Cybersecurity & AI

You build a clear view of where an organisation is exposed, mapping information assets, network architecture and existing controls, and delivering a first security assessment you can act on.

You learn which threat actors realistically target different sectors and how, so phishing and social engineering get caught earlier and can be explained in terms the business understands.

You run and score your own vulnerability scans, turning raw findings into a prioritised remediation plan that says what to fix first and why. The module also covers AI and LLM-specific risks.

You bring access creep and unmanaged assets under control by configuring role-based access, enforcing MFA, classifying data, and learning to spot insider threat patterns in logs.

You learn to encrypt data properly, manage keys and certificates, and verify integrity - closing the gaps that expired certificates and weak TLS settings tend to leave open.

You harden servers against CIS benchmarks, configure firewalls and intrusion detection, and deploy a working SIEM, so security events get seen in real time rather than discovered later.

You design segmented, Zero Trust network architectures and build disaster recovery plans with realistic RTO and RPO targets, reducing how much damage a single incident can do.

You build a rehearsed response capability by running tabletop exercises, capturing forensic evidence, reconstructing timelines, and reporting to both technical and executive audiences.

Compliance work becomes routine rather than reactive as you build quantified risk registers, map policies to major global compliance frameworks (GDPR, ISO 27001, NIST, SOC 2), assess vendors, and run phishing awareness campaigns with measurable results.

AI support becomes part of daily security work as you use AI-enabled tools - chatbots, personal assistants, IDE, browser and CLI plug-ins, MCP servers - to speed up vulnerability analysis, threat modelling, anomaly detection and incident management, while learning how AI enhances attack vectors such as deepfakes, automated reconnaissance and automated attack generation.

You deliver an integrated security assessment of a real environment and present a professional portfolio, while completing timed Security+ practice exams with targeted revision.