City and Guilds of London Institute · RQF Level 3
City & Guilds Level 3 Diploma In Information Security (QCF)
You don’t just earn this. You learn to use it, one-to-one, on your own real work.
- LevelRQF Level 3
- Total credits96
- Units in this qualification49
Awarded by City and Guilds of London Institute · on the Ofqual register
Start here
See how this course maps onto your role
Ten quick questions, one per Future Fluency, asked against this qualification rather than a generic one.
About 5 minutes · No card · Nothing to commit to
What you’ll learn
What each unit actually teaches you to do
The City & Guilds Level 3 Diploma In Information Security is aimed at those working in digital technology. Learners develop skills in areas such as system operation and information security audits. Investigating information security incidents is also covered.
These are the units City and Guilds of London Institute registers against this qualification. It is a catalogue, not a syllabus. Which of them you take depends on the combination the qualification requires, and that is set by the awarding body rather than by us. Every unit here is regulated, and every one you earn is yours to keep.
Advanced data representation and manipulation for ITReal unit · City and Guilds of London Institute
What you'll be able to do
- Apply matrix methods to solve relevant IT problems
- Apply series, probability, and recursions in IT contexts
- Apply graph theory to model and analyse IT-related scenarios
Carrying out Information Security auditsReal unit · City and Guilds of London Institute
What you'll be able to do
- Carry out Information Security audit activities in accordance with relevant standards and procedures
Carrying out Information Security forensic examinationsReal unit · City and Guilds of London Institute
What you'll be able to do
- Plan and prepare for carrying out Information Security forensic examinations.
- Conduct Information Security forensic examinations in a structured and methodical manner.
- Document and report on the findings of Information Security forensic examinations.
Carrying out Information Security forensic examinationsReal unit · City and Guilds of London Institute
What you'll be able to do
- Carry out Information Security forensic examinations in accordance with legal and ethical guidelines
Carrying out Information Security Incident Management activitiesReal unit · City and Guilds of London Institute
What you'll be able to do
- Gather information effectively to manage Information Security incidents
- Carry out Information Security Incident Management activities in line with organisational procedures
Carrying out Information Security Incident Management activitiesReal unit · City and Guilds of London Institute
What you'll be able to do
- Prepare for Information Security Incident Management by developing incident response plans, establishing communication channels, and identifying key stakeholders.
- Manage Information Security incidents effectively by containing the incident, investigating the cause, implementing corrective actions, and documenting the entire process.
Carrying out Information Security Risk AssessmentReal unit · City and Guilds of London Institute
What you'll be able to do
- Prepare for Information Security Risk Assessments by gathering relevant information and defining the scope
- Carry out Information Security Risk Assessments, identifying vulnerabilities and potential threats
Carrying out Information Security Risk AssessmentReal unit · City and Guilds of London Institute
What you'll be able to do
- Gather information on Information Security risks from various sources.
- Assess the likelihood and impact of identified Information Security risks.
- Report on Information Security risks, including potential consequences and mitigation strategies.
Carrying out Information Security auditsReal unit · City and Guilds of London Institute
What you'll be able to do
- Prepare for information security audit activities, including defining the scope of the audit and gathering relevant documentation.
- Carry out information security audit activities, including conducting interviews, reviewing systems, and analysing data.
Creating a procedural computer programReal unit · City and Guilds of London Institute
What you'll be able to do
- Implement software using procedural programming techniques, including the use of variables, data types, control structures, and functions
- Refine a procedural programme to improve quality, including readability, maintainability, and efficiency
- Test the operation of a procedural programme, including identifying and correcting errors
Creating a procedural computer programReal unit · City and Guilds of London Institute
What you'll be able to do
- Implement a software design using procedural programming techniques, adhering to coding standards and best practises.
- Refine a procedural program to improve quality, addressing issues related to efficiency, readability, and maintainability.
- Test the operation of a procedural program thoroughly to ensure it functions correctly and meets the specified requirements.
- Document a computer program comprehensively, including code comments, user manuals, and technical specifications.
Creating an event driven computer programReal unit · City and Guilds of London Institute
What you'll be able to do
- Implement a software design by utilising event-driven programming principles and techniques.
- Refine an existing event-driven program to improve its overall quality, performance, and maintainability.
- Test the operation of an event-driven program to ensure it functions correctly and meets specified requirements.
- Document an event-driven program comprehensively, including its design, functionality, and usage.
Creating an event driven computer programReal unit · City and Guilds of London Institute
What you'll be able to do
- Implement software using event driven programming techniques
- Refine an event driven program to improve its quality
- Test the operation of an event driven program
Creating an object oriented computer programReal unit · City and Guilds of London Institute
What you'll be able to do
- Implement software solutions effectively using object oriented programming principles
- Refine an existing object oriented program to improve its overall quality and performance
- Test the operation of an object oriented driven program to ensure it functions correctly and meets specified requirements
Creating an object oriented computer programReal unit · City and Guilds of London Institute
What you'll be able to do
- Implement a software design using object oriented programming principles, including encapsulation, inheritance, and polymorphism.
- Refine an object oriented program to improve quality, addressing issues related to efficiency, readability, and maintainability.
- Test the operation of an object oriented driven program thoroughly to ensure it functions correctly and meets the specified requirements.
- Document an object oriented driven program comprehensively, including class diagrams, user manuals, and technical specifications.
Data ModellingReal unit · City and Guilds of London Institute
What you'll be able to do
- Understand the fundamental concepts underpinning logical data modelling.
- Use appropriate data modelling techniques to create clear and concise logical data models.
- Use data modelling techniques to refine existing logical data models, ensuring accuracy and efficiency.
Data Representation and Manipulation for ITReal unit · City and Guilds of London Institute
What you'll be able to do
- Manipulate real numbers and integers
- Use co-ordinate systems and vectors, and linear transformations
- Use simple functions and basic algebraic operations
- Apply Boolean algebra to problem situations
Data modellingReal unit · City and Guilds of London Institute
What you'll be able to do
- Know the basic concepts of logical data modelling, including entities, attributes, and relationships
- Use simple data modelling techniques, such as entity-relationship diagrams (ERDs), to create logical data models
Designing and developing event-driven computer programsReal unit · City and Guilds of London Institute
What you'll be able to do
- Design event-driven programs to address loosely-defined problems, taking into account user interactions and system events
- Produce a working event-driven program which meets the design specification, demonstrating responsiveness and efficient event handling
- Develop event-driven programs that reflect established programming and software engineering practice, including event delegation and asynchronous programming
- Develop test strategies and apply these to event-driven programs, ensuring correct event sequencing and error handling
- Develop design documentation for use in program maintenance and end-user documentation, providing clear explanations of event flows and program logic
Designing and developing object-oriented computer programsReal unit · City and Guilds of London Institute
What you'll be able to do
- Design object-oriented programs to address loosely-defined problems, taking into account user needs and system requirements
- Produce a working object-oriented program which meets the design specification, demonstrating functionality and adherence to standards
- Develop object-oriented programs that reflect established programming and software engineering practice, including coding conventions and design patterns
- Develop test strategies and apply these to object-oriented programs, ensuring robustness and reliability
- Develop design documentation for use in program maintenance and end-user documentation, providing clear and concise information
Designing and developing procedural computer programsReal unit · City and Guilds of London Institute
What you'll be able to do
- Design procedural programs to address loosely-defined problems, considering user needs and system requirements.
- Produce a working procedural program which meets the design specification, demonstrating functionality and adherence to coding standards.
- Develop procedural programs that reflect established programming and software engineering practice, including modularity, reusability, and maintainability.
- Develop test strategies and apply these to procedural programs, ensuring comprehensive coverage and identifying potential defects.
- Develop design documentation for use in program maintenance and end-user documentation, providing clear and concise information about the program's functionality and architecture.
Develop own effectiveness and professionalismReal unit · City and Guilds of London Institute
What you'll be able to do
- Develop own personal and professional skills to enhance performance
- Work effectively as a member of a team to achieve defined goals and implement agreed plans
- Understand what is meant by professional practice within the IT sector
- Understand the ethical and legislative environment relating to IT activities and their implications
- Improve organisational effectiveness through the application of professional skills and knowledge
Health and Safety in ICTReal unit · City and Guilds of London Institute
What you'll be able to do
- Comply with relevant Health and Safety procedures in an ICT environment
ICT System OperationReal unit · City and Guilds of London Institute
What you'll be able to do
- Know the relevant parts of the operating system required for specific tasks
- Operate specified parts of the system competently
IT & Telecoms System ManagementReal unit · City and Guilds of London Institute
What you'll be able to do
- Understand how to manage IT and telecoms systems effectively
- Review the functionality of IT and telecoms systems and their management processes
- Manage IT and telecoms systems according to organisational policies and procedures
IT & Telecoms System OperationReal unit · City and Guilds of London Institute
What you'll be able to do
- Understand the technical architecture of IT or Telecoms systems, including hardware, software, and network components.
- Understand how to specify system operation parameters, including performance metrics, security settings, and resource allocation.
- Control the operation of systems, ensuring they function according to specified parameters and service level agreements.
- Control system maintenance activities, including scheduling, execution, and documentation of maintenance tasks.
Implementing an ICT Systems Security policyReal unit · City and Guilds of London Institute
What you'll be able to do
- Analyse and identify ICT system security issues, considering potential vulnerabilities and threats.
- Implement security measures on email and instant messaging systems to protect against unauthorised access and data breaches.
- Implement and maintain internet and network security protocols and technologies to safeguard against external attacks and internal misuse.
- Maintain data integrity and system security through regular monitoring, updates, and adherence to security policies.
Investigating Information Security incidentsReal unit · City and Guilds of London Institute
What you'll be able to do
- Gather relevant information from various sources to investigate Information Security incidents effectively.
- Investigate Information Security incidents thoroughly, following established procedures and protocols.
Investigating Information Security incidentsReal unit · City and Guilds of London Institute
What you'll be able to do
- Prepare for Information Security incident investigations, including identifying potential sources of evidence and establishing a chain of custody.
- Investigate Information Security incidents, including analysing logs, interviewing witnesses, and determining the root cause.
Investigating and Defining Customer Requirements for ICT SystemsReal unit · City and Guilds of London Institute
What you'll be able to do
- Control the investigation of existing and proposed ICT systems and processes, ensuring adherence to relevant organisational policies and procedures
- Analyse gathered information to accurately identify customer needs and system constraints, documenting findings in a clear and concise manner
Investigating and defining customer requirements for ICT systemsReal unit · City and Guilds of London Institute
What you'll be able to do
- Investigate existing systems and processes to understand their functionality and limitations
- Analyse information gathered to identify needs and constraints for ICT systems, considering both technical and business perspectives
Network management and security _QCF_Real unit · City and Guilds of London Institute
What you'll be able to do
- Know the fundamental principles of network design, performance monitoring, and effective network management strategies
- Know the core principles of network security, including common threats, vulnerabilities, and preventative measures
- Perform essential network management functions, such as user account administration, resource allocation, and performance optimisation
- Perform key network security functions, including implementing access controls, monitoring network traffic for suspicious activity, and responding to security incidents
Networking principlesReal unit · City and Guilds of London Institute
What you'll be able to do
- Understand physical topologies, including bus, star, ring, and mesh topologies
- Understand logical topologies, including broadcast and token-passing topologies
- Understand network systems, including LANs, WANs, and the Internet
- Understand the Open System Interconnection (OSI) model and its layers
- Understand the Internet Protocol Suite (TCP/IP) and its protocols
Networking principlesReal unit · City and Guilds of London Institute
What you'll be able to do
- Describe the OSI model and its layers
- Explain the function of each layer in the OSI model
- Describe the TCP/IP suite and its protocols
- Explain the function of key protocols within the TCP/IP suite
- Describe different network topologies
- Describe different network transmission systems
- Explain the advantages of different types of network
- Explain the disadvantages of different types of network
- Describe media access control methods used in local area networks
Principles of ICT system and data securityReal unit · City and Guilds of London Institute
What you'll be able to do
- Know the common types of threat to ICT systems and data, including malware, phishing, and social engineering
- Protect ICT systems from threats, including implementing security measures such as firewalls and anti-virus software
- Be aware of the applications of cryptography to ICT systems and data, including encryption and digital signatures
Principles of ICT system and data securityReal unit · City and Guilds of London Institute
What you'll be able to do
- Understand the common types of threat to ICT systems and data, including malware, phishing, and social engineering attacks.
- Understand how to protect ICT systems through measures such as firewalls, anti-virus software, and access controls.
- Understand the applications of cryptography to ICT systems and data, including encryption, digital signatures, and hashing.
Principles of Information Governance and AssuranceReal unit · City and Guilds of London Institute
What you'll be able to do
- Understand the purpose of Information Governance, including its role in protecting information assets and ensuring compliance with legal and regulatory requirements.
- Understand Information Security threats and vulnerabilities, including common attack vectors and weaknesses in systems and processes.
- Understand Information Security techniques and technologies, including firewalls, intrusion detection systems, and encryption.
- Understand Information Security risk assessment and management, including identifying, analysing, and mitigating risks to information assets.
Principles of Information Security testingReal unit · City and Guilds of London Institute
What you'll be able to do
- Understand the test process and various testing techniques in relation to Information Security
- Understand the use of common tools for Information Security testing and their applications
- Carry out penetration testing activities in a controlled and ethical manner
Principles of secure system developmentReal unit · City and Guilds of London Institute
What you'll be able to do
- Understand the role of security considerations throughout each phase of the Systems Development Life Cycle (SDLC).
System ManagementReal unit · City and Guilds of London Institute
What you'll be able to do
- Understand how to administer a system, including user management, resource allocation, and security settings.
- Administer a system by performing routine tasks such as software updates, backups, and performance monitoring.
- Change system configurations to meet specific requirements, ensuring minimal disruption to users.
System ManagementReal unit · City and Guilds of London Institute
What you'll be able to do
- Assist in administering a system.
- Change system configurations.
System OperationReal unit · City and Guilds of London Institute
What you'll be able to do
- Operate the system according to established procedures
- Operate systems effectively and efficiently
- Maintain and implement system operating procedures in accordance with organisational guidelines
Systems ArchitectureReal unit · City and Guilds of London Institute
What you'll be able to do
- Understand the representation of information within a computer system, including different data types and encoding methods.
- Understand the way information is processed within a computer system, including the roles of the CPU, memory, and input/output devices.
- Make effective use of the operating environment of current computer systems, including navigating the file system, managing processes, and configuring system settings.
- Know the communication process in distributed operating systems and computer networks, including protocols, addressing, and routing.
- Know distributed applications and transaction processing in mainframe systems, including the architecture and functionality of these systems.
Telecommunications principlesReal unit · City and Guilds of London Institute
What you'll be able to do
- Understand the fundamental principles of alternating current (AC) circuits and their behaviour.
- Understand the effects of various line impairments on the quality of a transmitted signal.
- Apply knowledge of transmission line characteristics to optimise signal transmission.
- Understand the principles of transmitting digital signals over different transmission media.
- Understand the process of modulating an analogue carrier frequency using digital signals for efficient transmission.
- Apply the process of multiplexing digital and analogue signals over transmission media to maximise bandwidth utilisation.
Telecommunications principlesReal unit · City and Guilds of London Institute
What you'll be able to do
- Understand the properties and applications of the electromagnetic spectrum in the context of telecommunications
- Know the relationship between telecommunication circuits and transmission lines, and their effect on digital signal transmission
- Know how binary information is encoded and transmitted as a digital signal over telecommunications channels
- Understand the process of converting an analogue signal into a digital signal for transmission and processing
- Demonstrate an understanding of signal multiplexing techniques and their application in telecommunications systems
Testing the security of Information SystemsReal unit · City and Guilds of London Institute
What you'll be able to do
- Plan and prepare to conduct security testing on Information Systems.
- Execute security tests, using appropriate tools and techniques.
- Analyse and interpret the results of security tests.
- Report on test results, including vulnerabilities identified and recommendations for remediation.
Testing the security of Information SystemsReal unit · City and Guilds of London Institute
What you'll be able to do
- Plan security testing activities, considering relevant threats, vulnerabilities, and security requirements.
- Carry out security testing procedures effectively, using appropriate tools and techniques to identify security weaknesses.
User Profile AdministrationReal unit · City and Guilds of London Institute
What you'll be able to do
- Assist in the administration of user profiles, including relevant policies and procedures
- Assist in the administration of user profiles under supervision
User Profile AdministrationReal unit · City and Guilds of London Institute
What you'll be able to do
- Administer user profiles, including creating, modifying, and deleting user accounts and managing user permissions
- Administer user profiles effectively, ensuring data security and appropriate access levels for different users
The honest bit
You’ve started things before
Most courses were built for a room full of people who aren’t you. A cohort moves on whether or not your week allowed it, and by the third week the thing you’re behind on becomes the reason you stop opening it.
There’s no cohort here, and no timetable to fall behind. Before anything starts, Zavmo asks when you’re sharpest and how long you can realistically sit down for, then builds the sessions around those answers. A bad fortnight changes your pace. It doesn’t put you behind.
And you only pay once you start learning. Searching and planning are free, and you can cancel any time — so the cost of finding out is an afternoon, not a year.
Your passport
Every credit is a stamp you keep
Level 3 credits are regulated. They don’t vanish when a subscription ends or a website closes. They travel to any employer, and Zavmo keeps the map of what you’ve earned and what’s next.
Each stamp is a real unit registered against this qualification.
Who’d teach you this

The Evidence Evaluator
Assessor
Helps you show what you can actually do, gathering the evidence that proves it as you learn.
Meet all twelve tutorsWhere this connects
Where these credits take you
A qualification is never a dead end here. See the jobs its credits open, the national occupational standards its units map to, and the future skills they quietly build.
- Assist in Implementing Vulnerability Assessment Processes
- Carry out information security audit, compliance and assurance activities
- Carry out information security governance activities
- Carry out information security identity and access management activities
- Carry out information security incident investigation and management activities
- Carry out information security risk assessment and management activities
- Carry out information security vulnerability assessments
- Conduct Information Security Audit Activities Under Supervision
Where this can lead
Information Security Analyst
Your journey starts here, but where it goes is really up to you. We'll provide the tools, the training, and the opportunities, but your drive and curiosity will define your ultimate path. This is a field with endless possibilities, and we're excited to see where you take it.
See the whole journey →Showing 6 roles, drawn from 24 job records mapped to this qualification.
Skills it covers
What the job actually needs. These are the standards the units are built against, in the words employers and awarding bodies already use for the work itself.
How you’ll actually learn this
One-to-one, on your own real work
A qualification is usually something done to you: sit the class, sit the exam, hope it sticks. Here it’s the opposite. You learn it one-to-one with a companion, on your own real work, and you keep going until you can use it, not just recall it.
Applied to your work in any of these jobs
Learners will apply advanced mathematical methods including matrix operations, series, probability, recursions, and graph theory to solve IT-related problems. The unit focuses on modelling, analysing, and manipulating data within IT contexts using these techniques.
- Remember
- Understand
- Apply
- Analyse
- Evaluate
- Create
Built for City & Guilds Level 3 Diploma In Information Security (QCF)
36 units in this credential, in the order it lists them, awarded by City and Guilds of London Institute.
- Advanced data representation and manipulation for IT
- Carrying out Information Security audits
- Carrying out Information Security forensic examinations
- Carrying out Information Security Incident Management activities
- Carrying out Information Security Risk Assessment
- Carrying out Information Security audits
and 30 more in the full unit list below.
One to one, not one to many
No two people run this the same way
A course is written once and handed to everyone. This is assembled around you, and keeps changing as it learns you. Five things it reads, and what each one changes.
- Your actual work Every unit is taught against a live piece of your own work, not a worked example from a textbook.
- What you already know The first conversation finds your starting point, so you skip what you can already do and spend the time on what you cannot.
- The conditions you learn under Not a learning-styles quiz. The evidence does not support those. The dimensions the research does back, read once and used to shape the plan.
- How far you got last time It picks up mid-thought. The tutor knows what you said, what you struggled with, and what it asked you to try.
- Which tutor suits the moment Twelve of them, each for a different kind of thinking. The one who walks you through a first idea is not the one who stress-tests it.
See how you learn, free. Eight questions, no sign-up. A directional taster; the diagnostic inside Zavmo goes deeper and keeps adapting.
Why it sticks
Most courses stop at remembering
There’s a well-known ladder of how deeply you learn something, called Bloom’s Taxonomy. Most courses get you up the first two rungs: you remember some facts, you pass a test, you forget it. Real skill lives at the top. Judging, deciding, creating. And this isn’t a generic ladder: every rung has a named Zavmo tutor who walks you up it.
- 6CreateThe Creative Catalyst
- 5EvaluateThe Evidence Evaluator
- 4AnalyseThe Analyst
- 3ApplyThe Coach
- 2UnderstandThe Connector
- 1RememberThe Builder
Where most courses leave you Where Zavmo takes you
The value
Why the companion is worth £70 a month
You’re not paying for the units. They’re regulated, and the same wherever you earn them. You’re paying for the one thing that decides whether you actually get there: a companion that makes them stick, on your real work.
That is one-to-one on this qualification, every day, on the work you already do, for £70 a month. Your first module is free, so you can see the teaching before you pay for any of it. Billed monthly, cancel any time and billing stops.
Earned on your own work, taught to the top.
Everything you just read, learned one-to-one on the job you already do. Your first module is free, so you can see the teaching before you pay for any of it.
Build my plan, freeNo card. See how this qualification maps onto your role and meet the tutors who’d teach it, free. The learning begins when you subscribe. It’s £70 a month, billed monthly. Cancel any time and billing stops.