updates and patching, why maintenance records must be accurate, user access control and how to create one, and firewalls and network traffic.

Unit 06 covers team working and team dynamics, resolving conflict, interpersonal skills used in cyber security roles, and the written communications used in the sector such as vulnerability reports, penetration testing reports, incident reports and internal policy documents.

This is a knowledge only qualification, so there is no requirement to demonstrate practical cyber security skills. Assessment is by an internally assessed and externally quality assured portfolio of evidence, with no exams. Evidence could include research, a learner report, written or oral question and answer, discussion, assignments and presentations.

Learners who achieve this qualification could progress to the Level 3 Certificate in Cyber Security Practices, the Level 3 Diploma in IT User Skills, the Level 3 Award in Cyber Security Leadership, or the Level 3 Foundation Technical Level IT: Cyber Security.

Delivery is 100% online with tutor support.

What you will study

The units below, their unit reference numbers and their guided learning hours are taken directly from the NCFE qualification specification.

Unit Title Unit reference Hours
01 Introduction to cyber security (mandatory)
3 learning outcomes
  1. Understand motivations for cyber crime
    • 1.1 Describe the term ‘cyber crime’
    • 1.2 Explain the possible motives for cyber crime
    • 1.3 Identify potential threat actors
    • 1.4 Define the terms ‘external threat’ and ‘insider threat’
    • 1.5 Explain the possible motivations that could lead to external and insider threats
    • 1.6 Explain what is meant by ‘targeted’ and ‘untargeted’ attacks
  2. Understand the need for cyber security
    • 2.1 List common cyber crime vulnerabilities of: • an individual • a business • a nation
    • 2.2 Describe the potential impact of cyber crime on: • an individual • a business • a nation
    • 2.3 Explain the importance of cyber security for: • an individual • a business • a nation
    • 2.4 Explain why cyber security issues should be reported promptly
  3. Know about job roles within cyber security
    • 3.1 Describe the role of key organisations in the cyber security industry
    • 3.2 Identify general job functions carried out by cyber security professionals
    • 3.3 Define the term ‘hacking’
    • 3.4 Explain the differences between the following types of hacker: • white-hat • black-hat • grey-hat
    • 3.5 Identify the key skills requirements of a cyber security professional
 L/618/1181 20
02 Understand terminology used in cyber security (mandatory)
3 learning outcomes
  1. Understand cyber security terminology
    • 1.1 Define what is meant by the following in relation to cyber security: • hardware • software • data management • networking
    • 1.2 Describe the differences between LAN and WAN
    • 1.3 Explain the following terms in relation to cyber security: • vulnerability • threat • risk • attack • protection • recovery
    • 1.4 Describe organisational strategies in relation to cyber security
  2. Understand current and emerging challenges in cyber security
    • 2.1 Give examples of current and emerging challenges in cyber security
  3. Understand what is meant by social engineering
    • 3.1 Define the term ‘social engineering’
    • 3.2 Explain the benefits of using social engineering to a cyber criminal
    • 3.3 Describe what is meant by ‘open source information’
    • 3.4 Identify information a cyber criminal could obtain through open sources
    • 3.5 Describe techniques that could be used as part of social engineering
    • 3.6 Identify useful information a cyber criminal could gain through social engineering
 R/618/1182 15
03 Understand legal and ethical aspects of cyber security (mandatory)
3 learning outcomes
  1. Understand key legislation related to cyber security
    • 1.1 Summarise key points of current legislation related to cyber security to protect: • an individual • a business • a nation
  2. Understand procedures to maintain data confidentiality and security
    • 2.1 Describe ways to protect stored data
    • 2.2 Explain basic techniques for encrypting information
    • 2.3 Describe the advantages and disadvantages of each encryption technique
    • 2.4 Define what is meant by the following: • data in transit • data at rest
    • 2.5 Explain the security checks an organisation might undertake before releasing information
  3. Understand ethical conduct in cyber security
    • 3.1 Describe ethical conduct within cyber security
    • 3.2 Describe unethical conduct within cyber security
 Y/618/1183 20
04 Understand common threats to cyber security (mandatory)
3 learning outcomes
  1. Know about common and emerging threats to cyber security
    • 1.1 Describe common and emerging threats to cyber security
  2. Understand what is meant by malicious software
    • 2.1 Explain what is meant by malicious software
    • 2.2 Identify ways in which malicious software can infect a system
    • 2.3 Identify methods for removing malicious software from an infected system
  3. Understand physical threats to cyber security
    • 3.1 Explain why perimeter access control is important
    • 3.2 Give examples of when check and challenge on the premises may be needed
    • 3.3 Identify the possible threats to a business presented by the use of: • personal devices • removable devices • hardware • networking infrastructure
    • 3.4 Give examples of possible threats presented by remote working
    • 3.5 Describe best practice which can help to minimise physical threats to cyber security
 D/618/1184 15
05 Understand methods of maintaining cyber security
3 learning outcomes
  1. Understand preventative methods used to maintain cyber security
    • 1.1 Describe routine methods to maintain cyber security
    • 1.2 Explain what is meant by vulnerability testing
    • 1.3 Explain what is meant by penetration testing
    • 1.4 Explain what is meant by security updates
    • 1.5 Explain the term ‘patching’ in relation to cyber security
    • 1.6 Explain why cyber security information and maintenance records should be accurate and up-to- date
  2. Understand the principles of user access control
    • 2.1 Define what is meant by user access control
    • 2.2 Identify methods of restricting user access
    • 2.3 Explain how to create a user access control system
  3. Understand the use of firewalls
    • 3.1 Define the term ‘firewall’
    • 3.2 Describe the key functions of a firewall
    • 3.3 Define what is meant by network traffic
    • 3.4 Explain the advantages and disadvantages of using a firewall to protect from threats
 H/618/1185 20
06 Working with others in cyber security
3 learning outcomes
  1. Understand team working for cyber security
    • 1.1 Describe what is meant by team dynamics
    • 1.2 Compare the benefits of working with others to working alone
    • 1.3 Describe ways in which team members can work together to make use of individual strengths
    • 1.4 Identify ways to resolve conflict within a team
    • 1.5 Explain how reviewing work activities can support effective teamwork
  2. Understand the use of interpersonal skills for working in cyber security
    • 2.1 Identify a range of interpersonal skills used when working in cyber security
    • 2.2 Give examples of when different interpersonal skills might be used when working in cyber security
    • 2.3 Describe how working with others within an organisation can support cyber security
  3. Understand types of written communications used in cyber security
    • 3.1 Explain the purpose of written communications used in cyber security
    • 3.2 Identify the potential audience for the written communications used
    • 3.3 Identify the type of information that may be included in a written communication
    • 3.4 Give examples of the elements that support effective written communication
 K/618/1186 20
Total guided learning hours 110

Entry requirements

  • There is no specific prior knowledge a learner must have for this qualification.
  • Learners should be aged 16 or above to undertake this qualification.
  • Learners may find it helpful if they have already achieved a Level 1 or Level 2 Digital Skills or Information Technology qualification.
  • You will need a digital device, a storage medium, web browser software and internet connectivity.
  • This is a knowledge only qualification, so no practical cyber security skills need to be demonstrated.
  • Registration is at the discretion of the centre, in accordance with equality legislation.
Take it with you

The course guide

Everything on this page as one document you can keep, print, or send to whoever is deciding with you.

  • All 6 units, with the hours behind each one
  • How you are assessed, and who checks the marking
  • How paying works, and what is due when
  • Entry requirements and where the qualification leads
Download the guide (PDF)

Generated from this qualification's record, so the units and hours in it are the ones on this page. The fee is here on the page rather than in the guide, so a saved copy cannot quote you an old one.

How you are assessed

Your work is assessed by our qualified assessors, internally quality assured, and externally quality assured by NCFE. Assessment is against the criteria published in the qualification specification, and your assessor tells you what is needed before you start each unit.

For what happens after you submit: who marks it, who checks the marking, how long feedback takes and what to do if you disagree with a decision, see how assessment works.

If you need an adjustment to how you are assessed, for a disability or any other reason, ask us before you begin. We arrange adjustments under our Reasonable Adjustments policy, and you can request one online.

How we assess and quality assure is set out in DAIS-POL-016 Assessment and Internal Quality Assurance.

How you study, and what you need

You study online through our virtual learning environment, which is where the teaching material, your assessment submissions, your feedback and your progress all live. You work at your own pace, with tutor support throughout. Everyone completes a short online induction before starting an assessed unit.

What you need to take part
Device Laptop or desktop computer
Operating system Windows 10 or macOS 10.15 or later
Browser Google Chrome or Mozilla Firefox, latest version
Internet speed 10 Mbps download and 5 Mbps upload
Webcam Required for live sessions and identity verification
Microphone Required for live sessions

These are the minimum requirements published in DAIS-POL-024 Online Learning and Digital Delivery.

Support, and how quickly we reply

These are the response times we commit to in policy, not an aspiration.

What How Response
General questions Message your tutor in the VLE Within 2 working days
Assessment feedback Returned in the VLE or e-portfolio Within 10 working days of submission
Technical problems Technical support email Within 1 working day
Urgent welfare concerns Email to the Designated Safeguarding Lead Within 1 working day

Published in DAIS-POL-024 and DAIS-POL-009 Learner Support.

Registration and your certificate

We register you with NCFE before you begin any assessed unit, and we collect your Unique Learner Number as part of that. When your assessment decisions are finalised and quality assured, we claim your certificate through the NCFE portal and you are notified digitally. The certificate comes from NCFE, not from us.

Set out in DAIS-POL-008 Learner Registration and Certification.

Progression

Progression: prepares you for our Level 3 Certificate in Cyber Security Practices, and for entry-level roles in cyber security. This qualification does not carry UCAS Tariff points.

Common questions

Who awards NCFE Level 2 Certificate in the Principles of Cyber Security, and how do I get my certificate?

NCFE Level 2 Certificate in the Principles of Cyber Security is awarded by NCFE, an Ofqual-approved awarding organisation, and sits on the Regulated Qualifications Framework (RQF). The qualification number is 603/5853/1. The Data and AI School of London is an NCFE approved centre (Account No. 11001657). We register you with NCFE before you start any assessed unit and collect your Unique Learner Number. Once your work is assessed and quality assured we claim your certificate through the NCFE portal, and it is issued by NCFE rather than by us.

How long does NCFE Level 2 Certificate in the Principles of Cyber Security take?

This qualification carries 110 guided learning hours and a total qualification time of 185 hours. It is studied online at your own pace, so how long it takes in calendar time depends on how much you can commit each week.

What do I need before I can start?

There is no specific prior knowledge a learner must have for this qualification. We assess every applicant individually and will tell you if a different level would suit you better.

Can I study this entirely online?

Yes. Teaching, materials and assessment are all delivered through our Moodle-based virtual learning environment, so you can study from anywhere in the UK. You need a laptop or desktop computer, a current version of Chrome or Firefox, and a broadband connection of at least 10 Mbps down and 5 Mbps up. Tutor support is available throughout, and we answer questions within 2 working days and return assessment feedback within 10 working days of submission.

Can I enrol now, and when do I pay?

The fee is £395. Enrolment is open, so you can apply online today. Nothing is paid at application: payment is taken only after you accept an offer.

Not sure this is the right qualification?

Ask before you apply. We will say honestly if a different level would suit you better.

Other qualifications

See all qualifications