Cybersecurity Analyst Professional Programme

Give learners a strong understanding of computers, networks, operating systems, cybersecurity principles, threats, and security terminology.

Module 1: Introduction to Cybersecurity

• 1.1 what is cybersecurity, information security vs cybersecurity, the CIA Triad (confidentiality, integrity, availability), authentication, authorization, accountability, non-repudiation, security controls (physical, technical, administrative), cybersecurity career paths: Analyst, SOC Analyst, Security Engineer, Threat Intelligence Analyst, Incident Response Analyst, Vulnerability Analyst, Digital Forensics Analyst, Penetration Tester, Cloud Security Analyst, GRC Analyst

Module 2: Computer & Operating System Fundamentals

• 2.1 Windows: architecture, users and groups, file systems, processes, services, Event Viewer, Registry, PowerShell fundamentals, Linux: architecture, file system, users and permissions, processes, services, SSH, logs, Bash fundamentals

Module 3: Networking Fundamentals

• 3.1 network architecture, LAN/WAN, the OSI model, TCP/IP, IPv4, IPv6 introduction, MAC addresses, ARP, DNS, DHCP, HTTP/HTTPS, FTP, SSH, SMTP, TCP vs UDP, ports, firewalls, routers, switches, VPNs

Module 4: Cyber Threat Landscape

• 4.1 malware: viruses, worms, trojans, ransomware, spyware, phishing and social engineering, credential attacks, insider threats, botnets, denial-of-service attacks, web attacks, supply-chain threats

Module 5: Security Fundamentals

• 5.1 password security, MFA, access control, least privilege, secure configuration, patch management, backups, encryption, hashing, digital certificates, security policies

Capstone: Cybersecurity Home Lab

• 6.1 Learners build their own isolated cybersecurity laboratory (Windows VM, Linux VM, security testing VM, virtual network, basic firewall configuration) and deliver a network diagram, security configuration, user accounts, firewall rules, security checklist, and lab documentation.

Move from understanding cybersecurity to actually monitoring and analysing security events.

Module 1: Security Monitoring

• 1.1 security events and logs: event, authentication, network, application, and system logs, log collection, log analysis

Module 2: Identity & Access Security

• 2.1 authentication, authorization, MFA, RBAC, privileged accounts, account lifecycle, password policies, Active Directory and Group Policy fundamentals

Module 3: Network Security

• 3.1 firewalls, IDS/IPS, network segmentation, VPN, proxy, secure DNS, network monitoring

Module 4: Vulnerability Management

• 4.1 vulnerability vs threat vs risk, CVE, CVSS, vulnerability scanning, asset discovery, patch management, risk prioritisation, remediation, practical tools: Nmap, OpenVAS/Greenbone, Wireshark

Module 5: Cryptography

• 5.1 symmetric and asymmetric encryption, hashing, digital signatures, PKI, TLS/SSL, certificates

Module 6: Security Frameworks

• 6.1 NIST Cybersecurity Framework, CIS Controls, ISO 27001 concepts, MITRE ATT&CK, the Cyber Kill Chain

Capstone: Vulnerability Assessment & Security Hardening Project

• 7.1 Learners receive an intentionally vulnerable lab environment and must discover assets, identify and classify vulnerabilities, assess risk, recommend remediation, apply security hardening, re-test the environment, and produce a professional security report.

Teach learners how analysts identify, understand, investigate, and contextualise threats.

Module 1: Threat Intelligence

• 1.1 strategic, tactical, operational, and technical intelligence, indicators of compromise and indicators of attack, TTPs, threat actors, campaigns

Module 2: MITRE ATT&CK

• 2.1 tactics, techniques, sub-techniques, procedures, attack mapping, detection mapping

Module 3: Malware Analysis Fundamentals

• 3.1 malware lifecycle, static and dynamic analysis, file hashes, strings, metadata, PE files, sandbox and behavioural analysis (safe lab environments only)

Module 4: Network Traffic Analysis

• 4.1 using Wireshark for packet capture, TCP streams, DNS/HTTP/TLS traffic analysis, suspicious connections, beaconing, network anomalies

Module 5: Phishing Analysis

• 5.1 email headers, sender authentication (SPF, DKIM, DMARC), URLs and attachments, phishing indicators, business email compromise

Module 6: Threat Intelligence Platforms

• 6.1 STIX, TAXII, OpenCTI, MISP, open-source intelligence, threat feeds

Capstone: Threat Intelligence Investigation

• 7.1 Learners receive a simulated threat campaign and must analyse indicators, investigate domains/IPs/hashes, identify TTPs, map activity to MITRE ATT&CK, create an intelligence report and IOCs, develop detection recommendations, and produce a threat intelligence briefing.