How you’d get it

How you’d get this certificate

  1. Zavmo teaches you. You learn the units one-to-one with an AI tutor, on your own work.
  2. You register with an approved centre. That is a college, training provider or employer ATHE Ltd has approved to offer this qualification. Zavmo is not an approved centre, so you register with them, not with us.
  3. The centre assesses, and ATHE Ltd awards. A qualified assessor at the centre judges your evidence, and the certificate comes from ATHE Ltd.

More on studying for a qualification

01What it is

Unlike our core portfolio of qualifications, which offer broad appeal and are open to all our centres, Bespoke Qualifications are tailored to centres’ specialist course content and meet the needs of their learners and sector. You can browse our portfolio by level to the right of this page.

These are the units ATHE Ltd registers against this qualification. It is a catalogue, not a syllabus. Which of them you take depends on the combination the qualification requires, and that is set by the awarding body rather than by us. Every unit here is regulated. Zavmo teaches towards them on your own work, and work done here is recognised as prior learning under the agreements we hold.

Zavmo is not an awarding body, is not an approved centre, and is not affiliated with ATHE Ltd. It does the teaching and the mapping. ATHE Ltd sets this qualification and awards it, and a qualified human assessor makes the assessment decision.

Free first step

Try a free Future Fluency lesson first

The free part is a Future Fluency lesson on using AI at work. It is not part of this qualification. Next, a free account. We build your plan for this qualification as you set up. Teaching towards this qualification begins when you subscribe.

No card · Nothing to commit to

02The units

What each unit actually teaches you to do

Crisis Capability and Response Real unit · ATHE Ltd
You'll explore crisis definitions, theories, and response frameworks, alongside evaluating crisis and disaster management effectiveness. The unit also covers organisational emergency management approaches and the roles and capabilities of crisis responders.

What you'll be able to do

  • Understand crisis definitions, theories, and response frameworks used in crisis management.
  • Understand how to evaluate crisis, disaster management, and resilience responses to determine their effectiveness and identify areas for improvement.
  • Understand different organisational Emergency Management approaches, including planning, training, and exercising.
  • Understand the roles and capabilities of effective crisis responders, including leadership, communication, and decision-making skills.
Information and Cyber Security Real unit · ATHE Ltd
This unit covers the principles of information security management and assurance, cyber security risks, and organisational responses to threats. You'll gain knowledge of current and emerging risks affecting digital business and society, enabling them to understand strategies for protecting information assets.

What you'll be able to do

  • Understand the principles of Information security management and assurance, and what these encompass in protecting information assets.
  • Understand the various cyber security risks and issues that organisations face, including threats, vulnerabilities, and potential impacts.
  • Understand the different organisational responses to information and cyber threats, risks, and issues, including prevention, detection, and response strategies.
  • Understand the current and future risks for digital business and society related to information and cyber security, and how to mitigate these risks.
Security Consultancy Process Real unit · ATHE Ltd
You'll explore the phases of management consultancy and core skills required at each stage, with a focus on security consultancy. The unit covers the consultancy life cycle and project management within a security context.

What you'll be able to do

  • Understand the different phases involved in management consultancy and the core skills required for each phase.
  • Understand the consultancy life cycle specifically within a security context, including initiation, planning, execution, and closure.
  • Understand the processes involved in managing a consultancy project, including resource allocation, risk management, and stakeholder communication.
Security Risk Management Frameworks Real unit · ATHE Ltd
This unit provides an understanding of Security Enterprise Risk Management Frameworks (SERM), including their components and benefits. You'll analyse the global security context and apply SERM frameworks within various organisational settings.

What you'll be able to do

  • Understand the key components of Security Enterprise Risk Management Frameworks (SERM).
  • Understand the application of Security Enterprise Risk Management Frameworks (SERM) within organisations.
  • Understand the global security stance, including strategic considerations.
  • Understand the organisational context of security risk management.
  • Understand the internal and external context of security risk management.
  • Critically analyse risks through the evaluation of likelihood and consequence.
  • Demonstrate knowledge of risk mitigation strategies in complex situations.
Travel Risk, Journey Management and Evacuation Planning Real unit · ATHE Ltd
You'll understand employers' legal and ethical obligations regarding employee travel safety and security. The unit emphasises the importance of structured travel risk management policies and tested evacuation plans to ensure effective risk mitigation.

What you'll be able to do

  • Understand employers' legal and ethical obligations in relation to travel risk management.
  • Understand the importance of structured Travel Risk Management policies and procedures for organisations.
  • Understand the key elements of effective Travel Risk Management policies and procedures.
  • Understand the importance of structured and tested evacuation plans in various travel scenarios.
  • Understand the process of developing and implementing effective evacuation plans.
organisational Behaviour and Management Real unit · ATHE Ltd
It teaches you to understand organisational risk and impact preparedness, including crisis management and business continuity planning. You'll analyse risk assessment importance and the role of behaviour shaping in improving organisational performance.

What you'll be able to do

  • Understand the importance of organisational risk and the impact of preparedness measures on organisational performance.
  • Understand the relationship between risk, security, and crisis management, and how organisational capability and culture influence these areas.
  • Understand the impact of bias and prediction errors on organisational failure, and how to mitigate these factors.
  • Understand the role and importance of shaping behaviour to improve organisational performance, including motivation, communication, and leadership.
organisational Resilience Real unit · ATHE Ltd
You'll gain a comprehensive understanding of organisational resilience, including key components such as adaptability and robustness. The unit covers criticality management, impact analysis, response methodologies, and the influence of human factors on resilience.

What you'll be able to do

  • Understand the concept of Organisational Resilience capability and its key components.
  • Understand the principles of criticality management in the context of Organisational Resilience, including identifying and prioritising critical assets and functions.
  • Understand impact analysis, management, and response methodologies used to mitigate the effects of disruptions.
  • Understand the role and importance of human factors in organisational resilience, including communication, decision-making, and leadership during crises.
03The standards

The national standards these units are built against

What the job actually needs, in the words employers and awarding bodies already use for the work itself.

  • Carry out information security architecture activities

    Standard
  • Carry out information security related business resilience activities

    Standard
  • Confirm clients’ security aims and objectives

    Standard
  • Contribute to information security audit, compliance and assurance activities

    Standard
  • Contribute to information security governance activities

    Standard
  • Contribute to information security related business resilience activities

    Standard
  • Contribute to information security risk assessment and management activities

    Standard
  • Contribute to information security testing activities

    Standard
  • Direct Information Security Governance: Establish and Maintain

    Standard
  • Direct information security governance activities

    Standard
  • Direct information security testing activities

    Standard
  • Directing Information Assurance: Strategy, Policy, Governance

    Standard
  • Directing Information Risk Assessment and Management

    Standard
  • Establish and Maintain Information Systems Security Governance

    Standard
  • Implement Information Security Governance and Standards

    Standard
  • Manage Information Assurance Methodologies

    Standard
  • Manage Information Security Risk Assessment and Management Activities

    Standard
  • Manage Vulnerability Assessment Activities

    Standard

Showing 18 of 24 standards these units map to.

04Where it leads

The jobs these credits are mapped to

A qualification is never a dead end here. Each of these is a job record this qualification is a mapped route into.

Showing 6 roles, drawn from 191 job records mapped to this qualification. Near-identical records are folded together, and each row says how many it stands for.

Where this can lead

Crisis Management Specialist

This work can lead to broader risk management roles, senior crisis and business continuity management, or resilience roles that shape how a whole organisation prepares for major shocks.

See the whole journey
05The credits

The credits, and who awards them

Level 6 credits are regulated, and they are awarded by ATHE Ltd rather than by Zavmo. They don’t vanish when a subscription ends or a website closes. They travel to any employer, and Zavmo keeps the map of what you have covered and what is next.

What you would be collecting

Crisis Capability and ResponseInformation and Cyber SecuritySecurity Consultancy ProcessSecurity Risk Management FrameworksTravel Risk, Journey Management and Evacuation Planningorganisational Behaviour and Managementorganisational Resilience

Each one is a real unit registered against this qualification.

How you’d practise it

You don’t watch this. You do it.

You are not assessed on remembering this. You are assessed on applying it, analysing it, evaluating it and producing something. So that is what the practice is: projects, role play and your own live cases, with a tutor in the room.

The Navigator The Navigator · your what-if tutor Illustration
The Navigator Your plan for “Travel Risk, Journey Management and Evacuation Planning” assumes the same two people are free in March. What have you seen that makes you slightly uneasy about that?
You One of them has been pulled onto the migration twice already. Probably fine.
The Navigator That is the thread worth pulling. Let us build the version where it happens a third time and find the move that works either way.
The same lesson on the real thing: the conversation in the middle, the thinking ladder on the left, and the criteria each answer is evidencing on the right.
  • Bring your own plan Create

    For “Travel Risk, Journey Management and Evacuation Planning” you bring the plan you are actually working on, not a case study. Zavmo pulls on the assumptions in it until the weak one shows.

  • Lead it Apply

    “Security Risk Management Frameworks” is practised on the team you actually have. You talk through the call you are about to make, and Zavmo makes you say it the way you would say it to them.

What you leave holding

The standards this credential builds, in the shape the product keeps them

Nothing here is marked learned. There is no learner on a public page, so the map shows what the qualification covers rather than what anybody has done.

See Your Progress Grow Illustration
ATHE Level 6 Award in Security Risk Management Consultancy
  • Carry out information security architecture activities
  • Carry out information security related business resilience activities
  • Confirm clients’ security aims and objectives
  • Contribute to information security audit, compliance and assurance activities
  • Contribute to information security governance activities
  • Contribute to information security related business resilience activities
  • Contribute to information security risk assessment and management activities
  • Contribute to information security testing activities
This is your Mind Palace on learn.zavmo.ai. Every skill above comes from this role's own record, not an example borrowed from another job. A node lights up when you evidence it, and what you build stays yours between jobs. That is the part a course cannot do.

How you would learn this

One to one, on the work you already do

A tutor sets the task against your own job and marks the reasoning, at your pace. There is no cohort to fall behind.

A lesson from Crisis Capability and Response, one of this qualification's own units.

Crisis Capability and Response Level 6

Applied to your work in any of these jobs

Learners will explore crisis definitions, theories, and response frameworks, alongside evaluating crisis and disaster management effectiveness. The unit also covers organisational emergency management approaches and the roles and capabilities of crisis responders.

How the thinking builds
  1. 1 Remember
  2. 2 Understand
  3. 3 Apply
  4. 4 Analyse
  5. 5 Evaluate
  6. 6 Create
An illustration of a Zavmo lesson, built from this role’s own route. The unit, its objective and every criterion above are the awarding body’s own words, not an example.

It is £70 a month, billed monthly. Your free first module is Future Fluency, and you can cancel any time. Teaching towards this qualification begins when you subscribe.

Your Plan Illustration

Built for ATHE Level 6 Award in Security Risk Management Consultancy

7 units in this credential, in the order it lists them, awarded by ATHE Ltd.

  1. Crisis Capability and Response
  2. Information and Cyber Security
  3. Security Consultancy Process
  4. Security Risk Management Frameworks
  5. Travel Risk, Journey Management and Evacuation Planning
  6. organisational Behaviour and Management

and 1 more in the full unit list below.

These are the real units of this credential, in its own order. Nothing here is marked done, because this plan has not been started by anyone yet. Yours would fill in as you go.

Free tools

Want a read on where you stand?

Three free tools, no account needed. Each one ends with a role, a level and a way in.

Learned on your own work, taught one-to-one.

Everything you just read, learned one-to-one on the job you already do. Your free first module is Future Fluency, so you can see how the teaching works before you pay for anything.

Build my plan, free

No card. See how this qualification maps onto your role and meet the tutors who’d teach it, free. The learning begins when you subscribe. It’s £70 a month, billed monthly. Cancel any time and billing stops.

The title, level, credits, guided learning hours and unit learning outcomes on this page are taken from the Ofqual Register of Regulated Qualifications. Contains public sector information licensed under the Open Government Licence v3.0. Where this data comes from.