UK
How you’d get it

How you’d get this certificate

  1. Zavmo teaches you. You learn the units one-to-one with an AI tutor, on your own work.
  2. You register with an approved centre. That is a college, training provider or employer SFJ Awards has approved to offer this qualification. Zavmo is not an approved centre, so you register with them, not with us.
  3. The centre assesses, and SFJ Awards awards. A qualified assessor at the centre judges your evidence, and the certificate comes from SFJ Awards.

More on studying for a qualification

01What it is

The Level 5 Award focuses on industrial cyber security within critical national infrastructure. It enables learners to develop skills in detecting, responding to, and recovering from complex cyber threats. This qualification is aimed at professionals working in public services who require specialist knowledge in this area.

These are the units SFJ Awards registers against this qualification. It is a catalogue, not a syllabus. Which of them you take depends on the combination the qualification requires, and that is set by the awarding body rather than by us. Every unit here is regulated. Zavmo teaches towards them on your own work, and work done here is recognised as prior learning under the agreements we hold.

Zavmo is not an awarding body, is not an approved centre, and is not affiliated with SFJ Awards. It does the teaching and the mapping. SFJ Awards sets this qualification and awards it, and a qualified human assessor makes the assessment decision.

Free first step

Try a free Future Fluency lesson first

The free part is a Future Fluency lesson on using AI at work. It is not part of this qualification. Next, a free account. We build your plan for this qualification as you set up. Teaching towards this qualification begins when you subscribe.

Try a free AI lesson

No card · Nothing to commit to

02The units

What each unit actually teaches you to do

Detecting Complex Cyber Threats to Critical National Infrastructure Real unit · SFJ Awards
This unit covers the identification and analysis of complex cyber threats targeting Critical National Infrastructure (CNI). You'll understand threat actors, attack methodologies, technical vulnerabilities, and be able to apply detection tools and techniques within a CNI environment.

What you'll be able to do

  • Understand complex threat actors, attack methodologies and indicators of compromise within Critical National Infrastructure (CNI)
  • Understand technical systems and vulnerabilities relevant to threat detection
  • Apply detection tools and techniques within a Critical National Infrastructure (CNI) environment
Recovering From Cyber Incidents Within Critical National Infrastructure Real unit · SFJ Awards
You'll explore post-incident recovery and continuous improvement processes within Critical National Infrastructure (CNI). The unit develops skills to apply organisational procedures for restoring systems and data, and to document lessons learned following cyber incidents.

What you'll be able to do

  • Understand post-incident recovery and improvement processes
  • Apply organisational recovery and improvement procedures within Critical National Infrastructure (CNI)
Responding to Complex Cyber Threats to Critical National Infrastructure Real unit · SFJ Awards
You'll understand the incident response process within Critical National Infrastructure (CNI) and apply cyber incident response procedures. The unit covers stakeholder roles, relevant policies, and practical containment, eradication, and recovery from cyber incidents.

What you'll be able to do

  • Understand the incident response process within Critical National Infrastructure (CNI)
  • Apply cyber incident response procedures within Critical National Infrastructure (CNI)
03The standards

The national standards these units are built against

What the job actually needs, in the words employers and awarding bodies already use for the work itself.

  • Carry Out Intrusion Detection and Analysis

    Standard

  • Contribute to Routine Threat Intelligence Tasks

    Standard

  • Respond to and recover from cyber security breaches

    Standard
04Where it leads

The jobs these credits are mapped to

A qualification is never a dead end here. Each of these is a job record this qualification is a mapped route into.

Showing 6 roles, drawn from 28 job records mapped to this qualification. Near-identical records are folded together, and each row says how many it stands for.

Where this can lead

Incident Response Manager

This role can lead to senior leadership positions such as Chief Information Security Officer, or to broader roles overseeing risk and governance. Some move into consultancy, advising other organisations on their security strategy.

See the whole journey
05The credits

The credits, and who awards them

Level 5 credits are regulated, and they are awarded by SFJ Awards rather than by Zavmo. They don’t vanish when a subscription ends or a website closes. They travel to any employer, and Zavmo keeps the map of what you have covered and what is next.

What you would be collecting

Detecting Complex Cyber Threats to Critical National InfrastructureRecovering From Cyber Incidents Within Critical National InfrastructureResponding to Complex Cyber Threats to Critical National Infrastructure

Each one is a real unit registered against this qualification.

How you’d practise it

You don’t watch this. You do it.

You are not assessed on remembering this. You are assessed on applying it, analysing it, evaluating it and producing something. So that is what the practice is: projects, role play and your own live cases, with a tutor in the room.

The Coach The Coach · your practice partner Illustration
The Coach Rather than work through “Detecting Complex Cyber Threats to Critical National Infrastructure” in the abstract, bring me the piece of it you are dealing with this week.
You I have got the write-up due Friday and I have not started it.
The Coach Then that is the lesson. Tell me what it has to say, and we will get the shape of it down before we worry about the words.
The same lesson on the real thing: the conversation in the middle, the thinking ladder on the left, and the criteria each answer is evidencing on the right.
  • Bring the real thing Apply

    “Detecting Complex Cyber Threats to Critical National Infrastructure” is taught against the work in front of you rather than a worked example. You bring what you are doing this week and it becomes the practice.

What you leave holding

The standards this credential builds, in the shape the product keeps them

Nothing here is marked learned. There is no learner on a public page, so the map shows what the qualification covers rather than what anybody has done.

See Your Progress Grow Illustration
SFJ Awards Level 5 Award in Industrial Cyber Security – Detect, Respond, Recover
  • Carry Out Intrusion Detection and Analysis
  • Contribute to Routine Threat Intelligence Tasks
  • Respond to and recover from cyber security breaches
This is your Mind Palace on learn.zavmo.ai. Every skill above comes from this role's own record, not an example borrowed from another job. A node lights up when you evidence it, and what you build stays yours between jobs. That is the part a course cannot do.

How you would learn this

One to one, on the work you already do

A tutor sets the task against your own job and marks the reasoning, at your pace. There is no cohort to fall behind.

A lesson from Detecting Complex Cyber Threats to Critical National Infrastructure, one of this qualification's own units.

Detecting Complex Cyber Threats to Critical National Infrastructure Level 5

Applied to your work in any of these jobs

Which job do you mean?
Incident Response ManagerLead Incident ResponderSenior Incident Response EngineerIncident Response Engineer ManagerAssociate Incident Responder / SOC AnalystSenior SOC Analyst / Incident Responder

This unit covers the identification and analysis of complex cyber threats targeting Critical National Infrastructure (CNI). Learners will understand threat actors, attack methodologies, technical vulnerabilities, and be able to apply detection tools and techniques within a CNI environment.

How the thinking builds
  1. 1 Remember
  2. 2 Understand
  3. 3 Apply
  4. 4 Analyse
  5. 5 Evaluate
  6. 6 Create
An illustration of a Zavmo lesson, built from this role’s own route. The unit, its objective and every criterion above are the awarding body’s own words, not an example.

It is £70 a month, billed monthly. Your free first module is Future Fluency, and you can cancel any time. Teaching towards this qualification begins when you subscribe.

Start learning, free
Your Plan Illustration

Built for SFJ Awards Level 5 Award in Industrial Cyber Security – Detect, Respond, Recover

3 units in this credential, in the order it lists them, awarded by SFJ Awards.

  1. Detecting Complex Cyber Threats to Critical National Infrastructure
  2. Recovering From Cyber Incidents Within Critical National Infrastructure
  3. Responding to Complex Cyber Threats to Critical National Infrastructure
These are the real units of this credential, in its own order. Nothing here is marked done, because this plan has not been started by anyone yet. Yours would fill in as you go.

Free tools

Want a read on where you stand?

Three free tools, no account needed. Each one ends with a role, a level and a way in.

Read the Zavmo manifesto to understand how you will be taught Meet your tutors

Or try another one

Learned on your own work, taught one-to-one.

Everything you just read, learned one-to-one on the job you already do. Your free first module is Future Fluency, so you can see how the teaching works before you pay for anything.

Build my plan, free

No card. See how this qualification maps onto your role and meet the tutors who’d teach it, free. The learning begins when you subscribe. It’s £70 a month, billed monthly. Cancel any time and billing stops.

The title, level, credits, guided learning hours and unit learning outcomes on this page are taken from the Ofqual Register of Regulated Qualifications. Contains public sector information licensed under the Open Government Licence v3.0. Where this data comes from.