The Data and AI School of London is an NCFE approved centre for this qualification (NCFE Account No. 11001657). Enrol below to begin your learning journey.
← All courses
Level 3 · NCFE Self-paced
Enrolling now NCFE Approved Qualification number 603/5762/9

NCFE Level 3 Certificate in Cyber Security Practices

Level 3 cyber security: principles, threat intelligence, testing and controls, incident response, legislation and ethics, and professional skills. 150 guided learning hours, assessed by portfolio.

Duration: 150 guided learning hours, 220 total hours, self-paced online

Level
Level 3
Qualification number
603/5762/9
Awarding organisation
NCFE
Regulated status
On the RQF, regulated by Ofqual
Guided learning hours
150 hours
Total qualification time
220 hours
Delivery
100% online
Study pattern
150 guided learning hours, 220 total hours, self-paced online
NCFE This qualification is awarded by NCFE and regulated by Ofqual
NCFE Account No. 11001657

Course overview

This is a regulated Level 3 qualification (NCFE qualification number 603/5762/9). It gives learners the chance to develop knowledge and skills relating to cyber security practices, with a view to seeking employment or proceeding to further study in this area.

You study six mandatory units totalling 150 guided learning hours. Unit 01 covers the concepts of cyber security including confidentiality, integrity and availability, the consequences of inadequate cyber security, core terminology, good and bad actors and their motivations, the sectors most vulnerable to attack, and the principles of security by design.

Unit 02 covers cyber threat intelligence and its lifecycle, threats, exploits, vulnerabilities and risk, emerging attack techniques, Open Source Intelligence and why sources must be reliable, threat models such as STRIDE, PASTA, LINDDUN, CVSS and attack trees, malicious software and its effects, and social engineering.

Unit 03 covers penetration, vulnerability and social engineering testing, why testing and retesting matter, and how outcomes are reported. It is partly practical: you will identify vulnerabilities, demonstrate the steps taken when one is found, apply the correct response, and implement a basic cyber security control, justifying your choice. It also covers cyber security frameworks such as the NCSC 10 Steps to Cyber Security and the CIS controls.

Unit 04 covers the cyber security incident response plan and its checklist, the incident response lifecycle, and maintaining an incident log. You will develop an incident response plan for an organisation, and create an incident post mortem report, reflecting on it and making recommendations.

Unit 05 covers legislation affecting cyber security including the Computer Misuse Act, the Data Protection Act and UK GDPR, trends in international law for cyberspace, ISO information security standards, and ethical and unethical conduct.

Unit 06 covers the behaviours needed for a career in cyber security, including managing a positive digital identity, employee screening checks, and the BPSS, SC and DV security clearance levels. You will perform a personal skills analysis, assess yourself against the skills a cyber security career requires, create a personal development plan, and cover continuous professional development.

Assessment is internally assessed and externally quality assured, through a portfolio of evidence with no exams. Evidence could include research, a learner report, written or oral question and answer, discussion, assignments and presentations.

Delivery is 100% online with tutor support.

What you will study

The units below, their unit reference numbers and their guided learning hours are taken directly from the NCFE qualification specification.

Unit Title Unit reference Hours
01 Understand cyber security principles (mandatory)
3 learning outcomes
  1. Understand cyber security
    • 1.1 Describe the concepts of cyber security
    • 1.2 Explain the importance of cyber security
    • 1.3 Describe the consequences and implications of inadequate cyber security
  2. Understand core terminology and key aspects of cyber security
    • 2.1 Define core terminology used in cyber security
    • 2.2 Explain the terms good actors and bad actors
    • 2.3 Distinguish typical behaviours of good actors and bad actors
    • 2.4 Explain the motivations of good actors and bad actors
    • 2.5 Identify key sectors that are most vulnerable to a cyber-attack
    • 2.6 Compare the motivations for a cyber-attack in key sectors
    • 2.7 Consider how an actor may carry out a cyber-attack
  3. Understand security by design principles
    • 3.1 Describe the term security by design
    • 3.2 Explore the principles of security by design
    • 3.3 State the consequences of not considering cyber security during the design phase
    • 3.4 Evaluate the advantages and disadvantages of security by design
 A/618/0866 30
02 Threat intelligence in cyber security (mandatory)
4 learning outcomes
  1. Understand cyber threat intelligence
    • 1.1 Identify key concepts of cyber threat intelligence
    • 1.2 Explain the following terms in relation to cyber security: • threats • exploits • vulnerabilities • risk
    • 1.3 Describe the threat intelligence lifecycle
    • 1.4 Describe how to find out about emerging attack techniques and how to recognise them
    • 1.5 Consider what could be included in Open Source Intelligence data sets
    • 1.6 Explain why it is important to only use reliable and valid sources of Open Source Intelligence information
    • 1.7 Explain the importance of using reliable sources of information in relation to cyber security threats
    • 1.8 Consider the current threat status and make possible recommendations based upon cyber threat intelligence information
    • 1.9 Analyse relevant cyber threat intelligence information requirements for an organisation
  2. Understand threat models
    • 2.1 Describe a range of threat models
    • 2.2 Explain the steps within a threat model
    • 2.3 Evaluate a threat model
  3. Understand malicious software
    • 3.1 Identify types of malicious software
    • 3.2 Describe the effects of different types of malicious software on an infected system
    • 3.3 Describe the motives for using specific malicious software attacks
    • 3.4 Identify how specific malicious software attacks are made more effective due to human factors
  4. Know about social engineering
    • 4.1 Explain the term ‘social engineering’
    • 4.2 Give examples of how Open Source Intelligence can be used for social engineering
    • 4.3 Describe ways a social engineering attack could take place
 F/618/0867 30
03 Cyber security testing, vulnerabilities and controls (mandatory)
4 learning outcomes
  1. Understand common types of testing in cyber security
    • 1.1 Explain different types of cyber security testing
    • 1.2 Identify why cyber security testing is important
    • 1.3 Compare types of cyber security testing
    • 1.4 Consider mitigations following cyber security testing
    • 1.5 Explain why it is important to retest following any changes made
    • 1.6 Explain how the outcomes of cyber security testing can be reported
    • 1.7 Explain why the outcomes of cyber security testing must be reported
  2. Be able to reduce or remove potential cyber security vulnerabilities
    • 2.1 Identify cyber security vulnerabilities
    • 2.2 Demonstrate the steps to be taken when a vulnerability has been identified
    • 2.3 Apply the correct response to the vulnerability
    • 2.4 Develop an appropriate communication to mitigate future vulnerabilities
  3. Understand controls in cyber security
    • 3.1 Identify cyber security controls
    • 3.2 Explain a basic cyber security framework
    • 3.3 Evaluate a cyber security framework
  4. Be able to apply a cyber security control
    • 4.1 Explain how to apply controls
    • 4.2 Implement a basic cyber security control
    • 4.3 Justify the implementation of the chosen cyber security control
    • 4.4 Explain why a control might not be applied
 J/618/0868 30
04 Cyber security incident response (mandatory)
3 learning outcomes
  1. Understand what is meant by a cyber security incident response plan
    • 1.1 Describe what a cyber security incident response plan is used for
    • 1.2 Explain when a cyber security incident response plan is used
    • 1.3 Describe the stages of a cyber security incident response lifecycle
  2. Be able to develop a cyber security incident response plan
    • 2.1 Explain why it is important to maintain an up to date cyber security incident log
    • 2.2 Explain the steps to be included within a cyber security incident response plan
    • 2.3 Explain why it is important to have a cyber security incident response plan
    • 2.4 Develop a cyber security incident response plan for an organisation
  3. Be able to develop an incident post mortem report
    • 3.1 Explain what is meant by incident post mortem
    • 3.2 Explain the structure of an incident post mortem
    • 3.3 Consider the importance of the following when carrying out an incident post mortem: • integrity • rigour • discipline.
    • 3.4 Create a post mortem report of an incident
    • 3.5 Reflect upon the report and make recommendations based on the findings
 L/618/0869 30
05 Understand legislation and ethical conduct within cyber security (mandatory)
3 learning outcomes
  1. Understand legislation relating to cyber security
    • 1.1 Describe how legislation impacts on cyber security
    • 1.2 Explain trends in international law for cyberspace
  2. Understand information security standards
    • 2.1 Identify ISO standards related to cyber security
    • 2.2 Explain how ISO standards are used to support cyber security
  3. Understand ethical conduct within cyber security
    • 3.1 Describe ethical conduct within cyber security
    • 3.2 Identify unethical conduct within cyber security
 J/618/0871 20
06 Professional skills and behaviours for cyber security (mandatory)
3 learning outcomes
  1. Understand behaviours required for a career in cyber security
    • 1.1 Explain the importance of managing and promoting a positive digital identity
    • 1.2 Describe possible employee screening checks that an employer might carry out
    • 1.3 Consider potential consequences of unsatisfactory findings as a result of employer checks
    • 1.4 Describe the following security clearance levels: • BPSS (Baseline Personnel Security Standard) • SC (Security Checked) • DV (Developed Vetting)
    • 1.5 Explain how bias can influence cyber security
    • 1.6 Describe the benefits of a security by design mindset
  2. Be able to identify skills required for a career in cyber security
    • 2.1 Identify skills required for a career in cyber security
    • 2.2 Perform a personal skills analysis
    • 2.3 Assess own skills against those required for a career in cyber security
    • 2.4 Create a personal development plan
  3. Understand the importance of continuous professional development
    • 3.1 Explain the term continuous professional development (CPD)
    • 3.2 State methods of keeping up to date with industry knowledge
    • 3.3 Explain why it is important to keep CPD up to date
 L/618/0872 10
Total guided learning hours 150

Entry requirements

  • There is no specific prior knowledge a learner must have for this qualification.
  • This qualification is suitable for learners aged 16 and above.
  • Learners may find it helpful if they have already achieved a Level 2 Digital Skills or Information Technology qualification.
  • You will need a digital device and internet access, as Units 03 and 04 include practical tasks such as implementing a basic security control.
  • Registration is at the discretion of the centre, in accordance with equality legislation.
Take it with you

The course guide

Everything on this page as one document you can keep, print, or send to whoever is deciding with you.

  • All 6 units, with the hours behind each one
  • How you are assessed, and who checks the marking
  • How paying works, and what is due when
  • Entry requirements and where the qualification leads
Download the guide (PDF)

Generated from this qualification's record, so the units and hours in it are the ones on this page. The fee is here on the page rather than in the guide, so a saved copy cannot quote you an old one.

How you are assessed

Your work is assessed by our qualified assessors, internally quality assured, and externally quality assured by NCFE. Assessment is against the criteria published in the qualification specification, and your assessor tells you what is needed before you start each unit.

For what happens after you submit: who marks it, who checks the marking, how long feedback takes and what to do if you disagree with a decision, see how assessment works.

If you need an adjustment to how you are assessed, for a disability or any other reason, ask us before you begin. We arrange adjustments under our Reasonable Adjustments policy, and you can request one online.

How we assess and quality assure is set out in DAIS-POL-016 Assessment and Internal Quality Assurance.

How you study, and what you need

You study online through our virtual learning environment, which is where the teaching material, your assessment submissions, your feedback and your progress all live. You work at your own pace, with tutor support throughout. Everyone completes a short online induction before starting an assessed unit.

What you need to take part
Device Laptop or desktop computer
Operating system Windows 10 or macOS 10.15 or later
Browser Google Chrome or Mozilla Firefox, latest version
Internet speed 10 Mbps download and 5 Mbps upload
Webcam Required for live sessions and identity verification
Microphone Required for live sessions

These are the minimum requirements published in DAIS-POL-024 Online Learning and Digital Delivery.

Support, and how quickly we reply

These are the response times we commit to in policy, not an aspiration.

What How Response
General questions Message your tutor in the VLE Within 2 working days
Assessment feedback Returned in the VLE or e-portfolio Within 10 working days of submission
Technical problems Technical support email Within 1 working day
Urgent welfare concerns Email to the Designated Safeguarding Lead Within 1 working day

Published in DAIS-POL-024 and DAIS-POL-009 Learner Support.

Registration and your certificate

We register you with NCFE before you begin any assessed unit, and we collect your Unique Learner Number as part of that. When your assessment decisions are finalised and quality assured, we claim your certificate through the NCFE portal and you are notified digitally. The certificate comes from NCFE, not from us.

Set out in DAIS-POL-008 Learner Registration and Certification.

Progression

Progression: prepares you for our Level 4 Diploma in Cyber Security Engineering, and for analyst roles in cyber security. This qualification does not carry UCAS Tariff points.

Common questions

Who awards NCFE Level 3 Certificate in Cyber Security Practices, and how do I get my certificate?

NCFE Level 3 Certificate in Cyber Security Practices is awarded by NCFE, an Ofqual-approved awarding organisation, and sits on the Regulated Qualifications Framework (RQF). The qualification number is 603/5762/9. The Data and AI School of London is an NCFE approved centre (Account No. 11001657). We register you with NCFE before you start any assessed unit and collect your Unique Learner Number. Once your work is assessed and quality assured we claim your certificate through the NCFE portal, and it is issued by NCFE rather than by us.

How long does NCFE Level 3 Certificate in Cyber Security Practices take?

This qualification carries 150 guided learning hours and a total qualification time of 220 hours. It is studied online at your own pace, so how long it takes in calendar time depends on how much you can commit each week.

What do I need before I can start?

There is no specific prior knowledge a learner must have for this qualification. We assess every applicant individually and will tell you if a different level would suit you better.

Can I study this entirely online?

Yes. Teaching, materials and assessment are all delivered through our Moodle-based virtual learning environment, so you can study from anywhere in the UK. You need a laptop or desktop computer, a current version of Chrome or Firefox, and a broadband connection of at least 10 Mbps down and 5 Mbps up. Tutor support is available throughout, and we answer questions within 2 working days and return assessment feedback within 10 working days of submission.

Can I enrol now, and when do I pay?

The fee is £495. Enrolment is open, so you can apply online today. Nothing is paid at application: payment is taken only after you accept an offer.

Not sure this is the right qualification?

Ask before you apply. We will say honestly if a different level would suit you better.

Other qualifications

See all qualifications