Qualification Structure

The Qualifi Level 4 and Level 5 Combined Diploma in Cyber Security is a vocational qualification accredited by Qualifi and designed to develop knowledge and skills in cyber security, information security and related technical and management areas. The qualification has a Total Qualification Time (TQT) of 2400 hours and 1320 Guided Learning Hours (GLH), with 240 credits.

Assessment for the Qualifi Level 4 and Level 5 Combined Diploma in Cyber Security is assignment-based. Learner work is assessed in accordance with Qualifi assessment and quality assurance requirements to ensure that learners demonstrate the required knowledge, understanding and application of cyber security principles and practices.

To achieve the qualification, learners must successfully complete all mandatory units.

Core Study Units

Unit 1: Cyber Security Threat and Risk

• Analyse major cyber security breaches and the attack methods that have affected organisations.
• Examine the potential business impact of actual or suspected cyber security breaches.
• Apply recognised threat and risk management concepts and models to cyber security scenarios.
• Explain malware, ransomware and other forms of intentional malicious cyber attack.
• Examine the development and use of customised intrusion tools and analyse how such tools can contribute to major data breaches.

Unit 2: Network Security and Data Communications

• Analyse vulnerabilities within network and online environments.
• Explain how security thinking and security tools can support network environments.
• Evaluate the relationship between network architecture and security engineering.
• Evaluate internal network risks and exposure and assess physical and procedural defences against malicious intrusion.
• Explain how network security concepts, tools and resilience models can be applied within large and distributed organisations.
• Assess how an integrated approach to network security and systems resilience can be developed and embedded.

Unit 3: Database Security and Computer Programming

• Explain security risks associated with database systems and assess information security controls used to protect databases.
• Explain database terminology and the main categories of database security controls.
• Explore database tools available to data owners, custodians, incident responders and investigators.
• Explain different programming languages and analyse the relationship between programming capabilities and computer hacking.
• Investigate the use of Python by both legitimate security professionals and malicious hackers.

Unit 4: Incident Response, Investigations and Forensics

• Explain the people, structures, processes and tools involved in computer incident response.
• Discuss the roles and responsibilities within a Computer Emergency Response Team (CERT).
• Explain Business Continuity, Disaster Recovery and Crisis Management and analyse the standards and concepts supporting them.
• Explain the processes, personnel and tools required for structured major incident investigations.
• Analyse how evidence is contained, processed, assessed and used during cyber-related investigations.
• Examine the relevant laws and professional practices governing planned computer incident investigations.

Unit 5: Security Strategy: Laws, Policies and Implementation

• Assess the value of strategic management and planning within information security and cyber-enabled business environments.
• Evaluate legislation and recognised industry standards that influence cyber security planning.
• Assess relevant cyber security training and accreditation frameworks.
• Evaluate how security and risk management policies can be designed, implemented, monitored and continuously improved.
• Investigate national and international approaches to information security.
• Discuss relevant national and international regulations and standards affecting cyber security.
• Design security plans that take account of the relevant legal and political environment.

Unit 6: Cryptography

• Define cryptography and explain its application in information security.
• Explain symmetric and asymmetric cryptographic approaches.
• Assess how cryptographic methods and standards support secure communications across cyber-enabled networks and devices.
• Explain relevant standards, regulations and laws governing encryption and assess the consequences of non-compliance.
• Explain methods used to attack encrypted information and assess additional encryption techniques.
• Explain key escrow and recovery principles and the importance of robust encryption arrangements.
• Evaluate existing organisational encryption arrangements.
• Design an appropriate encryption plan and recommended actions for an organisation.

Unit 7: Digital Investigations and Forensics

• Explain the core principles and lifecycle of digital investigations.
• Explain how digital investigations are organised and managed.
• Analyse different tools used to support digital investigations and select appropriate tools for specific investigative situations.
• Explain the skills required for digital investigation and forensic activities.
• Explain how geographically distributed investigation and forensic teams can be formed and integrated.
• Develop a plan for establishing an investigation and forensics team.
• Explain how evidence can be retrieved from mobile and Internet of Things devices.
• Analyse methods for safeguarding evidential integrity and assess how evidence is stored and presented within legal environments.

Unit 8: Communications and Incident Management

• Explain the site, staffing and organisational arrangements required to manage major suspected cyber security incidents.
• Assess how Business Continuity Management can be integrated into cyber incident planning and response.
• Explain the people, assets and processes required within a Business Continuity Plan.
• Assess how Disaster Recovery and Crisis Management strategies can be integrated into major cyber incidents.
• Explain the components of effective Disaster Recovery and Crisis Management plans.
• Evaluate lessons from major cyber breaches and organisational shutdowns.
• Analyse communications approaches and failures associated with significant IT-related business disruption.
• Justify recommendations that support a more cyber-resilient organisational approach.

Unit 9: Strategic Leadership

• Explain the roles and responsibilities of senior leaders within technology-sector environments.
• Assess how strategic leadership and goal-setting can contribute to stronger information security cultures.
• Explain the importance of integrating management and operational programmes to support performance and cyber resilience.
• Analyse performance monitoring mechanisms used to protect information security.
• Assess the influence of cultural and diversity-related factors on management and performance monitoring.
• Evaluate how threat identification and risk management integrate with corporate strategy, governance and organisational responsibilities.
• Explain the consequences of ineffective senior-level understanding and direction in cyber security governance.
• Assess the importance of business ethics and leadership in organisational values and ICT environments.
• Evaluate the impact of major data protection legislation on strategic decision-making.
• Assess the consequences of non-compliance with applicable data protection

Optional Units

Unit 10: Cyber Security Threats and Risks: Banking and Finance

• Analyse cyber threats and risks affecting traditional banking, financial services and emerging financial markets.
• Explain how financial supply chains operate within medium and large financial organisations.
• Discuss the relationship between financial market architecture and cyber security planning.
• Assess vulnerabilities and good industry practices associated with payment systems.
• Apply PCI DSS principles to an appropriate organisational or local context.
• Evaluate emerging cyber threats associated with cryptocurrency-related financial attacks.

Unit 11: Cyber Wars

• Explain geopolitics and state-sponsored or state-sanctioned activity within information security.
• Assess risks to businesses arising from emerging nation-state cyber warfare capabilities.
• Explain the challenges involved in attributing cyber attacks to state-sponsored activity.
• Analyse how plausible deniability can influence nation-state cyber operations.
• Assess sectors and types of businesses that may be vulnerable to state-linked cyber activity.
• Analyse the potential effects of cyber warfare on businesses and Critical National Infrastructure.
• Evaluate appropriate business security and resilience measures in response to nation-state cyber threats.

Who Is This Qualification For?

The Qualifi Level 4 and Level 5 Combined Diploma in Cyber Security is designed for a broad range of learners seeking to develop advanced technical, analytical and strategic capabilities in cyber security and information security. It is particularly relevant to learners aiming to progress from foundational IT and security knowledge into professional and management-focused cyber security roles.

• Aspiring Cyber Security Professionals – Learner seeking structured knowledge of cyber threats, network security, incident response, digital forensics and information protection.
• IT and Networking Professionals – Learner working in IT infrastructure, networking or systems administration who wants to strengthen cyber security expertise.
• Information Security Professionals – Learner seeking to develop capabilities in security risk, policies, governance, cryptography and organisational security.
• Cyber Security Analysts and Practitioners – Learner looking to broaden practical understanding of threat assessment, security incidents, investigations and digital forensics.
• IT Managers and Security Managers – Learner responsible for technology, information security or organisational risk who needs stronger strategic and leadership knowledge.
• Risk and Compliance Professionals – Learner involved in cyber risk management, regulatory requirements, security policies, governance or organisational resilience.
• Career Changers – Learner with relevant IT, computing or technical experience seeking a structured pathway into the cyber security profession.
• Learners Progressing to Higher Education – Learner seeking a substantial Level 4 and Level 5 qualification that can support progression towards relevant higher-level study, subject to the entry requirements of the receiving institution.

Overall, the qualification supports learners who want to combine technical cyber security knowledge with risk management, incident management, digital investigation, strategic leadership and organisational resilience for progression within the evolving cyber security sector.

Career Opportunities

The Qualifi Level 4 and Level 5 Combined Diploma in Cyber Security provides learners with comprehensive knowledge of core and advanced cyber security principles, practices and technologies. The qualification develops understanding of cyber security threats and risks, network security, database security, programming, cryptography, incident response, digital forensics, security strategy and strategic leadership, helping learners build the technical, analytical and management skills required for progression in the cyber security field. It is suitable for learners in the UK and internationally seeking to develop professional cyber security capabilities and progress to higher-level qualifications, further academic study or related career pathways.

Future Progression

The Qualifi Level 4 and Level 5 Combined Diploma in Cyber Security provides learners with a structured pathway for further academic study and professional development in the cyber security and information security sectors. The qualification develops knowledge of cyber security threats and risks, network security, database security, programming, incident response, digital forensics, cryptography, security strategy, communications, and strategic leadership. These areas provide a broad foundation relevant to IT security, information assurance, risk management, digital investigations, and organisational resilience.

Academically, learners may progress to relevant Level 6 qualifications, degree-level study, or other higher-level programmes in cyber security, information security, computing, digital forensics, or related disciplines, subject to the entry requirements of the receiving institution. The combined Level 4 and Level 5 pathway can therefore support continued academic and professional development in technology and security-related fields.

Professionally, this qualification can support progression towards roles such as Cyber Security Analyst, Information Security Analyst, Network Security Analyst, Security Operations Centre Analyst, Incident Response Analyst, Digital Forensics Analyst, Cyber Risk Analyst, Information Security Officer, Cyber Security Consultant, and Security Administrator, depending on the learner’s experience, technical capabilities, and employer requirements. The knowledge developed through the qualification provides a foundation for analysing cyber threats, assessing security risks, responding to incidents, protecting information assets, investigating digital evidence, and contributing to organisational cyber security strategies.