UK
How you’d get it

How you’d get this certificate

  1. Zavmo teaches you. You learn the units one-to-one with an AI tutor, on your own work.
  2. You register with an approved centre. That is a college, training provider or employer NCFE has approved to offer this qualification. Zavmo is not an approved centre, so you register with them, not with us.
  3. The centre assesses, and NCFE awards. A qualified assessor at the centre judges your evidence, and the certificate comes from NCFE.

More on studying for a qualification

01What it is

This qualification is designed to provide learners with the knowledge, skills and behaviours (KSBs) relevant to developing competence in cyber security. This qualification will provide employers with reliable evidence of a learner’s attainment against occupational standard KSBs that form the minimum requirements for entry into occupation.

These are the units NCFE registers against this qualification. It is a catalogue, not a syllabus. Which of them you take depends on the combination the qualification requires, and that is set by the awarding body rather than by us. Every unit here is regulated. Zavmo teaches towards them on your own work, and work done here is recognised as prior learning under the agreements we hold.

Zavmo is not an awarding body, is not an approved centre, and is not affiliated with NCFE. It does the teaching and the mapping. NCFE sets this qualification and awards it, and a qualified human assessor makes the assessment decision.

Free first step

Try a free Future Fluency lesson first

The free part is a Future Fluency lesson on using AI at work. It is not part of this qualification. Next, a free account. We build your plan for this qualification as you set up. Teaching towards this qualification begins when you subscribe.

Try a free AI lesson

No card · Nothing to commit to

02The units

What each unit actually teaches you to do

Cyber security concepts Real unit · NCFE
This unit provides learners with an understanding of key cyber security concepts, including the CIA triad, IAAA principles, and core terminology. You'll explore effective cyber security culture and secure infrastructure and cloud environments.

What you'll be able to do

  • Understand the key concepts within cyber security
  • Understand effective cyber security culture
  • Understand secure infrastructure and cloud environments
Cyber security measures Real unit · NCFE
You'll understand service desk delivery for resolving security issues, including escalation procedures and communication. The unit covers maintaining and installing cyber security controls, cryptography, digital certificates, and modifying access controls.

What you'll be able to do

  • Understand service desk delivery
  • Understand, maintain and install cyber security controls
  • Understand cryptography and digital certificates
  • Understand and modify access controls
Cyber security threats, vulnerabilities and risks Real unit · NCFE
You'll study cyber security threats, vulnerabilities, and risks, including intelligence gathering and recognising suspicious activities. The unit covers evolving cyber security issues and maintaining digital information systems securely.

What you'll be able to do

  • Understand cyber security threats and perform intelligence gathering
  • Understand suspicious activities and potential breaches
  • Understand evolving cyber security issues
  • Understand and maintain digital information systems
Incident response and disaster recovery Real unit · NCFE
You'll develop knowledge of incident response and disaster recovery processes. The unit includes creating incident documentation, monitoring security events, and applying prevention and recovery strategies following cyber security incidents.

What you'll be able to do

  • Understand and create incident response documentation
  • Understand and create cyber security incident information documentation
  • Understand and monitor systems to identify information security events
  • Understand disaster prevention and recovery methods to support continuity of service planning
Legislation and governance Real unit · NCFE
This unit provides learners with knowledge of information security governance, cyber security policies, and relevant legislation. You'll explore ethical considerations, compliance requirements, and principles of cyber security auditing within organisations.

What you'll be able to do

  • Understand information security governance
  • Understand and review cyber security policies
  • Understand knowledge of legislation relating to cyber security
  • Understand ethical considerations and codes of conduct
  • Understand cyber security policies and compliance
  • Understand cyber security auditing and perform compliance checks
Professional development in cyber security Real unit · NCFE
This unit covers the impact of digital transformation on cyber security occupations and regulatory requirements. You'll develop skills in identifying learning techniques, understanding multidisciplinary teamwork, and applying communication skills to share information within cyber security contexts.

What you'll be able to do

  • Understand digital transformation
  • Understand cyber security occupations and regulatory requirements
  • Understand learning techniques and sources of knowledge and review own development needs
  • Understand multidisciplinary teams and apply communication skills to share information
  • Understand independent working, time management and taking stakeholder engagement
Risk and vulnerability assessment Real unit · NCFE
This unit covers cyber security vulnerabilities and risk categorisation for escalation. You'll evaluate vulnerability assessments and understand computer forensics principles to protect organisational information systems.

What you'll be able to do

  • Understand cyber security vulnerabilities
  • Understand and categorise cyber security risks for escalation
  • Understand and evaluate vulnerability assessments
  • Understand computer forensics
03The standards

The national standards these units are built against

What the job actually needs, in the words employers and awarding bodies already use for the work itself.

  • Assist in Implementing Vulnerability Assessment Processes

    Standard

  • Assist with digital forensic examinations under supervision

    Standard

  • Carry out information security intrusion detection activities

    Standard

  • Carry out information security related business resilience activities

    Standard

  • Carry out information security vulnerability assessments

    Standard

  • Carry out threat intelligence assessments

    Standard

  • Contribute to Information Security Incident Investigation and Management Activities

    Standard

  • Contribute to information security governance activities

    Standard

  • Contribute to information security intrusion detection and analysis activities

    Standard

  • Contribute to information security testing activities

    Standard

  • Direct Information Security Governance: Establish and Maintain

    Standard

  • Direct information security governance activities

    Standard

  • Direct information security incident management and forensics

    Standard

  • Directing Information Risk Assessment and Management

    Standard

  • Establish and Maintain Information Systems Security Governance

    Standard

  • Identify Cyber Security Threats and Vulnerabilities

    Standard

  • Implement Information Security Governance and Standards

    Standard

  • Maintain knowledge and understanding of legislation, regulation and codes of practice relevant to Technical Surveillance Counter Measures

    Standard

Showing 18 of 29 standards these units map to.

04Where it leads

The jobs these credits are mapped to

A qualification is never a dead end here. Each of these is a job record this qualification is a mapped route into.

Showing 6 roles, drawn from 208 job records mapped to this qualification. Near-identical records are folded together, and each row says how many it stands for.

Where this can lead

International Security Incident Response Specialist

This work can lead to roles such as Lead Incident Responder or Staff Threat Hunter, and further on, Incident Response Manager or Principal Forensics Investigator.

See the whole journey
05The credits

The credits, and who awards them

Level 3 credits are regulated, and they are awarded by NCFE rather than by Zavmo. They don’t vanish when a subscription ends or a website closes. They travel to any employer, and Zavmo keeps the map of what you have covered and what is next.

What you would be collecting

Cyber security conceptsCyber security measuresCyber security threats, vulnerabilities and risksIncident response and disaster recoveryLegislation and governanceProfessional development in cyber securityRisk and vulnerability assessment

Each one is a real unit registered against this qualification.

How you’d practise it

You don’t watch this. You do it.

You are not assessed on remembering this. You are assessed on applying it, analysing it, evaluating it and producing something. So that is what the practice is: projects, role play and your own live cases, with a tutor in the room.

The Coach The Coach · your practice partner Illustration
The Coach Rather than work through “Cyber security concepts” in the abstract, bring me the piece of it you are dealing with this week.
You I have got the write-up due Friday and I have not started it.
The Coach Then that is the lesson. Tell me what it has to say, and we will get the shape of it down before we worry about the words.
The same lesson on the real thing: the conversation in the middle, the thinking ladder on the left, and the criteria each answer is evidencing on the right.
  • Bring the real thing Apply

    “Cyber security concepts” is taught against the work in front of you rather than a worked example. You bring what you are doing this week and it becomes the practice.

What you leave holding

The standards this credential builds, in the shape the product keeps them

Nothing here is marked learned. There is no learner on a public page, so the map shows what the qualification covers rather than what anybody has done.

See Your Progress Grow Illustration
NCFE Level 3 Technical Occupational Entry in Cyber Security (Diploma)
  • Assist in Implementing Vulnerability Assessment Processes
  • Assist with digital forensic examinations under supervision
  • Carry out information security intrusion detection activities
  • Carry out information security related business resilience activities
  • Carry out information security vulnerability assessments
  • Carry out threat intelligence assessments
  • Contribute to Information Security Incident Investigation and Management Activities
  • Contribute to information security governance activities
This is your Mind Palace on learn.zavmo.ai. Every skill above comes from this role's own record, not an example borrowed from another job. A node lights up when you evidence it, and what you build stays yours between jobs. That is the part a course cannot do.

How you would learn this

One to one, on the work you already do

A tutor sets the task against your own job and marks the reasoning, at your pace. There is no cohort to fall behind.

A lesson from Cyber security concepts, one of this qualification's own units.

Cyber security concepts Level 3

Applied to your work in any of these jobs

Which job do you mean?
International Security Incident Response SpecialistIT Security AssistantAssociate Incident Response EngineerSenior International Security Incident Response SpecialistAssociate Network Security AdministratorCybersecurity Specialist

This unit provides learners with an understanding of key cyber security concepts, including the CIA triad, IAAA principles, and core terminology. Learners will explore effective cyber security culture and secure infrastructure and cloud environments.

How the thinking builds
  1. 1 Remember
  2. 2 Understand
  3. 3 Apply
  4. 4 Analyse
  5. 5 Evaluate
  6. 6 Create
An illustration of a Zavmo lesson, built from this role’s own route. The unit, its objective and every criterion above are the awarding body’s own words, not an example.

It is £70 a month, billed monthly. Your free first module is Future Fluency, and you can cancel any time. Teaching towards this qualification begins when you subscribe.

Start learning, free
Your Plan Illustration

Built for NCFE Level 3 Technical Occupational Entry in Cyber Security (Diploma)

7 units in this credential, in the order it lists them, awarded by NCFE.

  1. Cyber security concepts
  2. Cyber security measures
  3. Cyber security threats, vulnerabilities and risks
  4. Incident response and disaster recovery
  5. Legislation and governance
  6. Professional development in cyber security

and 1 more in the full unit list below.

These are the real units of this credential, in its own order. Nothing here is marked done, because this plan has not been started by anyone yet. Yours would fill in as you go.

Free tools

Want a read on where you stand?

Three free tools, no account needed. Each one ends with a role, a level and a way in.

Read the Zavmo manifesto to understand how you will be taught Meet your tutors

Or try another one

Learned on your own work, taught one-to-one.

Everything you just read, learned one-to-one on the job you already do. Your free first module is Future Fluency, so you can see how the teaching works before you pay for anything.

Build my plan, free

No card. See how this qualification maps onto your role and meet the tutors who’d teach it, free. The learning begins when you subscribe. It’s £70 a month, billed monthly. Cancel any time and billing stops.

The title, level, credits, guided learning hours and unit learning outcomes on this page are taken from the Ofqual Register of Regulated Qualifications. Contains public sector information licensed under the Open Government Licence v3.0. Where this data comes from.