Overview
CONTINUING PROFESSIONAL DEVELOPMENT · ENGLAND AND WALES Cyber Security Essentials A practitioner-level refresher on threat, law, controls and incident response — recognition, escalation and referral for people who already work with organisational information. ELEVEN MODULES · 20-QUESTION KNOWLEDGE CHECK · …
Course Details
Cyber Security Essentials
A practitioner-level refresher on threat, law, controls and incident response — recognition, escalation and referral for people who already work with organisational information.
PPT Deck
Audio Podcast
Audio Quiz
Infographic
Overview
Cyber Security Essentials is a practitioner-level refresher, not an introduction. It assumes you already work in a role that touches organisational information — client records, payments, staff data, case files, contracts — and that you have a reporting route available to you when something looks wrong. It builds the judgement that sits between noticing something and escalating it: what the threat actually looks like from an ordinary desk, what the law in England and Wales requires of your organisation, which controls do the most work, and what to do in the first thirty minutes of an incident.
The material is deliberately pitched at recognition, response, escalation and referral. It contains no procedural or method-level detail on how attacks are carried out, and it does not teach system testing — the practitioner’s job is to notice early and report accurately, and the technical response belongs with people whose role it is. Eleven modules run in the order they build, each closing with an Apply and Reflect page; a twenty-question knowledge check follows, with a full answer key and a rationale for every answer.
Who this course is for
It is not a first introduction to computers or office IT, and not a technical security qualification — someone with no working context to apply it to will get little from it.
Operational, administrative and client-facing staff whose daily work involves organisational or personal data
Team leaders and line managers who will be told first when a colleague thinks they have made a mistake
People holding a named information governance, records or incident reporting responsibility alongside another role
Finance, HR, legal, care and education practitioners exposed to invoice fraud, impersonation and special category data
Trustees, directors and managers who need enough grounding to ask their IT function useful questions
Learning outcomes
On completion of the eleven modules and the knowledge check, a learner should be able to:
Describe the current scale and shape of cyber threat to UK organisations, citing dated official statistics rather than impressions.
Identify which of the main statutes and regulations in force in England and Wales apply to a given situation, and what each requires in practice.
Explain the five Cyber Essentials technical controls, the April 2026 scheme update, and how the Cyber Governance Code of Practice frames board responsibility.
Apply access, authentication and password practice that reflects current NCSC guidance rather than superseded convention.
Recognise the pressure techniques common to phishing, vishing, smishing and mandate fraud, and apply a verification routine under time pressure.
Recognise the early signs of a malware or ransomware incident, escalate correctly, and state the legal position on ransom payments as at August 2026.
Decide whether an incident is a reportable personal data breach, and identify who must be told, by when, and by whom.
Apply secure configuration and update discipline to the devices, networks and cloud services you actually use.
Ask proportionate assurance questions of a supplier and respond appropriately when a supplier reports a breach to you.
Report an incident internally and externally through the correct routes and within the right timescales, and contribute to a post-incident review.
Build a sustainable routine for keeping your own cyber security knowledge current, and use generative AI tools without creating new exposure.
Career path
Course structure
The UK Cyber Threat Landscape
Law and Regulation in England and Wales
Governance, Risk and the Cyber Essentials Baseline
Identity, Access and Authentication
Phishing, Social Engineering and Fraud
Malware, Ransomware and Extortion
Data Protection and Secure Handling
Devices, Networks, Cloud and Remote Working
Supply Chain and Third-Party Risk
Incident Response, Reporting and Recovery
Security Culture, AI Risk and Keeping Current
Plus a 20-question knowledge check with a full answer key and a rationale for every answer.
Frequently asked questions
Q. Is this a qualification, or a licence to practise?
No. It is CPD. Completing it does not certify you, license you, or make your organisation compliant with any statute or standard.
Q. Does it award CPD points or hours?
The delivering provider decides that. No point value, hour count or awarding body is claimed anywhere in this pack.
Q. Does it make my organisation compliant with UK GDPR, or get us Cyber Essentials?
No. Cyber Essentials is a separate assessed certification via IASME; UK GDPR compliance depends on what your organisation actually does.
Q. I already work in IT or security — is there anything here for me?
Partly. The technical content is pitched below specialist level; the legal, reporting and governance material is more likely to be new.
Q. Will it teach me how to test systems or perform attacks?
No. It contains no procedural or method-level detail on attacks. Unauthorised access is a criminal offence under the Computer Misuse Act 1990 regardless of intent.
Q. Is the law in this course current?
Stated as at August 2026 for England and Wales. Two items were still in motion at the time of writing and are flagged as such — re-check before delivery.
Q. Does it cover Scotland and Northern Ireland?
Only partially. Some statutes apply UK-wide, but reporting routes and sector regulation differ — treat the legal modules as orientation only.
Q. Are the statistics likely to date quickly?
Yes. The Breaches Survey, NCSC Annual Review and Cyber Essentials question set are all revised annually — re-verify before each delivery.
You May Like
CPD COURSE Allergy Awareness Training Meeting the New 2026 School Requirements Jurisdiction: England and Wales · Content current to August 2026 CPD HOURS 35...
CPD COURSE · ENGLAND AND WALES Care Certificate Standards 16-standard knowledge bundle A knowledge refresher for practitioners already working in health and adult social...
CONTINUING PROFESSIONAL DEVELOPMENT · ENGLAND AND WALES Employability Skills with AI For practitioners who already support others into, through or between jobs — a...
CONTINUING PROFESSIONAL DEVELOPMENT · ENGLAND AND WALES Estate Agent Diploma A practitioner course in the law, duties and daily disciplines of residential estate agencies...
CONTINUING PROFESSIONAL DEVELOPMENT · ENGLAND AND WALES Residential Lettings Private rented sector practice under the Renters’ Rights Act 2025 and the Renting Homes (Wales)...
Course Features
- Lectures 13
- Quizzes 2
- Duration Lifetime access
- Skill level All levels
- Language English
- Students 2
- Certificate Yes
- Assessments Self
