UK
How you’d get it

How you’d get this certificate

  1. Zavmo teaches you. You learn the units one-to-one with an AI tutor, on your own work.
  2. You register with an approved centre. That is a college, training provider or employer NCFE has approved to offer this qualification. Zavmo is not an approved centre, so you register with them, not with us.
  3. The centre assesses, and NCFE awards. A qualified assessor at the centre judges your evidence, and the certificate comes from NCFE.

More on studying for a qualification

01What it is

This qualification has been allocated UCAS points. Please refer to the UCAS website for further details of the points allocation and the most up-to-date information.

These are the units NCFE registers against this qualification. It is a catalogue, not a syllabus. Which of them you take depends on the combination the qualification requires, and that is set by the awarding body rather than by us. Every unit here is regulated. Zavmo teaches towards them on your own work, and work done here is recognised as prior learning under the agreements we hold.

Zavmo is not an awarding body, is not an approved centre, and is not affiliated with NCFE. It does the teaching and the mapping. NCFE sets this qualification and awards it, and a qualified human assessor makes the assessment decision.

Free first step

Try a free Future Fluency lesson first

The free part is a Future Fluency lesson on using AI at work. It is not part of this qualification. Next, a free account. We build your plan for this qualification as you set up. Teaching towards this qualification begins when you subscribe.

Try a free AI lesson

No card · Nothing to commit to

02The units

What each unit actually teaches you to do

Cyber security incident response Real unit · NCFE
You'll study the components and stages of a cyber security incident response plan. The unit develops skills to create, maintain, and review incident response plans, including producing post-mortem reports following incidents.

What you'll be able to do

  • Understand what is meant by a cyber security incident response plan Learning outcome 2 The learner will:
  • Develop a cyber security incident response plan Learning outcome 3 The learner will:
  • Develop an incident post mortem report
Cyber security testing, vulnerabilities and controls Real unit · NCFE
This unit covers common types of cyber security testing, methods to reduce vulnerabilities, and the application of controls. You'll understand the importance of testing, mitigation strategies, and the need for retesting following changes.

What you'll be able to do

  • Understand common types of testing in cyber security Learning outcome 2 The learner will:
  • Reduce or remove potential cyber security vulnerabilities Learning outcome 3 The learner will:
  • Understand controls in cyber security Learning outcome 4 The learner will:
  • Apply a cyber security control
Professional skills and behaviours for cyber security Real unit · NCFE
You'll examine professional behaviours and skills required for a career in cyber security. The unit covers managing a positive digital identity, employee screening processes, and the significance of continuous professional development.

What you'll be able to do

  • Understand behaviours required for a career in cyber security Learning outcome 2 The learner will:
  • Identify skills required for a career in cyber security Learning outcome 3 The learner will:
  • Understand the importance of continuous professional development
Threat intelligence in cyber security Real unit · NCFE
You'll explore cyber threat intelligence, covering key concepts, threat models, and the threat intelligence lifecycle. The unit also addresses malicious software, social engineering techniques, and methods for identifying emerging attack strategies.

What you'll be able to do

  • Understand cyber threat intelligence Learning outcome 2 The learner will:
  • Understand threat models Learning outcome 3 The learner will:
  • Understand malicious software Learning outcome 4 The learner will:
  • Know about social engineering
Understand cyber security principles Real unit · NCFE
This unit introduces learners to fundamental cyber security principles, including core terminology and key aspects. You'll understand the concepts of cyber security, the roles of good and bad actors, and the consequences of inadequate security measures.

What you'll be able to do

  • Understand cyber security Learning outcome 2 The learner will:
  • Understand core terminology and key aspects of cyber security Learning outcome 3 The learner will:
  • Understand security by design principles
Understand legislation and ethical conduct within cyber security Real unit · NCFE
This unit provides learners with knowledge of legislation affecting cyber security, relevant information security standards such as ISO, and the importance of ethical conduct within the cyber security profession.

What you'll be able to do

  • Understand legislation relating to cyber security Learning outcome 2 The learner will:
  • Understand information security standards Learning outcome 3 The learner will:
  • Understand ethical conduct within cyber security
03The standards

The national standards these units are built against

What the job actually needs, in the words employers and awarding bodies already use for the work itself.

  • Carry out information security testing activities

    Standard

  • Carry out infrastructure penetration testing

    Standard

  • Carry out threat intelligence assessments

    Standard

  • Contribute to information security testing activities

    Standard

  • Direct information security testing activities

    Standard

  • Manage information security testing activities

    Standard

  • Manage threat intelligence activities

    Standard

  • Respond to and recover from cyber security breaches

    Standard

  • Undertake Cyber Threat Hunting Assignments

    Standard
04Where it leads

The jobs these credits are mapped to

A qualification is never a dead end here. Each of these is a job record this qualification is a mapped route into.

Showing 6 roles, drawn from 10 job records mapped to this qualification. Near-identical records are folded together, and each row says how many it stands for.

Where this can lead

Senior International Security Incident Response Specialist

This work can lead to managing incident response teams, working as a principal forensics investigator, or moving into wider security leadership roles.

See the whole journey
05The credits

The credits, and who awards them

Level 3 credits are regulated, and they are awarded by NCFE rather than by Zavmo. They don’t vanish when a subscription ends or a website closes. They travel to any employer, and Zavmo keeps the map of what you have covered and what is next.

What you would be collecting

Cyber security incident responseCyber security testing, vulnerabilities and controlsProfessional skills and behaviours for cyber securityThreat intelligence in cyber securityUnderstand cyber security principlesUnderstand legislation and ethical conduct within cyber security

Each one is a real unit registered against this qualification.

How you’d practise it

You don’t watch this. You do it.

You are not assessed on remembering this. You are assessed on applying it, analysing it, evaluating it and producing something. So that is what the practice is: projects, role play and your own live cases, with a tutor in the room.

The Coach The Coach · your practice partner Illustration
The Coach Rather than work through “Cyber security incident response” in the abstract, bring me the piece of it you are dealing with this week.
You I have got the write-up due Friday and I have not started it.
The Coach Then that is the lesson. Tell me what it has to say, and we will get the shape of it down before we worry about the words.
The same lesson on the real thing: the conversation in the middle, the thinking ladder on the left, and the criteria each answer is evidencing on the right.
  • Bring the real thing Apply

    “Cyber security incident response” is taught against the work in front of you rather than a worked example. You bring what you are doing this week and it becomes the practice.

What you leave holding

The standards this credential builds, in the shape the product keeps them

Nothing here is marked learned. There is no learner on a public page, so the map shows what the qualification covers rather than what anybody has done.

See Your Progress Grow Illustration
NCFE Level 3 Certificate in Cyber Security Practices
  • Carry out information security testing activities
  • Carry out infrastructure penetration testing
  • Carry out threat intelligence assessments
  • Contribute to information security testing activities
  • Direct information security testing activities
  • Manage information security testing activities
  • Manage threat intelligence activities
  • Respond to and recover from cyber security breaches
This is your Mind Palace on learn.zavmo.ai. Every skill above comes from this role's own record, not an example borrowed from another job. A node lights up when you evidence it, and what you build stays yours between jobs. That is the part a course cannot do.

How you would learn this

One to one, on the work you already do

A tutor sets the task against your own job and marks the reasoning, at your pace. There is no cohort to fall behind.

A lesson from Cyber security incident response, one of this qualification's own units.

Cyber security incident response Level 3

Applied to your work in any of these jobs

Which job do you mean?
Senior International Security Incident Response SpecialistAssociate Incident Response EngineerAssociate Incident Responder / SOC AnalystIncident Response EngineerInternational Cybersecurity Support AnalystLead Cybersecurity Support Analyst

Learners will study the components and stages of a cyber security incident response plan. The unit develops skills to create, maintain, and review incident response plans, including producing post-mortem reports following incidents.

How the thinking builds
  1. 1 Remember
  2. 2 Understand
  3. 3 Apply
  4. 4 Analyse
  5. 5 Evaluate
  6. 6 Create
An illustration of a Zavmo lesson, built from this role’s own route. The unit, its objective and every criterion above are the awarding body’s own words, not an example.

It is £70 a month, billed monthly. Your free first module is Future Fluency, and you can cancel any time. Teaching towards this qualification begins when you subscribe.

Start learning, free
Your Plan Illustration

Built for NCFE Level 3 Certificate in Cyber Security Practices

6 units in this credential, in the order it lists them, awarded by NCFE.

  1. Cyber security incident response
  2. Cyber security testing, vulnerabilities and controls
  3. Professional skills and behaviours for cyber security
  4. Threat intelligence in cyber security
  5. Understand cyber security principles
  6. Understand legislation and ethical conduct within cyber security
These are the real units of this credential, in its own order. Nothing here is marked done, because this plan has not been started by anyone yet. Yours would fill in as you go.

Free tools

Want a read on where you stand?

Three free tools, no account needed. Each one ends with a role, a level and a way in.

Read the Zavmo manifesto to understand how you will be taught Meet your tutors

Or try another one

Learned on your own work, taught one-to-one.

Everything you just read, learned one-to-one on the job you already do. Your free first module is Future Fluency, so you can see how the teaching works before you pay for anything.

Build my plan, free

No card. See how this qualification maps onto your role and meet the tutors who’d teach it, free. The learning begins when you subscribe. It’s £70 a month, billed monthly. Cancel any time and billing stops.

The title, level, credits, guided learning hours and unit learning outcomes on this page are taken from the Ofqual Register of Regulated Qualifications. Contains public sector information licensed under the Open Government Licence v3.0. Where this data comes from.