Cyber Security Analyst
About Course
About the Course
This course is designed to equip learners with the knowledge, practical skills, and workplace competencies required to operate as a Cybersecurity Analyst. It combines foundational IT knowledge, cybersecurity principles, data handling, and workplace skills aligned to real industry requirements.
The course integrates knowledge, practical application, and workplace experience, ensuring that learners are not only able to understand cybersecurity concepts but also apply them effectively in real-world environments.
Course Overview
The Occupational Certificate: Cybersecurity Analyst (SAQA ID: 118986, NQF Level 5) is a comprehensive programme that develops competencies across:
-
Cybersecurity fundamentals
-
Network security and defence
-
Cyber threats and attack techniques
-
Governance, legislation, and ethics
-
Design thinking and innovation
-
Logical thinking and mathematical foundations
-
Computing systems and devices
-
Data security and database vulnerabilities
-
4IR skills and workplace competencies
The course is structured into Knowledge Modules (KM), Practical Modules (PM), and Workplace Modules (WM) to ensure holistic learning and industry readiness.
Learning Outcomes
By the end of this course, learners will be able to:
Knowledge
-
Understand core cybersecurity concepts and principles
-
Identify cyber threats, vulnerabilities, and attack methods
-
Explain governance, legal frameworks, and ethical considerations
-
Understand computing systems, networks, and data management
Understanding
-
Analyse risks and vulnerabilities in IT environments
-
Understand how cybersecurity supports organisational objectives
-
Interpret data, trends, and emerging 4IR technologies
-
Understand workplace communication and collaboration principles
Application
-
Apply cybersecurity practices to protect systems and data
-
Perform risk assessments and implement mitigation strategies
-
Use tools and techniques to monitor and respond to threats
-
Work effectively in teams and professional environments
-
Apply problem-solving, analytical thinking, and innovation
Target Audience
This course is suitable for:
-
Individuals pursuing a career in cybersecurity
-
Entry-level IT professionals
-
Learners interested in digital security and 4IR technologies
-
Employees seeking to upskill in cybersecurity practices
-
Students aiming to enter the technology or security industry
Course Requirements
To successfully complete this course, learners should:
-
Have basic computer literacy
-
Be able to use digital tools and platforms
-
Demonstrate problem-solving and analytical thinking
-
Participate in practical and workplace-based activities
-
Complete assessments and practical exercises
No advanced technical experience is required, as foundational knowledge is included.
Skills You Will Gain
Learners will develop the following skills:
Technical Skills
-
Network security and defence
-
Threat detection and vulnerability assessment
-
Incident response and risk mitigation
-
Data protection and encryption concepts
-
Basic scripting and tool usage
Analytical Skills
-
Logical thinking and problem-solving
-
Risk analysis and decision-making
-
Data interpretation and evaluation
Workplace Skills
-
Communication (written and verbal)
-
Teamwork and collaboration
-
Customer and stakeholder engagement
-
Professional conduct and ethics
4IR Skills
-
Understanding emerging technologies
-
Adaptability and innovation
-
Digital literacy and future-focused thinking
Course Structure
The course is structured into three integrated components:
1. Knowledge Modules (KM)
These modules provide theoretical understanding:
-
KM-01: Introduction to Cybersecurity
-
KM-02: Network Security and Defence
-
KM-03: Cyber Threats and Attacks
-
KM-04: Governance, Legislation and Ethics
-
KM-05: Design Thinking and Innovation
-
KM-06: Logical Thinking and Calculations
-
KM-07: Computers and Computing Systems
-
KM-08: Data and Database Vulnerabilities
-
KM-09: 4IR and Future Skills
2. Practical Modules (PM)
These modules focus on hands-on application:
-
Compliance with cybersecurity requirements
-
Risk assessment and vulnerability analysis
-
Incident detection and response
-
Data handling and visualisation
-
Scriptwriting and tool usage
-
Design thinking in problem-solving
3. Workplace Modules (WM)
These modules provide real-world experience:
-
Workplace induction and observation
-
Cybersecurity risk assessment in practice
-
Implementation of security measures
-
Exposure to real cybersecurity environments
Integrated Learning Approach
The course follows an integrated model where:
-
Knowledge supports practical application
-
Practical skills are reinforced in workplace settings
-
Learning is aligned to real occupational tasks
This ensures learners are fully prepared for industry roles.
Course Content
KM-01: Introduction to Cybersecurity
This module introduces learners to the fundamental concepts of cybersecurity and the importance of protecting digital systems, networks, and personal data. Learners will gain an understanding of common cyber threats such as malware, identity theft, phishing attacks, and hacking attempts. The module also focuses on practical cybersecurity practices that individuals and organizations can adopt to protect computers, mobile devices, online accounts, and sensitive information.
By the end of this module, learners will understand how cybersecurity threats occur, how cybercriminals exploit vulnerabilities, and how users can safeguard their systems and digital identities through responsible cybersecurity practices.
KM-02: Fundamentals of Network Security and Defence
This module introduces learners to the fundamental principles and techniques involved in network security and defence. The aim of the module is to build an understanding of how networks are protected against threats, attacks, and vulnerabilities. Learners will explore topics such as network security concepts, vulnerability management, monitoring for security breaches, and incident response planning.
Through this module, learners will develop the ability to understand cybersecurity risks, implement security controls, and evaluate network security strategies. The knowledge gained will help learners apply security techniques in real-world environments and contribute to protecting organizational data, systems, and digital infrastructure.
KM-03-KT01: Information Security Governance and Compliance
This module introduces learners to the core concepts of cybersecurity, ethical hacking, and cyber threats, and explains how organizations identify, analyze, and mitigate security risks. The module explores how attackers operate, the techniques they use to compromise systems, and the defensive strategies used to protect digital environments.
Learners will develop an understanding of information security governance, compliance standards, and the principles that guide effective cybersecurity management. The module also examines the stages of ethical hacking and penetration testing, including activities such as footprinting, scanning networks, enumeration, vulnerability analysis, and system hacking. These processes help cybersecurity professionals identify weaknesses in systems before attackers can exploit them.
In addition, the module explores a wide range of cyberattack techniques, including malware threats, social engineering, sniffing, denial-of-service attacks, session hijacking, and attacks against web servers, wireless networks, mobile devices, and Internet of Things (IoT) environments. Learners will also examine how technologies such as cryptography, cloud computing security, and incident response management help organizations protect sensitive information and respond effectively to cyber incidents.
By the end of this module, learners will have the knowledge required to recognize common cyber threats, understand how attacks are carried out, and apply risk mitigation strategies to strengthen cybersecurity within organizations. This knowledge supports the development of practical skills required for roles in cybersecurity analysis, threat detection, and incident response.
KM-04:Introduction to Cybersecurity Governance, Legislation and Ethics
This module provides learners with a foundational understanding of governance, legislation, ethics, and business practices within a cybersecurity and workplace context.
Learners will explore how governance structures guide decision-making in organizations, as well as how legislation such as the Labour Relations Act (LRA), POPI, and other workplace laws regulate employer and employee responsibilities. The module also introduces ethical principles, professional conduct, and ethical behaviour in the workplace, highlighting the importance of honesty, accountability, and compliance.
In addition, learners will gain knowledge of security concepts, performance management, business planning, costing, and resource management, all of which contribute to effective organizational operations.
By the end of this module, learners will be able to apply governance principles, understand legal frameworks, demonstrate ethical behaviour, and support business processes, which are essential skills in both cybersecurity and general workplace environments.
KM-05: Fundamentals of Design Thinking and Innovation
This module introduces learners to the principles, concepts, and practical applications of design thinking and innovation in the workplace.
Learners will develop an understanding of how design thinking provides a human-centered, problem-solving approach that focuses on user needs, creativity, and iterative development. The module explores key areas such as creativity, innovation, design, and structured methodologies, enabling learners to think critically and develop effective solutions.
In addition, learners will examine how design thinking is applied in software development, cybersecurity, and business innovation, equipping them with practical skills to address real-world challenges.
By the end of this module, learners will be able to:
~ Apply design thinking principles to problem solving
~ Understand the human element in design
~ Use creativity and innovation to generate solutions
~ Apply design thinking in business and technology environments
KM-06: Refresher Logical Thinking and Basic Calculations
This module focuses on developing mathematical thinking and foundational calculation skills that are essential for problem solving in cybersecurity and technical environments.
Learners will gain an understanding of how to apply logical reasoning and mathematical concepts to solve problems, interpret data, and work with software tools effectively.
The module covers key areas including:
Mathematical problem-solving processes
Basic mathematics and number systems
Binary and decimal conversions
Size, magnitude, and scientific notation
Errors in calculations and numerical accuracy
Coordinate systems and geometric principles
Operator precedence and programming-related calculations
Division, modulus, and increments in computing contexts
Through this module, learners will develop the ability to:
Think logically and analytically when solving problems
Apply mathematical principles in real-world and technical scenarios
Work confidently with numerical data in computing environments
👉 This module is critical because it builds the mathematical foundation required for cybersecurity analysis, programming, and data interpretation.
KM-07: Computers, Devices and Computing Systems
This module introduces learners to the fundamentals of computer systems, focusing on how computers function and how different components work together to process data.
Learners will explore the core parts of a computer system, including:
Input and output devices
The Central Processing Unit (CPU)
Memory and storage systems
The module also covers hardware components, system operations, and maintenance practices, giving learners practical knowledge of how computers are built, used, and managed.
In addition, learners will develop an understanding of:
Troubleshooting techniques
Operating systems and file management
Networking and connectivity
Cloud computing and basic security concepts
The knowledge gained in this module forms a foundation for cybersecurity and IT support roles, enabling learners to understand how systems operate, how issues arise, and how to maintain secure and efficient computing environments.
Module Focus Areas
This module includes the following key topics:
Problem solving in IT environments
Safety practices and hazard awareness
Computer hardware components
Storage, memory, and processing
Input and output devices
Operating systems and file management
Troubleshooting and maintenance
Networking and cloud computing
Security fundamentals
Learning Purpose
By the end of this module, learners will be able to:
Understand how computer systems function
Identify and describe key hardware components
Perform basic troubleshooting and maintenance
Work with operating systems and files
Understand networking, cloud computing, and security basics
Module Outcome
Learners will develop the ability to:
Analyse computer systems and their components
Apply problem-solving techniques in IT contexts
Maintain and troubleshoot computing devices
Support secure and efficient system operations
KM-08: Data and Databases Vulnerabilities
This module introduces learners to the fundamentals of data, databases, and data security within cybersecurity environments.
Learners will develop an understanding of how data is collected, processed, stored, and protected, as well as how vulnerabilities and threats can impact data integrity and security. The module explores key areas such as data processing, database systems, SQL, data scraping, and data visualisation, enabling learners to work with data effectively and securely.
In addition, learners will examine how data is used to generate meaningful insights through analysis and visualisation tools, while also understanding the risks associated with poor data management and security weaknesses.
By the end of this module, learners will be able to:
Understand data vulnerabilities and security risks
Explain data processing and data quality concepts
Work with databases and data storage systems
Understand and apply basic SQL concepts
Identify methods of data scraping and data acquisition
Use tools for data analysis and visualisation
Module Structure
We will build 6 lessons:
KM-08-KT01: Data vulnerability and security
KM-08-KT02: Data and data processing
KM-08-KT03: Databases, data storage and access to data
KM-08-KT04: Structured query language (SQL)
KM-08-KT05: Data scraping
KM-08-KT06: Software for analysing and visualising data
KM-09: Introduction to 4IR and Future Skills
This module introduces learners to the Fourth Industrial Revolution (4IR) and the skills required to succeed in modern digital and workplace environments.
KM-09-Learner Guide
Learners will develop an understanding of how emerging technologies and trends are transforming communities, businesses, and individuals, as well as the importance of both technical and soft skills in adapting to these changes.
The module explores key areas such as emerging 4IR trends, computing knowledge, future skills, business impact, communication, teamwork, and customer service, enabling learners to function effectively in dynamic and technology-driven environments.
In addition, learners will build competencies in interpersonal and intrapersonal skills, communication methods, workplace collaboration, and stakeholder engagement, which are essential for professional success.
By the end of this module, learners will be able to:
~ Understand 4IR emerging trends and their impact
~ Apply basic computing knowledge and concepts
~ Identify future skills and competencies required in 4IR
~ Explain how 4IR trends affect businesses and society
~ Demonstrate interpersonal and intrapersonal skills
~ Apply communication principles and business communication methods
~ Understand teamwork, meetings, and workplace structures
~ Identify customer and stakeholder relationships
~ Apply customer service principles in a business environment
Module Structure
We will build 14 lessons:
1. KM-09-KT01: 4IR emerging trends
2. KM-09-KT02: Computing knowledge
3. KM-09-KT03: Future skills and competencies (4IR)
4. KM-09-KT04: 4IR trends affecting businesses
5. KM-09-KT05: Interpersonal skills
6. KM-09-KT06: Intrapersonal skills
7. KM-09-KT07: Communication principles and methods
8. KM-09-KT08: Written business communication
9. KM-09-KT09: Presentation skills
10. KM-09-KT10: Teamwork in the workplace
11. KM-09-KT11: Committees and meetings
12. KM-09-KT12: Job descriptions and profiles
13. KM-09-KT13: Customers and stakeholders
14. KM-09-KT14: Customer service
Practical Module 01: Ensure Compliance in Terms of Legal Cybersecurity Requirements and Standards
Module Code: 252901001-PM-01
NQF Level: 5
Credits: 4
Qualification: Occupational Certificate: Cybersecurity Analyst
SAQA ID: 118986
Module Overview
This practical module equips learners with the ability to ensure cybersecurity compliance within an organisation. Learners will apply legal, regulatory, and industry standards to secure systems, networks, and data.
The module focuses on real-world cybersecurity practices such as implementing security controls, securing IT infrastructure, configuring networks, and responding to cyber threats.
Purpose of the Module
The purpose of this module is to provide learners with the skills to participate in organisational governance and ensure that systems, networks, and data comply with legal cybersecurity requirements and recognised standards.
Learning Outcomes
By the end of this module, learners will be able to:
Ensure compliance with legal and regulatory cybersecurity requirements
Implement and maintain cybersecurity controls
Secure IT systems, networks, and devices
Identify and mitigate cybersecurity threats
Configure secure network environments
Apply first-line defence strategies against cyber attacks
Workplace / Practical Requirements
Access to a computer or virtual lab
Cybersecurity toolkit/platform
Network environment (real or simulated)
Internet access
Mentor or supervisor support
Learner Instructions
Complete all practical activities in each section
Maintain a detailed logbook of all activities
Ensure all work is signed off by your mentor
Submit all required evidence for assessment
Take full responsibility for your Record of Learning
Incomplete documentation may result in a Not Yet Competent outcome.
Assessment Approach
Assessment is based on:
Practical task performance
Observation by mentor/supervisor
Evidence in logbook
Demonstration of applied knowledge
Each section includes:
Practical Activities (PA)
Applied Knowledge (AK)
Internal Assessment Criteria (IAC)
Practical Module 02: Conduct Cybersecurity Risk Assessment and Apply Risk Management
Module Code: 252901001-PM-02
NQF Level: 5
Credits: 4
Qualification: Occupational Certificate: Cybersecurity Analyst
SAQA ID: 118986
Module Overview
This practical module equips learners with the skills to identify, assess, and manage cybersecurity risks within an organisation. Learners will apply structured risk assessment methodologies to evaluate vulnerabilities, threats, and potential impacts on systems and data.
The module focuses on practical risk management processes, including risk identification, analysis, evaluation, and mitigation strategies aligned with organisational and industry standards.
Purpose of the Module
The purpose of this module is to develop the learner’s ability to conduct cybersecurity risk assessments and implement appropriate risk management strategies to protect organisational assets and ensure operational continuity.
Learning Outcomes
By the end of this module, learners will be able to:
Identify cybersecurity risks, threats, and vulnerabilities
Conduct structured risk assessments
Analyse and evaluate risk levels
Apply risk treatment and mitigation strategies
Document and report on cybersecurity risks
Support organisational risk management processes
Workplace / Practical Requirements
Access to a computer or simulated lab environment
Risk assessment tools or templates
Organisational policies or case study environment
Internet access
Mentor or supervisor support
Learner Instructions
Complete all practical activities in each section
Record all activities in your logbook
Ensure mentor verification and sign-off
Submit all required evidence for assessment
Maintain a complete Record of Learning
Failure to provide sufficient evidence may result in a Not Yet Competent outcome.
Assessment Approach
Assessment is based on:
Practical task execution
Observation by mentor/supervisor
Evidence submitted in logbook
Demonstration of applied knowledge
Each section includes:
Practical Activities (PA)
Applied Knowledge (AK)
Internal Assessment Criteria (IAC)
Practical Module 03: Perform Security Testing and Vulnerability Assessment
Module Code: 252901001-PM-03
NQF Level: 5
Credits: 4
Qualification: Occupational Certificate: Cybersecurity Analyst
SAQA ID: 118986
Module Overview
This practical module equips learners with the skills to perform security testing and identify vulnerabilities within systems, applications, and networks. Learners will use tools and techniques to assess security weaknesses and evaluate system resilience.
The module focuses on practical activities such as vulnerability scanning, penetration testing basics, analysing results, and recommending corrective actions to improve security posture.
Purpose of the Module
The purpose of this module is to develop the learner’s ability to identify, assess, and report on system vulnerabilities through structured security testing processes.
Learning Outcomes
By the end of this module, learners will be able to:
Perform vulnerability assessments on systems and networks
Use security testing tools and techniques
Identify and analyse security weaknesses
Interpret vulnerability scan results
Recommend corrective actions and improvements
Document and report findings
Workplace / Practical Requirements
Access to a computer or virtual lab
Vulnerability scanning tools (e.g., open-source tools or simulated tools)
Test environment or sandbox system
Internet access
Mentor or supervisor support
Learner Instructions
Complete all practical activities in each section
Record all activities in your logbook
Ensure mentor verification and sign-off
Submit all required evidence for assessment
Maintain a complete Record of Learning
Incomplete evidence may result in a Not Yet Competent outcome.
Assessment Approach
Assessment is based on:
Practical task execution
Observation by mentor/supervisor
Evidence submitted in logbook
Demonstration of applied knowledge
Each section includes:
Practical Activities (PA)
Applied Knowledge (AK)
Internal Assessment Criteria (IAC)
Practical Module 04: Analyse Data and Support Decision-Making in Cybersecurity
Module Code: 252901001-PM-04
NQF Level: 5
Credits: 4
Qualification: Occupational Certificate: Cybersecurity Analyst
SAQA ID: 118986
Module Overview
This practical module equips learners with the ability to collect, analyse, and interpret data to support cybersecurity decision-making. Learners will work with datasets, apply analytical techniques, and present insights that support organisational security strategies.
The module focuses on practical data handling, interpretation of trends, and transforming raw data into meaningful information for informed decision-making.
Purpose of the Module
The purpose of this module is to develop the learner’s ability to analyse cybersecurity-related data and provide insights that support risk management, monitoring, and strategic decision-making.
Learning Outcomes
By the end of this module, learners will be able to:
Collect and organise cybersecurity data
Analyse data using appropriate tools and techniques
Interpret data trends and patterns
Present data insights clearly
Support decision-making using analysed data
Apply data analysis in cybersecurity contexts
Workplace / Practical Requirements
Access to a computer or lab environment
Data analysis tools (e.g., spreadsheets, dashboards, or similar tools)
Sample or real cybersecurity datasets
Internet access
Mentor or supervisor support
Learner Instructions
Complete all practical activities in each section
Record all activities in your logbook
Ensure mentor verification and sign-off
Submit all required evidence for assessment
Maintain a complete Record of Learning
Incomplete evidence may result in a Not Yet Competent outcome.
Assessment Approach
Assessment is based on:
Practical task execution
Observation by mentor/supervisor
Evidence submitted in logbook
Demonstration of applied knowledge
Each section includes:
Practical Activities (PA)
Applied Knowledge (AK)
Internal Assessment Criteria (IAC)
Practical Module 05: Apply Basic Scripting for Cybersecurity Toolsets
Module Code: 252901001-PM-05
NQF Level: 4
Credits: 4
Qualification: Occupational Certificate: Cybersecurity Analyst
SAQA ID: 118986
Module Overview
This practical module equips learners with hands-on scripting skills used in cybersecurity environments. Learners will develop and execute scripts to automate tasks, interact with systems, and support cybersecurity operations.
The module focuses on building foundational scripting capabilities, including working with command-line interfaces, implementing logic structures, handling errors, and applying structured development processes.
Purpose of the Module
The purpose of this module is to enable learners to develop and apply basic scripting techniques to support cybersecurity tools, automate processes, and solve practical problems in a controlled environment.
Learning Outcomes
By the end of this module, learners will be able to:
Identify and evaluate scripting tools and platforms
Set up a scripting and development environment
Write scripts using command-line interfaces
Apply logic structures such as conditions and loops
Handle and debug errors in scripts
Follow structured scripting development processes
Apply scripting to cybersecurity-related tasks
Workplace / Practical Requirements
Access to a computer or lab environment
Scripting tools (e.g., Python, Bash, PowerShell)
Command Line Interface (CLI) / Terminal
Internet access
Mentor or supervisor support
Learner Instructions
Complete all practical activities in each section
Record all activities in your logbook
Ensure mentor verification and sign-off
Submit all required evidence for assessment
Maintain a complete Record of Learning
Incomplete evidence may result in a Not Yet Competent outcome.
Assessment Approach
Assessment is based on:
Practical task execution
Observation by mentor/supervisor
Evidence submitted in logbook
Demonstration of applied knowledge
Each section includes:
Practical Activities (PA)
Applied Knowledge (AK)
Internal Assessment Criteria (IAC)
Practical Module 06: Perform Incident Detection, Response and Recovery
Module Code: 252901001-PM-06
NQF Level: 5
Credits: 4
Qualification: Occupational Certificate: Cybersecurity Analyst
SAQA ID: 118986
Module Overview
This practical module equips learners with the skills to detect, respond to, and recover from cybersecurity incidents. Learners will work with real-world scenarios to identify security incidents, analyse threats, and implement appropriate response and recovery procedures.
The module focuses on building practical incident response capabilities, including monitoring systems, identifying anomalies, responding to incidents, and restoring normal operations.
Purpose of the Module
The purpose of this module is to enable learners to effectively detect cybersecurity incidents, respond appropriately to minimise damage, and support recovery processes to restore systems and operations.
Learning Outcomes
By the end of this module, learners will be able to:
Identify and detect cybersecurity incidents
Monitor systems and analyse security alerts
Respond to security incidents using appropriate procedures
Contain and mitigate threats
Support recovery and restoration of systems
Document and report incidents
Workplace / Practical Requirements
Access to a computer or lab environment
Security monitoring tools or simulated environment
Incident response tools or case study scenarios
Internet access
Mentor or supervisor support
Learner Instructions
Complete all practical activities in each section
Record all activities in your logbook
Ensure mentor verification and sign-off
Submit all required evidence for assessment
Maintain a complete Record of Learning
Incomplete evidence may result in a Not Yet Competent outcome.
Assessment Approach
Assessment is based on:
Practical task execution
Observation by mentor/supervisor
Evidence submitted in logbook
Demonstration of applied knowledge
Each section includes:
Practical Activities (PA)
Applied Knowledge (AK)
Internal Assessment Criteria (IAC)
Practical Module 07: Apply Data Handling and Visualisation Techniques
Module Code: 252901001-PM-07
NQF Level: 4
Credits: 4
Qualification: Occupational Certificate: Cybersecurity Analyst
SAQA ID: 118986
Module Overview
This practical module equips learners with the skills to handle, process, and visualise data within a cybersecurity context. Learners will work with datasets to organise information, perform basic analysis, and present findings using visual tools.
The module focuses on transforming raw data into meaningful insights through data preparation, analysis, and visualisation techniques that support decision-making.
Purpose of the Module
The purpose of this module is to enable learners to effectively handle and visualise data, ensuring that information is presented clearly to support cybersecurity analysis and decision-making.
Learning Outcomes
By the end of this module, learners will be able to:
Collect and organise data for analysis
Clean and prepare datasets
Perform basic data analysis
Create data visualisations
Interpret visual data representations
Present data insights effectively
Workplace / Practical Requirements
Access to a computer or lab environment
Data handling tools (e.g., spreadsheets or dashboards)
Sample or real datasets
Internet access
Mentor or supervisor support
Learner Instructions
Complete all practical activities in each section
Record all activities in your logbook
Ensure mentor verification and sign-off
Submit all required evidence for assessment
Maintain a complete Record of Learning
Incomplete evidence may result in a Not Yet Competent outcome.
Assessment Approach
Assessment is based on:
Practical task execution
Observation by mentor/supervisor
Evidence submitted in logbook
Demonstration of applied knowledge
Each section includes:
Practical Activities (PA)
Applied Knowledge (AK)
Internal Assessment Criteria (IAC)
Practical Module 08: Apply Design Thinking to Solve Cybersecurity Problems
Module Code: 252901001-PM-08
NQF Level: 5
Credits: 4
Qualification: Occupational Certificate: Cybersecurity Analyst
SAQA ID: 118986
Module Overview
This practical module equips learners with the ability to apply design thinking methodologies to solve cybersecurity-related problems. Learners will use a structured, user-centred approach to analyse challenges, develop innovative solutions, and improve cybersecurity processes.
The module focuses on problem-solving, creativity, and iterative solution development within real-world cybersecurity contexts.
Purpose of the Module
The purpose of this module is to enable learners to apply design thinking principles to identify problems, generate solutions, and improve cybersecurity systems and processes in an innovative and structured manner.
Learning Outcomes
By the end of this module, learners will be able to:
Apply design thinking principles to cybersecurity challenges
Identify and define problems in a structured way
Generate creative and innovative solutions
Develop prototypes or solution concepts
Test and refine solutions
Present solutions effectively
Workplace / Practical Requirements
Access to a computer or working environment
Problem scenarios or case studies
Tools for brainstorming and design (digital or manual)
Internet access
Mentor or supervisor support
Learner Instructions
Complete all practical activities in each section
Record all activities in your logbook
Ensure mentor verification and sign-off
Submit all required evidence for assessment
Maintain a complete Record of Learning
Incomplete evidence may result in a Not Yet Competent outcome.
Assessment Approach
Assessment is based on:
Practical task execution
Observation by mentor/supervisor
Evidence submitted in logbook
Demonstration of applied knowledge
Each section includes:
Practical Activities (PA)
Applied Knowledge (AK)
Internal Assessment Criteria (IAC)
Workplace Module 01: Compliance with Legal Cybersecurity Requirements
Module Code: 252901-001-00-WM-01
NQF Level: 5
Credits: 12
Qualification: Occupational Certificate: Cybersecurity Analyst
SAQA ID: 118986
Module Overview
This workplace module provides learners with real-world exposure to cybersecurity compliance within an organisational environment. Learners will gain practical experience by engaging with company processes, observing cybersecurity professionals, and performing tasks under supervision.
The module focuses on understanding how cybersecurity practices align with legal requirements, organisational policies, and governance frameworks.
Purpose of the Module
The purpose of this workplace experience is to provide learners with the opportunity to:
Demonstrate knowledge of cybersecurity concepts
Understand how cybersecurity supports legal compliance
Apply cybersecurity practices within a real organisational context
Workplace Experience Structure
Learners are required to complete the following components:
WM-01-WE01: Induction and workplace familiarisation
WM-01-WE02: Shadowing a Cybersecurity Analyst
WM-01-WE03: Performing tasks under supervision
Workplace Requirements
Placement within an organisation
Access to cybersecurity systems and processes
Supervisor or mentor support
Participation in real workplace activities
Learner Instructions
Participate in all workplace activities
Complete all required tasks in each section
Record all activities in your logbook
Collect and submit required supporting evidence
Ensure supervisor sign-off on completed tasks
Failure to provide complete evidence may result in a Not Yet Competent outcome.
Assessment Approach
Assessment is based on:
Observation by supervisor/mentor
Completion of workplace activities
Supporting evidence submission
Logbook records
Demonstration of applied competence
Workplace Module 02: Cybersecurity Risk Assessment and Mitigation
Module Code: 252901-001-00-WM-02
NQF Level: 5
Credits: 20
Qualification: Occupational Certificate: Cybersecurity Analyst
SAQA ID: 118986
Module Overview
This workplace module provides learners with practical experience in conducting cybersecurity risk assessments and implementing mitigation strategies. Learners will observe and participate in real-world risk assessment processes, gaining hands-on exposure to identifying threats, vulnerabilities, and controls within an organisational environment.
Purpose of the Module
The purpose of this workplace experience is to provide learners with the opportunity to:
Assess risks to organisational assets
Evaluate cybersecurity protection measures
Participate in structured risk assessment processes
Apply mitigation strategies within a real workplace context
Workplace Experience Structure
Learners are required to complete:
WM-02-WE01: Shadow and observe a cybersecurity risk assessment
WM-02-WE02: Conduct a cybersecurity risk assessment under supervision
Workplace Requirements
Access to a workplace environment
Exposure to cybersecurity systems and processes
Supervisor or mentor support
Access to risk assessment documentation
Learner Instructions
Participate in all workplace activities
Complete all required tasks in each section
Record all activities in your logbook
Submit all required supporting evidence
Ensure supervisor sign-off on all completed work
Incomplete submissions may result in a Not Yet Competent outcome.
Assessment Approach
Assessment is based on:
Observation by supervisor
Completion of workplace activities
Supporting evidence submitted
Demonstration of applied skills
Logbook verification
Workplace Module 03: Cybersecurity Detection, Protection and Prevention Processes
Module Code: 252901-001-00-WM-03
NQF Level: 5
Credits: 20
Qualification: Occupational Certificate: Cybersecurity Analyst
SAQA ID: 118986
Module Overview
This workplace module provides learners with practical exposure to cybersecurity detection, protection, and prevention processes within an organisational environment. Learners will observe and participate in real-world cybersecurity operations, including monitoring systems, identifying threats, and responding to incidents.
Purpose of the Module
The purpose of this workplace experience is to provide learners with the opportunity to:
Apply cybersecurity detection, protection, and prevention processes
Participate in monitoring and incident response activities
Understand how organisations defend against cyber threats
Gain practical experience in securing systems and networks
Workplace Experience Structure
Learners are required to complete:
WM-03-WE01: Shadow and observe cybersecurity activities
WM-03-WE02: Perform cybersecurity tasks under supervision
Workplace Requirements
Access to organisational cybersecurity systems
Exposure to monitoring tools and security platforms
Supervisor or mentor support
Access to logs, reports, and security processes
Learner Instructions
Participate in all workplace activities
Complete all required tasks in each section
Record all activities in your logbook
Collect and submit supporting evidence
Ensure supervisor sign-off
Incomplete submissions may result in a Not Yet Competent outcome.
Assessment Approach
Assessment is based on:
Observation by supervisor
Completion of workplace activities
Supporting evidence
Demonstration of applied cybersecurity skills
Logbook verification
Earn a certificate
Add this certificate to your resume to demonstrate your skills & increase your chances of getting noticed.