ATHE Ltd · RQF Level 7

ATHE Level 7 Diploma in Information Security and Assurance

You don’t just earn this. You learn to use it, one-to-one, on your own real work.

  • LevelRQF Level 7
  • Total credits120
  • Guided learning240 hours
  • Units in this qualification6

Awarded by ATHE Ltd · on the Ofqual register

Start here

See how this course maps onto your role

Ten quick questions, one per Future Fluency, asked against this qualification rather than a generic one.

Check my fluency, free

About 5 minutes · No card · Nothing to commit to

What you’ll learn

What each unit actually teaches you to do

This Level 7 Diploma in Information Security and Assurance is an occupational qualification. It develops skills in areas such as information systems management, business continuity, and information systems auditing. The qualification is relevant for individuals working in information security within the digital technology sector.

These are the units ATHE Ltd registers against this qualification. It is a catalogue, not a syllabus. Which of them you take depends on the combination the qualification requires, and that is set by the awarding body rather than by us. Every unit here is regulated, and every one you earn is yours to keep.

Business Continuity and Disaster RecoveryReal unit · ATHE Ltd
You'll gain an understanding of Business Continuity Planning (BCP) and Disaster Recovery Planning (DRP), including their principles, benefits, and processes. The unit covers recovery strategies and testing and auditing of continuity plans.

What you'll be able to do

  • Explain the importance of Business Continuity Planning (BCP) to businesses, including its role in maintaining operations during disruptions.
  • Explain the importance of Disaster Recovery Planning (DRP) to businesses, including its role in restoring operations after a disaster.
  • Describe the business continuity planning process, including risk assessment, impact analysis, and plan development.
  • Describe the procedures for recovering systems in case of disaster, including data restoration and system reconfiguration.
  • Explain the importance of business continuity and disaster recovery testing, including different testing methods and their objectives.
  • Explain the importance of business continuity and disaster recovery auditing, including compliance requirements and best practices.
  • Explain the importance of business continuity and disaster recovery awareness raising, including training and communication strategies.
  • Develop a business continuity and disaster recovery communication plan, including internal and external stakeholders.
Information Systems Audit ProcessReal unit · ATHE Ltd
This unit provides learners with knowledge of the information systems audit process, including audit mission, planning, execution, and reporting. It covers risk management, internal controls, and the role of IS audit in corporate governance.

What you'll be able to do

  • Explain the mission of information systems (IS) audit and its importance to organisational governance.
  • Describe the process of planning an IS audit, including defining scope, objectives, and resources.
  • Explain the role of the IS auditor, including their responsibilities, skills, and ethical considerations.
  • Explain the concepts of risk management and risk assessment in an IS context, including identifying, analysing, and evaluating risks.
  • Describe the purpose and types of internal controls within information systems, including preventative, detective, and corrective controls.
  • Explain the principles of corporate governance of IS, including the roles and responsibilities of key stakeholders.
Information Systems ManagementReal unit · ATHE Ltd
This unit explores the strategic importance of information and information systems within organisations. You'll understand IS planning, database technologies, and risk management related to business information systems.

What you'll be able to do

  • Understand the importance of information to an organisation
  • Understand the role of information systems (IS) planning within the context of strategic business planning
  • Understand database systems and technologies
  • Understand risk management in the context of business IS risks
Infrastructure and operation of information systemsReal unit · ATHE Ltd
This unit covers the infrastructure and operation of information systems, focusing on internetworking components such as routers, switches, and firewalls. You'll analyse network protocols, security management, integration of diverse IT infrastructures, and how IT supports business objectives.

What you'll be able to do

  • Understand internetworking infrastructure
  • Understand effective security management in protecting information assets
  • Understand ways to integrate diverse IT infrastructures
  • Understand how organisations ensure IT infrastructure and operations support achievement of business objectives
Scientific Research and Writing MethodologyReal unit · ATHE Ltd
You'll develop knowledge and skills in scientific research methodology, including research practices, ethical considerations, and planning and conducting research activities. The unit also covers preparing and presenting findings and participating in peer review processes.

What you'll be able to do

  • Understand research practices and the skills required to undertake scientific research at post-graduate level
  • Explore existing information about a research topic
  • Plan and conduct research activity
  • Prepare and present research findings
  • Take part in peer review
Software Engineering and Security ArchitectureReal unit · ATHE Ltd
You'll explore software security mechanisms and their integration into software engineering. The unit covers authentication, authorisation, encryption, secure coding practices, security testing, and risks associated with programming languages.

What you'll be able to do

  • Describe software security mechanisms and procedures, including authentication, authorisation, and encryption.
  • Explain the importance of integrated security in software engineering concepts, including secure coding practices and security testing.
  • Analyse the security risks associated with the use of programming languages, including common vulnerabilities and mitigation strategies.

The honest bit

You’ve started things before

Most courses were built for a room full of people who aren’t you. A cohort moves on whether or not your week allowed it, and by the third week the thing you’re behind on becomes the reason you stop opening it.

There’s no cohort here, and no timetable to fall behind. Before anything starts, Zavmo asks when you’re sharpest and how long you can realistically sit down for, then builds the sessions around those answers. A bad fortnight changes your pace. It doesn’t put you behind.

And you only pay once you start learning. Searching and planning are free, and you can cancel any time — so the cost of finding out is an afternoon, not a year.

Your passport

Every credit is a stamp you keep

Level 7 credits are regulated. They don’t vanish when a subscription ends or a website closes. They travel to any employer, and Zavmo keeps the map of what you’ve earned and what’s next.

Business Continuity and Disaster RecoveryInformation Systems Audit ProcessInformation Systems ManagementInfrastructure and operation of information systemsScientific Research and Writing MethodologySoftware Engineering and Security Architecture

Each stamp is a real unit registered against this qualification.

Who’d teach you this

The Evidence Evaluator

Assessor

Helps you show what you can actually do, gathering the evidence that proves it as you learn.

Meet all twelve tutors

Where this connects

Where these credits take you

A qualification is never a dead end here. See the jobs its credits open, the national occupational standards its units map to, and the future skills they quietly build.

See Your Progress GrowIllustration
ATHE Level 7 Diploma in Information Security and Assurance
  • Direct and Be Fully Accountable for Information Security Audit
  • Manage Disaster Business Continuity
  • Manage Information Assurance Methodologies
  • Manage information security audit, compliance and assurance activities
This is your Mind Palace on learn.zavmo.ai. Every skill above comes from this role's own record, not an example borrowed from another job. A node lights up when you evidence it, and what you build stays yours between jobs. That is the part a course cannot do.

Where this can lead

Business Continuity Analyst

This isn't just a job; it's the start of a really important career. You'll be building skills that are always in demand, protecting businesses from real-world threats, and making a tangible difference. We're excited to see where you'll go.

See the whole journey →

Showing 6 roles, drawn from 28 job records mapped to this qualification.

Skills it covers

What the job actually needs. These are the standards the units are built against, in the words employers and awarding bodies already use for the work itself.

Direct and Be Fully Accountable for Information Security AuditManage Disaster Business ContinuityManage Information Assurance MethodologiesManage information security audit, compliance and assurance activities

How you’ll actually learn this

One-to-one, on your own real work

A qualification is usually something done to you: sit the class, sit the exam, hope it sticks. Here it’s the opposite. You learn it one-to-one with a companion, on your own real work, and you keep going until you can use it, not just recall it.

One-to-one, on your real workNo lectures, no past-papers. Every unit is practised on the actual tasks your job throws at you, a tutor beside you, not a video in front of you.
Taught to the top, not the testMost courses stop at remembering. Your companion keeps climbing: analysing, judging, creating. That’s the part a machine can’t do for you.
Credits you keep, a map that continuesEvery unit is regulated and yours for good. The day you finish, Zavmo already knows the next role your new credits open.
Business Continuity and Disaster RecoveryLevel 7

Applied to your work in any of these jobs

Learners will gain an understanding of Business Continuity Planning (BCP) and Disaster Recovery Planning (DRP), including their principles, benefits, and processes. The unit covers recovery strategies and testing and auditing of continuity plans.

How the thinking builds
  1. Remember
  2. Understand
  3. Apply
  4. Analyse
  5. Evaluate
  6. Create
An illustration of a Zavmo lesson, built from this role’s own route. The unit, its objective and every criterion above are the awarding body’s own words, not an example.
Your PlanIllustration

Built for ATHE Level 7 Diploma in Information Security and Assurance

6 units in this credential, in the order it lists them, awarded by ATHE Ltd.

  1. Business Continuity and Disaster Recovery
  2. Information Systems Audit Process
  3. Information Systems Management
  4. Infrastructure and operation of information systems
  5. Scientific Research and Writing Methodology
  6. Software Engineering and Security Architecture
These are the real units of this credential, in its own order. Nothing here is marked done, because this plan has not been started by anyone yet. Yours would fill in as you go.

One to one, not one to many

No two people run this the same way

A course is written once and handed to everyone. This is assembled around you, and keeps changing as it learns you. Five things it reads, and what each one changes.

  1. Your actual work Every unit is taught against a live piece of your own work, not a worked example from a textbook.
  2. What you already know The first conversation finds your starting point, so you skip what you can already do and spend the time on what you cannot.
  3. The conditions you learn under Not a learning-styles quiz. The evidence does not support those. The dimensions the research does back, read once and used to shape the plan.
  4. How far you got last time It picks up mid-thought. The tutor knows what you said, what you struggled with, and what it asked you to try.
  5. Which tutor suits the moment Twelve of them, each for a different kind of thinking. The one who walks you through a first idea is not the one who stress-tests it.

See how you learn, free. Eight questions, no sign-up. A directional taster; the diagnostic inside Zavmo goes deeper and keeps adapting.

Why it sticks

Most courses stop at remembering

There’s a well-known ladder of how deeply you learn something, called Bloom’s Taxonomy. Most courses get you up the first two rungs: you remember some facts, you pass a test, you forget it. Real skill lives at the top. Judging, deciding, creating. And this isn’t a generic ladder: every rung has a named Zavmo tutor who walks you up it.

  1. 6CreateThe Creative Catalyst
  2. 5EvaluateThe Evidence Evaluator
  3. 4AnalyseThe Analyst
  4. 3ApplyThe Coach
  5. 2UnderstandThe Connector
  6. 1RememberThe Builder

Where most courses leave you Where Zavmo takes you

Why this matters: AI can already remember and understand for you. What it can’t do is take your real problem and judge the right call. So the only learning worth paying for is the learning that takes you to the top. That’s exactly what a tutor doing it with you, on your real work, is for.

The value

Why the companion is worth £70 a month

You’re not paying for the units. They’re regulated, and the same wherever you earn them. You’re paying for the one thing that decides whether you actually get there: a companion that makes them stick, on your real work.

That is one-to-one on this qualification, every day, on the work you already do, for £70 a month. Your first module is free, so you can see the teaching before you pay for any of it. Billed monthly, cancel any time and billing stops.

Earned on your own work, taught to the top.

Everything you just read, learned one-to-one on the job you already do. Your first module is free, so you can see the teaching before you pay for any of it.

Build my plan, free

No card. See how this qualification maps onto your role and meet the tutors who’d teach it, free. The learning begins when you subscribe. It’s £70 a month, billed monthly. Cancel any time and billing stops.