Essential cookies
There are some cookies that we have to include in order for certain web pages to function. For this reason, they do not require your consent.
- knowledgecademy_cookie_consent 1 year 1 month 1 day Used to store the user's cookie consent preferences.
- knowledgecademy_session 2 hours Used to identify the user's browsing session.
- XSRF-TOKEN 2 hours Used to secure both the user and our website against cross-site request forgery attacks.

We use cookies

This website uses cookies in order to enhance the overall user experience.

Cybersecurity & Risk Management

IT Infrastructure, Cloud & Security

Cybersecurity & Risk Management

Cybersecurity & Risk Management explains how to protect systems, data and people from common threats. It starts with phishing, weak passwords and everyday vulnerabilities, then covers access control, patching and network defences. Later levels address incident response, security monitoring, risk assessment and the policies that shape an organisation's overall approach to security governance.

Levels: 4
Starting from: 275 credits

Choose a level

Each level is unlocked on its own

Level 1 / 4

Beginner

275 credits

What you will study: Phishing and social engineering, malware, weak and reused passwords, multi-factor authentication, software updates, safe browsing, protecting personal devices and reporting suspicious activity. Real-world examples show how common attacks actually unfold.
Who it is for: For everyday computer users and new IT staff who want to recognise common online threats and build simple habits that keep accounts and data safer. No security background is needed to begin.
What you will be able to do: You can spot typical phishing attempts, secure your own accounts and devices and explain basic security habits clearly to colleagues, friends and family members. Small daily habits can prevent the most frequent incidents.

Level 2 / 4

Intermediate

475 credits

What you will study: Access control and least privilege, patch management, firewalls, encryption at rest and in transit, secure configuration baselines, network segmentation and basic security logging. Each control is explained alongside the threats it is designed to stop.
Who it is for: For IT staff and developers taking on security duties who need practical controls to protect systems, networks and data from the most common attacks. It moves from awareness to hands-on protection.
What you will be able to do: You can apply core security controls to systems and networks, reduce the attack surface of an environment and check configurations against a secure baseline. Environments in your care will be noticeably harder to attack.

Level 3 / 4

Advanced

775 credits

What you will study: Security monitoring, log analysis, vulnerability scanning and prioritisation, incident response planning, containment and recovery steps, forensic basics and lessons-learned reviews after incidents. Scenario walkthroughs follow an incident from first alert to final recovery.
Who it is for: For security practitioners who must detect attacks early, respond effectively when something goes wrong and help the organisation recover quickly afterwards. It prepares you for the moments when defences are tested.
What you will be able to do: You can monitor for suspicious activity, prioritise vulnerabilities by risk, follow a structured incident response plan and lead a useful review once an incident is closed. Your organisation will respond faster and more calmly.

Level 4 / 4

Expert

1,075 credits

What you will study: Risk assessment methods, security frameworks and standards, writing security policies, compliance and audit preparation, third-party risk, security awareness strategy and reporting to leadership. Examples show how security priorities are weighed against business goals.
Who it is for: For security leaders and managers who set security direction, report risk to leadership and balance protection with cost and business needs. It suits people who set the direction of security work.
What you will be able to do: You can assess and prioritise organisational risk, build a practical security policy framework and communicate security posture clearly to executives and auditors. Security decisions will be clearly linked to business risk.

Levels are paid for with credits. Access details are emailed to you, typically within 24 hours, and if nothing arrives after 72 hours, please contact us.

About This Learning Material

Cybersecurity & Risk Management connects technical security measures with the business decisions behind them. It is useful for IT staff taking on security duties, for developers who want to build safer systems and for managers responsible for protecting information.

The Beginner level explains common threats such as phishing, malware and weak credentials, and the basic habits that reduce them. Intermediate covers access control, patch management, firewalls, encryption and secure configuration. Advanced focuses on detecting and responding to incidents, logging, vulnerability scanning and recovery planning. Expert examines risk assessment frameworks, security policies, compliance requirements and how to build a governance structure that balances protection, cost and business priorities over the long term.