UK

NCFE · RQF Level 3

NCFE Level 3 Certificate in Cyber Security Practices

You don’t just earn this. You learn to use it, one-to-one, on your own real work.

  • LevelRQF Level 3
  • Total credits22
  • Guided learning150 hours
  • Units in this qualification6

Awarded by NCFE · on the Ofqual register

Start here

See how this course maps onto your role

Ten quick questions, one per Future Fluency, asked against this qualification rather than a generic one.

Check my fluency, free

About 5 minutes · No card · Nothing to commit to

What you’ll learn

What each unit actually teaches you to do

This qualification has been allocated UCAS points. Please refer to the UCAS website for further details of the points allocation and the most up-to-date information.

These are the units NCFE registers against this qualification. It is a catalogue, not a syllabus. Which of them you take depends on the combination the qualification requires, and that is set by the awarding body rather than by us. Every unit here is regulated, and every one you earn is yours to keep.

Cyber security incident responseReal unit · NCFE
You'll study the components and stages of a cyber security incident response plan. The unit develops skills to create, maintain, and review incident response plans, including producing post-mortem reports following incidents.

What you'll be able to do

  • Understand what is meant by a cyber security incident response plan Learning outcome 2 The learner will:
  • Develop a cyber security incident response plan Learning outcome 3 The learner will:
  • Develop an incident post mortem report
Cyber security testing, vulnerabilities and controlsReal unit · NCFE
This unit covers common types of cyber security testing, methods to reduce vulnerabilities, and the application of controls. You'll understand the importance of testing, mitigation strategies, and the need for retesting following changes.

What you'll be able to do

  • Understand common types of testing in cyber security Learning outcome 2 The learner will:
  • Reduce or remove potential cyber security vulnerabilities Learning outcome 3 The learner will:
  • Understand controls in cyber security Learning outcome 4 The learner will:
  • Apply a cyber security control
Professional skills and behaviours for cyber securityReal unit · NCFE
You'll examine professional behaviours and skills required for a career in cyber security. The unit covers managing a positive digital identity, employee screening processes, and the significance of continuous professional development.

What you'll be able to do

  • Understand behaviours required for a career in cyber security Learning outcome 2 The learner will:
  • Identify skills required for a career in cyber security Learning outcome 3 The learner will:
  • Understand the importance of continuous professional development
Threat intelligence in cyber securityReal unit · NCFE
You'll explore cyber threat intelligence, covering key concepts, threat models, and the threat intelligence lifecycle. The unit also addresses malicious software, social engineering techniques, and methods for identifying emerging attack strategies.

What you'll be able to do

  • Understand cyber threat intelligence Learning outcome 2 The learner will:
  • Understand threat models Learning outcome 3 The learner will:
  • Understand malicious software Learning outcome 4 The learner will:
  • Know about social engineering
Understand cyber security principlesReal unit · NCFE
This unit introduces learners to fundamental cyber security principles, including core terminology and key aspects. You'll understand the concepts of cyber security, the roles of good and bad actors, and the consequences of inadequate security measures.

What you'll be able to do

  • Understand cyber security Learning outcome 2 The learner will:
  • Understand core terminology and key aspects of cyber security Learning outcome 3 The learner will:
  • Understand security by design principles
Understand legislation and ethical conduct within cyber securityReal unit · NCFE
This unit provides learners with knowledge of legislation affecting cyber security, relevant information security standards such as ISO, and the importance of ethical conduct within the cyber security profession.

What you'll be able to do

  • Understand legislation relating to cyber security Learning outcome 2 The learner will:
  • Understand information security standards Learning outcome 3 The learner will:
  • Understand ethical conduct within cyber security

The honest bit

You’ve started things before

Most courses were built for a room full of people who aren’t you. A cohort moves on whether or not your week allowed it, and by the third week the thing you’re behind on becomes the reason you stop opening it.

There’s no cohort here, and no timetable to fall behind. Before anything starts, Zavmo asks when you’re sharpest and how long you can realistically sit down for, then builds the sessions around those answers. A bad fortnight changes your pace. It doesn’t put you behind.

And you only pay once you start learning. Searching and planning are free, and you can cancel any time — so the cost of finding out is an afternoon, not a year.

Your passport

Every credit is a stamp you keep

Level 3 credits are regulated. They don’t vanish when a subscription ends or a website closes. They travel to any employer, and Zavmo keeps the map of what you’ve earned and what’s next.

Cyber security incident responseCyber security testing, vulnerabilities and controlsProfessional skills and behaviours for cyber securityThreat intelligence in cyber securityUnderstand cyber security principlesUnderstand legislation and ethical conduct within cyber security

Each stamp is a real unit registered against this qualification.

Who’d teach you this

The Evidence Evaluator

Assessor

Helps you show what you can actually do, gathering the evidence that proves it as you learn.

Meet all twelve tutors

Where this connects

Where these credits take you

A qualification is never a dead end here. See the jobs its credits open, the national occupational standards its units map to, and the future skills they quietly build.

See Your Progress GrowIllustration
NCFE Level 3 Certificate in Cyber Security Practices
  • Carry out information security testing activities
  • Carry out infrastructure penetration testing
  • Carry out threat intelligence assessments
  • Contribute to information security testing activities
  • Direct information security testing activities
  • Manage information security testing activities
  • Manage threat intelligence activities
  • Respond to and recover from cyber security breaches
This is your Mind Palace on learn.zavmo.ai. Every skill above comes from this role's own record, not an example borrowed from another job. A node lights up when you evidence it, and what you build stays yours between jobs. That is the part a course cannot do.

Where this can lead

Senior International Security Incident Response Specialist

Your journey in incident response is one of continuous challenge and immense reward. Whether you choose to lead teams, become the deepest technical expert, or shape the entire security strategy of an organisation, the skills you develop here will set you up for a truly impactful career. We're excited to see where you take it.

See the whole journey →
Opens the roleSenior International Security Incident Response SpecialistOne of the jobs this qualification is a route intoSee the role →Opens the roleAssociate Incident Response EngineerOne of the jobs this qualification is a route intoSee the role →Opens the roleSecurity Incident Response SpecialistOne of the jobs this qualification is a route intoSee the role →Opens the roleAssociate Incident Responder / SOC AnalystOne of the jobs this qualification is a route intoSee the role →Opens the roleIncident Response EngineerOne of the jobs this qualification is a route intoSee the role →Opens the roleInternational Cybersecurity Support AnalystOne of the jobs this qualification is a route intoSee the role →Future FluencyAll ten future skillsSee how every unit is contextualised by the tenExplore →

Showing 6 roles, drawn from 13 job records mapped to this qualification.

Skills it covers

What the job actually needs. These are the standards the units are built against, in the words employers and awarding bodies already use for the work itself.

Carry out information security testing activitiesCarry out infrastructure penetration testingCarry out threat intelligence assessmentsContribute to information security testing activitiesDirect information security testing activitiesManage information security testing activitiesManage threat intelligence activitiesRespond to and recover from cyber security breachesUndertake Cyber Threat Hunting Assignments

How you’ll actually learn this

One-to-one, on your own real work

A qualification is usually something done to you: sit the class, sit the exam, hope it sticks. Here it’s the opposite. You learn it one-to-one with a companion, on your own real work, and you keep going until you can use it, not just recall it.

One-to-one, on your real workNo lectures, no past-papers. Every unit is practised on the actual tasks your job throws at you, a tutor beside you, not a video in front of you.
Taught to the top, not the testMost courses stop at remembering. Your companion keeps climbing: analysing, judging, creating. That’s the part a machine can’t do for you.
Credits you keep, a map that continuesEvery unit is regulated and yours for good. The day you finish, Zavmo already knows the next role your new credits open.
Cyber security incident responseLevel 3

Applied to your work in any of these jobs

Which job do you mean?
Senior International Security Incident Response SpecialistAssociate Incident Response EngineerSecurity Incident Response SpecialistAssociate Incident Responder / SOC AnalystIncident Response EngineerInternational Cybersecurity Support Analyst

Learners will study the components and stages of a cyber security incident response plan. The unit develops skills to create, maintain, and review incident response plans, including producing post-mortem reports following incidents.

How the thinking builds
  1. Remember
  2. Understand
  3. Apply
  4. Analyse
  5. Evaluate
  6. Create
An illustration of a Zavmo lesson, built from this role’s own route. The unit, its objective and every criterion above are the awarding body’s own words, not an example.
Your PlanIllustration

Built for NCFE Level 3 Certificate in Cyber Security Practices

6 units in this credential, in the order it lists them, awarded by NCFE.

  1. Cyber security incident response
  2. Cyber security testing, vulnerabilities and controls
  3. Professional skills and behaviours for cyber security
  4. Threat intelligence in cyber security
  5. Understand cyber security principles
  6. Understand legislation and ethical conduct within cyber security
These are the real units of this credential, in its own order. Nothing here is marked done, because this plan has not been started by anyone yet. Yours would fill in as you go.

One to one, not one to many

No two people run this the same way

A course is written once and handed to everyone. This is assembled around you, and keeps changing as it learns you. Five things it reads, and what each one changes.

  1. Your actual work Every unit is taught against a live piece of your own work, not a worked example from a textbook.
  2. What you already know The first conversation finds your starting point, so you skip what you can already do and spend the time on what you cannot.
  3. The conditions you learn under Not a learning-styles quiz. The evidence does not support those. The dimensions the research does back, read once and used to shape the plan.
  4. How far you got last time It picks up mid-thought. The tutor knows what you said, what you struggled with, and what it asked you to try.
  5. Which tutor suits the moment Twelve of them, each for a different kind of thinking. The one who walks you through a first idea is not the one who stress-tests it.

See how you learn, free. Eight questions, no sign-up. A directional taster; the diagnostic inside Zavmo goes deeper and keeps adapting.

Why it sticks

Most courses stop at remembering

There’s a well-known ladder of how deeply you learn something, called Bloom’s Taxonomy. Most courses get you up the first two rungs: you remember some facts, you pass a test, you forget it. Real skill lives at the top. Judging, deciding, creating. And this isn’t a generic ladder: every rung has a named Zavmo tutor who walks you up it.

  1. 6CreateThe Creative Catalyst
  2. 5EvaluateThe Evidence Evaluator
  3. 4AnalyseThe Analyst
  4. 3ApplyThe Coach
  5. 2UnderstandThe Connector
  6. 1RememberThe Builder

Where most courses leave you Where Zavmo takes you

Why this matters: AI can already remember and understand for you. What it can’t do is take your real problem and judge the right call. So the only learning worth paying for is the learning that takes you to the top. That’s exactly what a tutor doing it with you, on your real work, is for.

The value

Why the companion is worth £70 a month

You’re not paying for the units. They’re regulated, and the same wherever you earn them. You’re paying for the one thing that decides whether you actually get there: a companion that makes them stick, on your real work.

That is one-to-one on this qualification, every day, on the work you already do, for £70 a month. Your first module is free, so you can see the teaching before you pay for any of it. Billed monthly, cancel any time and billing stops.

Earned on your own work, taught to the top.

Everything you just read, learned one-to-one on the job you already do. Your first module is free, so you can see the teaching before you pay for any of it.

Build my plan, free

No card. See how this qualification maps onto your role and meet the tutors who’d teach it, free. The learning begins when you subscribe. It’s £70 a month, billed monthly. Cancel any time and billing stops.