Technology & security
Cybersecurity Foundations
Build defensive security knowledge that makes you safer and more employable in digital workplaces.
Build practical defensive security habits for modern workplaces and entry-level technology roles.
About this course
A structured introduction to protecting people, accounts, devices and information at work. Learn to recognise threats, respond safely, understand access controls and build the professional judgement expected in cybersecurity-adjacent roles.
Career relevance
Where this can take you
Useful for entry-level IT support, security-awareness, operations and information-handling roles.
Portfolio project: Produce a practical security-improvement plan for a small workplace with risks, controls, owners and review dates.
Skills you will gain
Practical skills, not just theory
What you will learn
Recognise common social-engineering and account-security risks.
Use safer password, MFA, device and data-handling habits.
Explain how to report a suspected incident without making it worse.
Describe the basics of access control, vulnerability management and security culture.
Objective map
A numbered, measurable syllabus
Every lesson, knowledge check and practical activity maps to the objectives below. Domain weights show how much of the programme each area represents.
Domain 1
Security mindset and professional responsibility to Phishing, social engineering and safe communication
- 1.1Demonstrate security mindset and professional responsibility in a realistic cybersecurity foundations context: understand what cybersecurity protects and why lawful, authorised work matters.
- 1.2Demonstrate accounts, passwords and identity in a realistic cybersecurity foundations context: use stronger account controls and recognise identity-based attacks.
- 1.3Demonstrate phishing, social engineering and safe communication in a realistic cybersecurity foundations context: spot manipulation attempts and respond through a safe process.
Domain 2
Devices, networks and everyday protection to Incident reporting and recovery basics
- 2.1Demonstrate devices, networks and everyday protection in a realistic cybersecurity foundations context: apply practical controls to work devices, Wi-Fi and shared systems.
- 2.2Apply and control data protection and access control in a realistic cybersecurity foundations context: handle sensitive information using least privilege and approved processes.
- 2.3Demonstrate incident reporting and recovery basics in a realistic cybersecurity foundations context: contain, report and document a suspected security incident calmly.
Domain 3
Capstone: build a security improvement plan
- 3.1Plan and produce capstone: build a security improvement plan in a realistic cybersecurity foundations context: assess a small workplace scenario and propose safe, realistic controls.
How the programme works
Learn, practise, explain and prove it
This is a long-form, eight-week guided programme rather than a stack of short articles. Each module contains six substantial lessons that move from concepts and methods into a worked case, a quality clinic, a workplace lab and assessed reflection.
1. Guided learning
Study the purpose, process, risks and professional standard through structured readings and active notes.
2. Worked cases
Compare plausible options, expose missing evidence and defend a decision under realistic constraints.
3. Quality clinics and labs
Diagnose weak work, revise it against a rubric and create portfolio evidence with a full audit trail.
4. Hard assessment
Pass applied checks and the final assessment at 85%, with no unresolved critical-error questions.
Curriculum
A complete programme, module by module
The curriculum below shows the actual learning pathway, objective and evidence for every module. Full lessons remain locked until enrolment.
Build the base
Standards, vocabulary and the core method you will use throughout the programme.
01Security mindset and professional responsibilityUnderstand what cybersecurity protects and why lawful, authorised work matters.+
Measured objectiveDemonstrate security mindset and professional responsibility in a realistic cybersecurity foundations context: understand what cybersecurity protects and why lawful, authorised work matters.
Evidence you will produceA technical security mindset and professional responsibility brief with requirements, safe method, sample output or architecture, validation evidence and handover notes.
Six guided lessons + worked case + quality clinic + workplace lab + hard knowledge check
02Accounts, passwords and identityUse stronger account controls and recognise identity-based attacks.+
Measured objectiveDemonstrate accounts, passwords and identity in a realistic cybersecurity foundations context: use stronger account controls and recognise identity-based attacks.
Evidence you will produceA checked working paper, analysis or report for accounts, passwords and identity, including source data, assumptions, calculations, findings and limitations.
Six guided lessons + worked case + quality clinic + workplace lab + hard knowledge check
Milestone: You can explain the fundamentals and complete a first guided task.
Develop core skills
The working skills and tools of the role, practised one at a time.
03Phishing, social engineering and safe communicationSpot manipulation attempts and respond through a safe process.+
Measured objectiveDemonstrate phishing, social engineering and safe communication in a realistic cybersecurity foundations context: spot manipulation attempts and respond through a safe process.
Evidence you will produceA portfolio-ready phishing, social engineering and safe communication brief and artefact showing audience, rationale, accessibility check, feedback and revision.
Six guided lessons + worked case + quality clinic + workplace lab + hard knowledge check
04Devices, networks and everyday protectionApply practical controls to work devices, Wi-Fi and shared systems.+
Measured objectiveDemonstrate devices, networks and everyday protection in a realistic cybersecurity foundations context: apply practical controls to work devices, Wi-Fi and shared systems.
Evidence you will produceA technical devices, networks and everyday protection brief with requirements, safe method, sample output or architecture, validation evidence and handover notes.
Six guided lessons + worked case + quality clinic + workplace lab + hard knowledge check
Milestone: You can carry out routine work independently and check it properly.
Apply it in realistic scenarios
Case studies and simulations with competing priorities and incomplete information.
05Data protection and access controlHandle sensitive information using least privilege and approved processes.+
Measured objectiveApply and control data protection and access control in a realistic cybersecurity foundations context: handle sensitive information using least privilege and approved processes.
Evidence you will produceA checked working paper, analysis or report for data protection and access control, including source data, assumptions, calculations, findings and limitations.
Six guided lessons + worked case + quality clinic + workplace lab + hard knowledge check
06Incident reporting and recovery basicsContain, report and document a suspected security incident calmly.+
Measured objectiveDemonstrate incident reporting and recovery basics in a realistic cybersecurity foundations context: contain, report and document a suspected security incident calmly.
Evidence you will produceA checked working paper, analysis or report for incident reporting and recovery basics, including source data, assumptions, calculations, findings and limitations.
Six guided lessons + worked case + quality clinic + workplace lab + hard knowledge check
Milestone: You can make and justify decisions in realistic situations.
Prove it and plan your next step
Portfolio evidence, final review and a development plan you can show an employer.
07Capstone: build a security improvement planAssess a small workplace scenario and propose safe, realistic controls.+
Measured objectivePlan and produce capstone: build a security improvement plan in a realistic cybersecurity foundations context: assess a small workplace scenario and propose safe, realistic controls.
Evidence you will produceA technical capstone: build a security improvement plan brief with requirements, safe method, sample output or architecture, validation evidence and handover notes.
Six guided lessons + worked case + quality clinic + workplace lab + hard knowledge check
Milestone: You have portfolio-ready evidence and a clear next step.
Suggested pace
Eight-week study plan
Plan for roughly 5–9 hours each week across readings, worked cases, practice, portfolio production and assessment remediation. Repeat a week when the knowledge checks show a gap.
Week 1
Security mindset and professional responsibility
- •Complete the six guided lessons for Security mindset and professional responsibility and build structured notes against the objective codes.
- •Analyse the worked case, compare two defensible options and submit a reasoned decision record.
- •Complete the quality clinic, correct the weak draft and document every revision against the rubric.
- •Produce the security mindset and professional responsibility portfolio evidence and complete the hard knowledge checks.
- •Review every incorrect answer, explain why each distractor fails and schedule targeted retrieval practice.
Checkpoint: Reach at least 85% on the week’s checks, resolve every critical error and save the reviewed portfolio evidence before continuing.
Week 2
Accounts, passwords and identity
- •Complete the six guided lessons for Accounts, passwords and identity and build structured notes against the objective codes.
- •Analyse the worked case, compare two defensible options and submit a reasoned decision record.
- •Complete the quality clinic, correct the weak draft and document every revision against the rubric.
- •Produce the accounts, passwords and identity portfolio evidence and complete the hard knowledge checks.
- •Review every incorrect answer, explain why each distractor fails and schedule targeted retrieval practice.
Checkpoint: Reach at least 85% on the week’s checks, resolve every critical error and save the reviewed portfolio evidence before continuing.
Week 3
Phishing, social engineering and safe communication
- •Complete the six guided lessons for Phishing, social engineering and safe communication and build structured notes against the objective codes.
- •Analyse the worked case, compare two defensible options and submit a reasoned decision record.
- •Complete the quality clinic, correct the weak draft and document every revision against the rubric.
- •Produce the phishing, social engineering and safe communication portfolio evidence and complete the hard knowledge checks.
- •Review every incorrect answer, explain why each distractor fails and schedule targeted retrieval practice.
Checkpoint: Reach at least 85% on the week’s checks, resolve every critical error and save the reviewed portfolio evidence before continuing.
Week 4
Devices, networks and everyday protection
- •Complete the six guided lessons for Devices, networks and everyday protection and build structured notes against the objective codes.
- •Analyse the worked case, compare two defensible options and submit a reasoned decision record.
- •Complete the quality clinic, correct the weak draft and document every revision against the rubric.
- •Produce the devices, networks and everyday protection portfolio evidence and complete the hard knowledge checks.
- •Review every incorrect answer, explain why each distractor fails and schedule targeted retrieval practice.
Checkpoint: Reach at least 85% on the week’s checks, resolve every critical error and save the reviewed portfolio evidence before continuing.
Week 5
Data protection and access control
- •Complete the six guided lessons for Data protection and access control and build structured notes against the objective codes.
- •Analyse the worked case, compare two defensible options and submit a reasoned decision record.
- •Complete the quality clinic, correct the weak draft and document every revision against the rubric.
- •Produce the data protection and access control portfolio evidence and complete the hard knowledge checks.
- •Review every incorrect answer, explain why each distractor fails and schedule targeted retrieval practice.
Checkpoint: Reach at least 85% on the week’s checks, resolve every critical error and save the reviewed portfolio evidence before continuing.
Week 6
Incident reporting and recovery basics
- •Complete the six guided lessons for Incident reporting and recovery basics and build structured notes against the objective codes.
- •Analyse the worked case, compare two defensible options and submit a reasoned decision record.
- •Complete the quality clinic, correct the weak draft and document every revision against the rubric.
- •Produce the incident reporting and recovery basics portfolio evidence and complete the hard knowledge checks.
- •Review every incorrect answer, explain why each distractor fails and schedule targeted retrieval practice.
Checkpoint: Reach at least 85% on the week’s checks, resolve every critical error and save the reviewed portfolio evidence before continuing.
Week 7
Capstone: build a security improvement plan
- •Complete the six guided lessons for Capstone: build a security improvement plan and build structured notes against the objective codes.
- •Analyse the worked case, compare two defensible options and submit a reasoned decision record.
- •Complete the quality clinic, correct the weak draft and document every revision against the rubric.
- •Produce the capstone: build a security improvement plan portfolio evidence and complete the hard knowledge checks.
- •Review every incorrect answer, explain why each distractor fails and schedule targeted retrieval practice.
Checkpoint: Reach at least 85% on the week’s checks, resolve every critical error and save the reviewed portfolio evidence before continuing.
Week 8
Review and consolidation
- •Complete a cumulative, closed-notes retrieval review across all objectives studied so far.
- •Repair incomplete portfolio evidence and repeat the two lowest-scoring knowledge checks.
- •Ask for structured feedback, record the feedback and revise one artefact to professional standard.
Checkpoint: Submit the capstone evidence pack, defend the key decision, remediate every weak objective and pass the final assessment at 85% with no critical misses.
Technology & security
Continue your learning path
AI for Work & Prompting
Use generative AI responsibly to research, write, analyse and improve everyday work.
60–72 hours
AI Product Management
Plan responsible AI-enabled products around people, value and risk.
50–60 hours
API & Integration Foundations
Understand how systems exchange information safely and reliably.
55–66 hours
Assessment and certificate
A defensive-security scenario and knowledge assessment. This course does not authorise access to any system or replace formal security certification.
Who this is for
- ✓People exploring an entry-level cybersecurity or IT-support path.
- ✓Office employees who handle business systems or sensitive information.
- ✓Job seekers who want practical defensive-security evidence for their CV.