How you’d get it

How you’d get this certificate

  1. Zavmo teaches you. You learn the units one-to-one with an AI tutor, on your own work.
  2. You register with an approved centre. That is a college, training provider or employer Qualifi Ltd has approved to offer this qualification. Zavmo is not an approved centre, so you register with them, not with us.
  3. The centre assesses, and Qualifi Ltd awards. A qualified assessor at the centre judges your evidence, and the certificate comes from Qualifi Ltd.

More on studying for a qualification

01What it is

This Qualifi Level 5 Extended Diploma focuses on cyber security. It includes study of threats and risks, incident management, and network security. The qualification also covers security strategy, laws, and policies relevant to the digital technology sector.

These are the units Qualifi Ltd registers against this qualification. It is a catalogue, not a syllabus. Which of them you take depends on the combination the qualification requires, and that is set by the awarding body rather than by us. Every unit here is regulated. Zavmo teaches towards them on your own work, and work done here is recognised as prior learning under the agreements we hold.

Zavmo is not an awarding body, is not an approved centre, and is not affiliated with Qualifi Ltd. It does the teaching and the mapping. Qualifi Ltd sets this qualification and awards it, and a qualified human assessor makes the assessment decision.

Free first step

Try a free Future Fluency lesson first

The free part is a Future Fluency lesson on using AI at work. It is not part of this qualification. Next, a free account. We build your plan for this qualification as you set up. Teaching towards this qualification begins when you subscribe.

No card · Nothing to commit to

02The units

What each unit actually teaches you to do

Communications and Incident Management Real unit · Qualifi Ltd
You'll understand the physical and human resources required to manage major cybersecurity incidents, applying Business Continuity Management principles. The unit also covers disaster recovery and crisis management in incident planning and response.

What you'll be able to do

  • Understand the physical and human resources required to effectively manage a major suspected cybersecurity incident.
  • Apply Business Continuity Management (BCM) principles to the planning and response phases of a major incident.
  • Understand how Disaster Recovery (DR) and Crisis Management are integrated into the response to a suspected major cyber-enabled incident.
  • Evaluate the potential impact of failing to adequately plan for crisis communications and incident response in the event of a major cybersecurity incident.
Cryptography Real unit · Qualifi Ltd
You'll develop a comprehensive understanding of cryptographic principles, including symmetric and asymmetric encryption, hashing algorithms, and digital signatures. The unit covers relevant standards, regulations, and the design of encryption plans for organisations.

What you'll be able to do

  • Understand key cryptographic principles and modes of operation, including symmetric and asymmetric encryption, hashing, and digital signatures.
  • Understand the standards, regulations, and laws that apply to business and government organisations in relation to encryption, such as GDPR, PCI DSS, and industry-specific regulations.
  • Design an encryption plan and courses of action for a given organisation, considering factors such as data sensitivity, compliance requirements, and business needs.
Cyber Security Threat and Risk Real unit · Qualifi Ltd
You'll gain an understanding of complex business cyber security threats and risks, including recent mega-breaches, malware, ransomware attacks, and the evolving tactics of malicious actors using customised intrusion tools.

What you'll be able to do

  • Understand complex business cyber security threats and risks, including their potential impact on organisations.
  • Understand recent mega-breaches, including the vulnerabilities exploited and the consequences for affected organisations.
  • Explain malware and ransomware attacks, including their methods of propagation and potential damage.
  • Understand how threats and malicious hackers are advancing, including their evolving techniques and targets.
  • Understand the development of customised intrusion tools, including their purpose and functionality.
Cyber Security Threats and Risks: Banking and Finance Real unit · Qualifi Ltd
This unit covers cyber security threats and risks affecting traditional and emerging financial services. You'll understand financial market architectures, payment systems, and the role of cryptocurrencies within financial services infrastructure.

What you'll be able to do

  • Understand the various threats and risks facing both traditional and emerging financial services.
  • Understand the architectural structures that underpin traditional financial markets.
  • Understand how payment systems are connected to the underlying financial services architecture.
  • Understand how cryptocurrencies are connected to the underlying financial services architecture.
Cyber Wars Real unit · Qualifi Ltd
It teaches you to understand nation-state involvement in cyber defence and offensive strategies, motivations behind state-linked cyber attacks, and the targeting of private sector industries and critical national infrastructure.

What you'll be able to do

  • Understand how nation-states are potentially engaged in cyber defence and offensive capability strategies.
  • Understand the motivations and causes behind nation-state-linked cyber attacks and data breaches.
  • Understand how private sector industries have been targeted by potentially state-sanctioned cyber-crime groups and/or armies.
  • Understand how Critical National Infrastructure (CNI) has been targeted by state-backed cyber-crime groups and/or armies.
Database Security and Computer Programming Real unit · Qualifi Ltd
This unit provides learners with knowledge of database security measures, including access controls, encryption, and auditing mechanisms. It also explores cloud-based storage security and the relationship between computer programming and hacking techniques.

What you'll be able to do

  • Understand the broad range of security measures required to protect databases from unauthorised access and data breaches.
  • Understand database categories of control, including access controls, encryption, and auditing mechanisms.
  • Understand the underpinning concepts of cloud-based storage solutions, including their security implications and best practices.
  • Understand the relationship between computer programming and computer hacking, including how programming skills can be used for both defensive and offensive purposes.
  • Understand the “interpreted” general-purpose programming language Python, including its syntax, data structures, and common libraries.
Digital Investigations and Forensics Real unit · Qualifi Ltd
You'll understand the core principles, legal and ethical considerations of digital investigations. The unit includes applying investigative tools at a strategic level and planning for the establishment and management of investigation and forensics teams.

What you'll be able to do

  • Understand the core principles of digital investigations, including legal and ethical considerations.
  • Apply different types of tools that support professional digital investigations at a strategic level.
  • Plan for the establishment and management of an investigation and forensics team.
  • Understand the critical importance of safeguarding evidential integrity throughout digital investigations.
Incident Response, Investigations and Forensics Real unit · Qualifi Ltd
This unit covers the role of incident response as a business function, including the operation of Computer Emergency Response Teams (CERTs) and aligned task forces for business continuity, disaster recovery, and crisis management. It also addresses investigation of major incidents.

What you'll be able to do

  • Understand the role and composite parts of Incident Response as a business function and how Computer Emergency Response Teams (CERTs) operate.
  • Understand how aligned task forces operate for Business Continuity, Disaster Recovery, and crisis management in the context of incident response.
  • Understand how major computer incidents are formally investigated, including evidence gathering and analysis.
  • Understand the relevant laws and guidance in relation to the conduct and planned structure of major incident investigations, ensuring compliance and best practice.
Network Security and Data Communications Real unit · Qualifi Ltd
This unit provides learners with an understanding of network communication between computer and digital devices, potential exploitation methods, and security prevention techniques. It covers network security, systems hardening, and key security and forensic concepts.

What you'll be able to do

  • Understand how computer and digital devices communicate with one another over a network.
  • Understand, at a strategic level, how computer networking, web applications, and software can be exploited by malicious actors.
  • Understand methods of security prevention and systems hardening techniques to mitigate potential exploits.
  • Understand key network security and systems resilience tools, terminology and models used in the industry.
Security Strategy: Laws, Policies and Implementation Real unit · Qualifi Ltd
You'll explore cyber security strategy, including strategic management, legislative and industry standards, and the implementation of security and risk management policies. The unit also considers future legal and technical developments in cyber security.

What you'll be able to do

  • Understand the concept of strategy and the strategic management of planning and buy-in processes in relation to cyber security.
  • Understand how legislation, formal industry standards, and training accreditation support and enhance cyber security practices.
  • Understand how to implement Plan, Do, Check, and Act (PDCA) security and risk management policies within an organisation.
  • Understand the future legal and technical environment and its potential impact on cyber security planning and digital risk management strategies.
  • Understand how to plan and design a security audit for a cyber network, including scope, methodology, and reporting.
Strategic Leadership Real unit · Qualifi Ltd
This unit explores the role of senior leaders in strategic leadership, focusing on establishing a security-conscious culture and championing information security initiatives. You'll evaluate management streams, performance monitoring mechanisms, and understand threat and risk identification in information security.

What you'll be able to do

  • Understand the role of senior leaders and strategic leadership in information security, including setting the tone from the top and championing security initiatives.
  • Evaluate the management streams and performance monitoring mechanisms that relate to information security, including by considering key performance indicators (KPIs) and metrics.
  • Understand how threat and risk identification and management is integrated into C-Suite considerations and governance, including risk appetite and tolerance.
  • Understand how data protection legislation impacts considerations of strategy-setting and strategic leadership, including data breach notification requirements and accountability.
03The standards

The national standards these units are built against

What the job actually needs, in the words employers and awarding bodies already use for the work itself.

  • Assist in Implementing Digital Forensic Processes

    Standard
  • Assist with digital forensic examinations under supervision

    Standard
  • Carry Out Intrusion Detection and Analysis

    Standard
  • Carry out digital forensic examination activities

    Standard
  • Contribute to Information Security Incident Investigation and Management Activities

    Standard
  • Contribute to digital forensic examination activities

    Standard
  • Deliver digital forensic services

    Standard
  • Develop and implement cryptographic methods

    Standard
  • Direct Digital Forensic Examination Activities

    Standard
  • Direct Security Architecture Development

    Standard
  • Direct information security architecture activities

    Standard
  • Direct information security governance activities

    Standard
  • Direct information security incident management and forensics

    Standard
  • Direct information security testing activities

    Standard
  • Identify Cyber Security Threats and Vulnerabilities

    Standard
  • Lead Forensic Examination

    Standard
  • Manage Intrusion Detection and Analysis

    Standard
  • Manage digital forensic activities

    Standard

Showing 18 of 22 standards these units map to.

04Where it leads

The jobs these credits are mapped to

A qualification is never a dead end here. Each of these is a job record this qualification is a mapped route into.

Showing 6 roles, drawn from 406 job records mapped to this qualification. Near-identical records are folded together, and each row says how many it stands for.

Where this can lead

International Security Incident Response Specialist

This work can lead to roles such as Lead Incident Responder or Staff Threat Hunter, and further on, Incident Response Manager or Principal Forensics Investigator.

See the whole journey
05The credits

The credits, and who awards them

Level 5 credits are regulated, and they are awarded by Qualifi Ltd rather than by Zavmo. They don’t vanish when a subscription ends or a website closes. They travel to any employer, and Zavmo keeps the map of what you have covered and what is next.

What you would be collecting

Communications and Incident ManagementCryptographyCyber Security Threat and RiskCyber Security Threats and Risks: Banking and FinanceCyber WarsDatabase Security and Computer ProgrammingDigital Investigations and ForensicsIncident Response, Investigations and Forensics

Each one is a real unit registered against this qualification.

How you’d practise it

You don’t watch this. You do it.

You are not assessed on remembering this. You are assessed on applying it, analysing it, evaluating it and producing something. So that is what the practice is: projects, role play and your own live cases, with a tutor in the room.

The Navigator The Navigator · your what-if tutor Illustration
The Navigator Your plan for “Security Strategy: Laws, Policies and Implementation” assumes the same two people are free in March. What have you seen that makes you slightly uneasy about that?
You One of them has been pulled onto the migration twice already. Probably fine.
The Navigator That is the thread worth pulling. Let us build the version where it happens a third time and find the move that works either way.
The same lesson on the real thing: the conversation in the middle, the thinking ladder on the left, and the criteria each answer is evidencing on the right.
  • Bring your own plan Create

    For “Security Strategy: Laws, Policies and Implementation” you bring the plan you are actually working on, not a case study. Zavmo pulls on the assumptions in it until the weak one shows.

  • Draft the real one Create

    You do “Cyber Security Threats and Risks: Banking and Finance” on a real document of your own. Zavmo works on the draft you have to send anyway, so the coursework and the job are the same piece of work.

  • Map a live decision Analyse

    “Database Security and Computer Programming” runs on a decision you are facing now. Zavmo maps it with you and shows what the second-order effect looks like before you find out the slow way.

  • Lead it Apply

    “Communications and Incident Management” is practised on the team you actually have. You talk through the call you are about to make, and Zavmo makes you say it the way you would say it to them.

What you leave holding

The standards this credential builds, in the shape the product keeps them

Nothing here is marked learned. There is no learner on a public page, so the map shows what the qualification covers rather than what anybody has done.

See Your Progress Grow Illustration
Qualifi Level 5 Extended Diploma in Cyber Security
  • Assist in Implementing Digital Forensic Processes
  • Assist with digital forensic examinations under supervision
  • Carry Out Intrusion Detection and Analysis
  • Carry out digital forensic examination activities
  • Contribute to Information Security Incident Investigation and Management Activities
  • Contribute to digital forensic examination activities
  • Deliver digital forensic services
  • Develop and implement cryptographic methods
This is your Mind Palace on learn.zavmo.ai. Every skill above comes from this role's own record, not an example borrowed from another job. A node lights up when you evidence it, and what you build stays yours between jobs. That is the part a course cannot do.

How you would learn this

One to one, on the work you already do

A tutor sets the task against your own job and marks the reasoning, at your pace. There is no cohort to fall behind.

A lesson from Communications and Incident Management, one of this qualification's own units.

Communications and Incident Management Level 5

Applied to your work in any of these jobs

Learners will understand the physical and human resources required to manage major cybersecurity incidents, applying Business Continuity Management principles. The unit also covers disaster recovery and crisis management in incident planning and response.

How the thinking builds
  1. 1 Remember
  2. 2 Understand
  3. 3 Apply
  4. 4 Analyse
  5. 5 Evaluate
  6. 6 Create
An illustration of a Zavmo lesson, built from this role’s own route. The unit, its objective and every criterion above are the awarding body’s own words, not an example.

It is £70 a month, billed monthly. Your free first module is Future Fluency, and you can cancel any time. Teaching towards this qualification begins when you subscribe.

Your Plan Illustration

Built for Qualifi Level 5 Extended Diploma in Cyber Security

11 units in this credential, in the order it lists them, awarded by Qualifi Ltd.

  1. Communications and Incident Management
  2. Cryptography
  3. Cyber Security Threat and Risk
  4. Cyber Security Threats and Risks: Banking and Finance
  5. Cyber Wars
  6. Database Security and Computer Programming

and 5 more in the full unit list below.

These are the real units of this credential, in its own order. Nothing here is marked done, because this plan has not been started by anyone yet. Yours would fill in as you go.

Learned on your own work, taught one-to-one.

Everything you just read, learned one-to-one on the job you already do. Your free first module is Future Fluency, so you can see how the teaching works before you pay for anything.

Build my plan, free

No card. See how this qualification maps onto your role and meet the tutors who’d teach it, free. The learning begins when you subscribe. It’s £70 a month, billed monthly. Cancel any time and billing stops.

The title, level, credits, guided learning hours and unit learning outcomes on this page are taken from the Ofqual Register of Regulated Qualifications. Contains public sector information licensed under the Open Government Licence v3.0. Where this data comes from.