01What it is
This Level 4 diploma validates competence in information security practices. It is intended for digital technology practitioners who conduct audits, investigate incidents, manage user profiles, and handle risk management. Successful candidates will demonstrate the ability to operate systems and maintain security procedures.
These are the units City and Guilds of London Institute registers against this qualification. It is a catalogue, not a syllabus. Which of them you take depends on the combination the qualification requires, and that is set by the awarding body rather than by us. Every unit here is regulated. Zavmo teaches towards them on your own work, and work done here is recognised as prior learning under the agreements we hold.
Zavmo is not an awarding body, is not an approved centre, and is not affiliated with City and Guilds of London Institute. It does the teaching and the mapping. City and Guilds of London Institute sets this qualification and awards it, and a qualified human assessor makes the assessment decision.
02The units
What each unit actually teaches you to do
Carrying out Information Security audits Real unit · City and Guilds of London Institute
You'll carry out Information Security audits by understanding audit purposes, preparing plans, gathering evidence through various methods, analysing findings, and reporting results to ensure compliance with standards.
What you'll be able to do
- Carry out Information Security audit activities in accordance with relevant standards and procedures
Carrying out Information Security forensic examinations Real unit · City and Guilds of London Institute
You'll learn to plan, conduct, document, and report on information security forensic examinations. The unit addresses legal and ethical considerations, chain of custody maintenance, and the application of appropriate tools and techniques during forensic investigations.
What you'll be able to do
- Plan and prepare for carrying out Information Security forensic examinations.
- Conduct Information Security forensic examinations in a structured and methodical manner.
- Document and report on the findings of Information Security forensic examinations.
Carrying out Information Security forensic examinations Real unit · City and Guilds of London Institute
It teaches you to carry out Information Security forensic examinations by understanding legal and ethical guidelines, conducting examinations, gathering and preserving digital evidence, and analysing findings to identify security breaches and vulnerabilities.
What you'll be able to do
- Carry out Information Security forensic examinations in accordance with legal and ethical guidelines
Carrying out Information Security Incident Management activities Real unit · City and Guilds of London Institute
You'll learn to gather and evaluate information necessary for managing Information Security incidents, following organisational procedures to identify, document, and respond effectively to security events.
What you'll be able to do
- Gather information effectively to manage Information Security incidents
- Carry out Information Security Incident Management activities in line with organisational procedures
Carrying out Information Security Risk Assessment Real unit · City and Guilds of London Institute
This unit equips learners to prepare for and conduct Information Security Risk Assessments by identifying policies, gathering organisational information, defining assessment scope, and documenting vulnerabilities and threats.
What you'll be able to do
- Prepare for Information Security Risk Assessments by gathering relevant information and defining the scope
- Carry out Information Security Risk Assessments, identifying vulnerabilities and potential threats
Carrying out Information Security Risk Assessment Real unit · City and Guilds of London Institute
It teaches you to gather and assess information security risks using recognised methodologies. You'll identify threat sources, evaluate potential impacts, document findings, and report on risk levels to support informed risk management decisions.
What you'll be able to do
- Gather information on Information Security risks from various sources.
- Assess the likelihood and impact of identified Information Security risks.
- Report on Information Security risks, including potential consequences and mitigation strategies.
Carrying out Information Security Risk Management Real unit · City and Guilds of London Institute
It teaches you to develop and implement information security risk contingency plans. You'll prioritise risks, allocate resources, and manage risks through policy implementation, monitoring, and evaluation to mitigate potential organisational threats.
What you'll be able to do
- Develop information security risk contingency plans to mitigate potential threats.
- Manage information security risks effectively within an organisation.
Carrying out Information Security audits Real unit · City and Guilds of London Institute
You'll learn to prepare for and conduct information security audits. The unit covers defining audit scope, gathering documentation, conducting interviews, reviewing systems, analysing data, and documenting findings to assess information security controls.
What you'll be able to do
- Prepare for information security audit activities, including defining the scope of the audit and gathering relevant documentation.
- Carry out information security audit activities, including conducting interviews, reviewing systems, and analysing data.
Creating a procedural computer program Real unit · City and Guilds of London Institute
You'll learn to create, refine, test, and document procedural computer programs. The unit covers implementing software designs using procedural constructs, adhering to coding standards, improving program quality, and ensuring functionality through systematic testing.
What you'll be able to do
- Implement a software design using procedural programming techniques, adhering to coding standards and best practises.
- Refine a procedural program to improve quality, addressing issues related to efficiency, readability, and maintainability.
- Test the operation of a procedural program thoroughly to ensure it functions correctly and meets the specified requirements.
- Document a computer program comprehensively, including code comments, user manuals, and technical specifications.
Creating an event driven computer program Real unit · City and Guilds of London Institute
It teaches you to implement, refine, test, and document event-driven computer programs by applying event-driven programming principles and improving program quality through systematic evaluation.
What you'll be able to do
- Implement a software design by utilising event-driven programming principles and techniques.
- Refine an existing event-driven program to improve its overall quality, performance, and maintainability.
- Test the operation of an event-driven program to ensure it functions correctly and meets specified requirements.
- Document an event-driven program comprehensively, including its design, functionality, and usage.
Creating an object oriented computer program Real unit · City and Guilds of London Institute
It teaches you to design, develop, test, and document object oriented computer programs. You'll apply programming principles such as encapsulation, inheritance, and polymorphism to create robust software solutions that meet design specifications.
What you'll be able to do
- Implement a software design using object oriented programming principles, including encapsulation, inheritance, and polymorphism.
- Refine an object oriented program to improve quality, addressing issues related to efficiency, readability, and maintainability.
- Test the operation of an object oriented driven program thoroughly to ensure it functions correctly and meets the specified requirements.
- Document an object oriented driven program comprehensively, including class diagrams, user manuals, and technical specifications.
Designing and developing event-driven computer programs Real unit · City and Guilds of London Institute
It teaches you to design, develop, and test event-driven computer programs that respond to user interactions and system events, applying programming principles and producing comprehensive documentation.
What you'll be able to do
- Design event-driven programs to address loosely-defined problems, taking into account user interactions and system events
- Produce a working event-driven program which meets the design specification, demonstrating responsiveness and efficient event handling
- Develop event-driven programs that reflect established programming and software engineering practice, including event delegation and asynchronous programming
- Develop test strategies and apply these to event-driven programs, ensuring correct event sequencing and error handling
- Develop design documentation for use in program maintenance and end-user documentation, providing clear explanations of event flows and program logic
Designing and developing object-oriented computer programs Real unit · City and Guilds of London Institute
This unit covers the design, development, and testing of object-oriented computer programs, including applying programming principles such as encapsulation, inheritance, and polymorphism to produce functional software that meets specified requirements.
What you'll be able to do
- Design object-oriented programs to address loosely-defined problems, taking into account user needs and system requirements
- Produce a working object-oriented program which meets the design specification, demonstrating functionality and adherence to standards
- Develop object-oriented programs that reflect established programming and software engineering practice, including coding conventions and design patterns
- Develop test strategies and apply these to object-oriented programs, ensuring robustness and reliability
- Develop design documentation for use in program maintenance and end-user documentation, providing clear and concise information
Designing and developing procedural computer programs Real unit · City and Guilds of London Institute
This unit develops learners' ability to design, develop, and test procedural computer programs addressing loosely-defined problems. You'll analyse user needs, produce working programs following software engineering practices, and apply comprehensive testing strategies.
What you'll be able to do
- Design procedural programs to address loosely-defined problems, considering user needs and system requirements.
- Produce a working procedural program which meets the design specification, demonstrating functionality and adherence to coding standards.
- Develop procedural programs that reflect established programming and software engineering practice, including modularity, reusability, and maintainability.
- Develop test strategies and apply these to procedural programs, ensuring comprehensive coverage and identifying potential defects.
- Develop design documentation for use in program maintenance and end-user documentation, providing clear and concise information about the program's functionality and architecture.
Develop own effectiveness and professionalism Real unit · City and Guilds of London Institute
You'll develop personal and professional skills, work effectively within teams, understand professional IT practice, and gain knowledge of ethical and legislative frameworks to improve organisational effectiveness.
What you'll be able to do
- Develop own personal and professional skills to enhance performance and career progression.
- Work effectively as a member of a team to achieve defined goals and implement agreed plans.
- Understand what is meant by professional practice in the context of IT.
- Understand the ethical and legislative environment relating to IT activities and their implications.
- Improve organisational effectiveness through the application of professional skills and knowledge.
Health and Safety in ICT Real unit · City and Guilds of London Institute
This unit covers compliance with Health and Safety legislation and procedures in ICT environments, including accident reporting, safe working practices, and the importance of risk assessments when using ICT equipment.
What you'll be able to do
- Comply with relevant Health and Safety procedures in an ICT environment
IT & Telecoms System Management Real unit · City and Guilds of London Institute
You'll understand the principles and practices of managing IT and telecoms systems. The unit covers reviewing system functionality, identifying risks, and implementing management activities to ensure effective operation and alignment with organisational objectives.
What you'll be able to do
- Understand how to manage IT and telecoms systems effectively
- Review the functionality of IT and telecoms systems and their management processes
- Manage IT and telecoms systems according to organisational policies and procedures
IT & Telecoms System Operation Real unit · City and Guilds of London Institute
This unit provides learners with an understanding of IT and telecoms system architecture and operation. You'll specify system parametres, control system functions, and manage maintenance activities to ensure optimal performance and adherence to organisational requirements.
What you'll be able to do
- Understand the technical architecture of IT or Telecoms systems, including hardware, software, and network components.
- Understand how to specify system operation parameters, including performance metrics, security settings, and resource allocation.
- Control the operation of systems, ensuring they function according to specified parameters and service level agreements.
- Control system maintenance activities, including scheduling, execution, and documentation of maintenance tasks.
Investigating Information Security incidents Real unit · City and Guilds of London Institute
You'll learn to investigate Information Security incidents by gathering information from multiple sources, analysing data, maintaining evidence integrity, and following established procedures to determine incident causes.
What you'll be able to do
- Gather relevant information from various sources to investigate Information Security incidents effectively.
- Investigate Information Security incidents thoroughly, following established procedures and protocols.
Investigating Information Security incidents Real unit · City and Guilds of London Institute
This unit covers preparation for and investigation of information security incidents. You'll learn to identify evidence sources, maintain chain of custody, consider legal and ethical issues, analyse data, interview witnesses, determine root causes, and document investigation outcomes.
What you'll be able to do
- Prepare for Information Security incident investigations, including identifying potential sources of evidence and establishing a chain of custody.
- Investigate Information Security incidents, including analysing logs, interviewing witnesses, and determining the root cause.
Investigating and Defining Customer Requirements for ICT Systems Real unit · City and Guilds of London Institute
You'll control investigations of existing and proposed ICT systems, ensuring adherence to organisational policies and procedures while analysing information to identify customer needs and system constraints.
What you'll be able to do
- Control the investigation of existing and proposed ICT systems and processes, ensuring adherence to relevant organisational policies and procedures
- Analyse gathered information to accurately identify customer needs and system constraints, documenting findings in a clear and concise manner
Investigating and defining customer requirements for ICT systems Real unit · City and Guilds of London Institute
You'll investigate existing ICT systems and processes to define customer requirements, gathering and analysing information to identify needs and constraints from both technical and business perspectives.
What you'll be able to do
- Investigate existing systems and processes to understand their functionality and limitations
- Analyse information gathered to identify needs and constraints for ICT systems, considering both technical and business perspectives
System Management Real unit · City and Guilds of London Institute
You'll gain knowledge of system administration, including user management, resource allocation, and security settings. The unit covers performing routine maintenance tasks such as software updates, backups, and performance monitoring, alongside managing system configurations.
What you'll be able to do
- Understand how to administer a system, including user management, resource allocation, and security settings.
- Administer a system by performing routine tasks such as software updates, backups, and performance monitoring.
- Change system configurations to meet specific requirements, ensuring minimal disruption to users.
System Operation Real unit · City and Guilds of London Institute
It teaches you to operate systems according to established procedures, ensuring efficient use of resources. You'll develop skills in system operation, troubleshooting common problems, and maintaining system operating procedures within organisational guidelines.
What you'll be able to do
- Operate the system according to established procedures
- Operate systems effectively and efficiently
- Maintain and implement system operating procedures in accordance with organisational guidelines
Testing the security of Information Systems Real unit · City and Guilds of London Institute
You'll learn to plan, prepare, execute, and report on security testing of information systems. The unit covers selecting testing tools, developing test plans, setting up environments, identifying vulnerabilities, analysing results, and recommending remediation actions.
What you'll be able to do
- Plan and prepare to conduct security testing on Information Systems.
- Execute security tests, using appropriate tools and techniques.
- Analyse and interpret the results of security tests.
- Report on test results, including vulnerabilities identified and recommendations for remediation.
Testing the security of Information Systems Real unit · City and Guilds of London Institute
It teaches you to plan and execute security testing on information systems by identifying threats and vulnerabilities, developing testing plans, prioritising activities, and reporting findings with recommendations.
What you'll be able to do
- Plan security testing activities, considering relevant threats, vulnerabilities, and security requirements.
- Carry out security testing procedures effectively, using appropriate tools and techniques to identify security weaknesses.
User Profile Administration Real unit · City and Guilds of London Institute
You'll gain knowledge and skills to administer user profiles effectively, including creating, modifying, and deleting user accounts. The unit emphasises managing user permissions and security considerations to ensure appropriate access and data protection.
What you'll be able to do
- Administer user profiles, including creating, modifying, and deleting user accounts and managing user permissions
- Administer user profiles effectively, ensuring data security and appropriate access levels for different users
03The standards
The national standards these units are built against
What the job actually needs, in the words employers and awarding bodies already use for the work itself.
- Standard
Assist in Implementing Vulnerability Assessment Processes
- Standard
Carry Out Intrusion Detection and Analysis
- Standard
Carry out information security audit, compliance and assurance activities
- Standard
Carry out information security governance activities
- Standard
Carry out information security identity and access management activities
- Standard
Carry out information security incident investigation and management activities
- Standard
Carry out information security risk assessment and management activities
- Standard
Carry out information security vulnerability assessments
- Standard
Conduct Information Security Audit Activities Under Supervision
- Standard
Contribute to information security identity and access management activities
- Standard
Contribute to information security risk assessment and management activities
- Standard
Direct and Be Fully Accountable for Information Security Audit
- Standard
Direct information security incident management and forensics
- Standard
Directing Information Assurance: Strategy, Policy, Governance
- Standard
Lead Information Risk Assessment Activities
- Standard
Manage information security audit, compliance and assurance activities
- Standard
Manage information security incident investigation and management activities
- Standard
Perform Incident Management Activities Under Supervision
Showing 18 of 20 standards these units map to.
04Where it leads
The jobs these credits are mapped to
A qualification is never a dead end here. Each of these is a job record this qualification is a mapped route into.
- 2 records
- 1 record
- 1 record
- 1 record
- 1 record
- 1 record
Showing 6 roles, drawn from 16 job records mapped to this qualification. Near-identical records are folded together, and each row says how many it stands for.
Where this can lead
Information Security Analyst
This work can lead to a lead security engineer role, designing and building security solutions, or into management, setting priorities and reporting on security posture.
See the whole journey05The credits
The credits, and who awards them
Level 4 credits are regulated, and they are awarded by City and Guilds of London Institute rather than by Zavmo. They don’t vanish when a subscription ends or a website closes. They travel to any employer, and Zavmo keeps the map of what you have covered and what is next.
What you would be collecting
Carrying out Information Security auditsCarrying out Information Security forensic examinationsCarrying out Information Security forensic examinationsCarrying out Information Security Incident Management activitiesCarrying out Information Security Risk AssessmentCarrying out Information Security Risk AssessmentCarrying out Information Security Risk ManagementCarrying out Information Security audits
Each one is a real unit registered against this qualification.
What you leave holding
The standards this credential builds, in the shape the product keeps them
Nothing here is marked learned. There is no learner on a public page, so the map shows what the qualification covers rather than what anybody has done.
City & Guilds Level 4 Diploma in Information Security Professional Competence (QCF)
- Assist in Implementing Vulnerability Assessment Processes
- Carry Out Intrusion Detection and Analysis
- Carry out information security audit, compliance and assurance activities
- Carry out information security governance activities
- Carry out information security identity and access management activities
- Carry out information security incident investigation and management activities
- Carry out information security risk assessment and management activities
- Carry out information security vulnerability assessments
Free tools
Want a read on where you stand?
Three free tools, no account needed. Each one ends with a role, a level and a way in.
This qualification is no longer awarded.
Ofqual lists it as no longer awarded, so it cannot be started today. The last day to be awarded it was 31 October 2020. It is here because people still hold it.
These are open to new learners in the same subject.
- CIWM (WAMITAB) Level 4 High Risk Operator Competence for Closed Landfill
- CIWM (WAMITAB) Level 4 High Risk Operator Competence for Managing Hazardous Open Landfill
- CIWM (WAMITAB) Level 4 High Risk Operator Competence for Managing Non-Hazardous Open Landfill
- CIWM (WAMITAB) Level 4 High Risk Operator Competence for Managing Physical and Chemical Treatment of Hazardous Waste
The title, level, credits, guided learning hours and unit learning outcomes on this page are taken from the Ofqual Register of Regulated Qualifications. Contains public sector information licensed under the Open Government Licence v3.0. Where this data comes from.