Academy Marketplace/Cybersecurity, Trust & Digital Assurance/AST-D04-F01
Cybersecurity, Trust & Digital Assurance · Cybersecurity, Trust & Digital Assurance — Foundations & Theory Applied Practice Programmes

Cybersecurity, Trust & Digital Assurance

Build practical capability to understand, assess and strengthen digital security, trust and assurance.

Capability journey
1UNDERSTAND → 2APPLY → 3BUILD → 4PROVE → 5GROW
View access & enrolment → Explore programme ↓
45 hoursDuration
6Modules
24Topics
72Subtopics
6Assessments
6Evidence
01 · Programme snapshot

Know what you are stepping into.

Before you enrol, understand the proposition in context: what the programme is designed around, where it sits in the Academy, how it can be experienced and what recognition pathway is attached to it.

Programme purpose

Cybersecurity, Trust & Digital Assurance

A flagship programme covering security foundations, threat thinking, controls, assurance, risk and responsible digital practice.

Professional ProgrammeProfessionalHybrid
What this tells you: the published profile brings together the learner context, programme positioning, delivery characteristics and recognition pathway in one place.
DomainCybersecurity, Trust & Digital Assurance
Programme familyCybersecurity, Trust & Digital Assurance — Foundations & Theory Applied Practice Programmes
LevelL2
RecognitionAcademy credential pathway
02 · Fit & readiness

Is this programme for you?

Make the learner fit visible before you commit. These published definitions describe who the programme is intended for, what eligibility applies and what preparation is expected.

Readiness check

Who this is for

Learners seeking an applied interdisciplinary capability pathway; suitable for students, professionals and capability-development cohorts.

Eligibility

Open to learners who can engage with the stated programme level and complete the required learning activities.

Entry requirements

Basic digital literacy and readiness to undertake guided applied work; domain-specific prerequisites may be introduced in later programme revisions.

03 · Capability outcomes

What you will be able to demonstrate.

The programme is designed around demonstrable capability. These published outcomes show what the learning journey is intended to help you understand, apply, build and prove.

18published capability outcomes

Cybersecurity Foundations & Threat Framing

3 capability outcomes
01

Explain the concepts, principles and purpose of Cybersecurity Foundations & Threat Framing.

02

Apply appropriate methods and judgement within Cybersecurity Foundations & Threat Framing.

03

Produce defensible evidence demonstrating capability in Cybersecurity Foundations & Threat Framing.

Security Controls, Tools & Evidence

3 capability outcomes
04

Explain the concepts, principles and purpose of Security Controls, Tools & Evidence.

05

Apply appropriate methods and judgement within Security Controls, Tools & Evidence.

06

Produce defensible evidence demonstrating capability in Security Controls, Tools & Evidence.

Security Assessment & Applied Practice

3 capability outcomes
07

Explain the concepts, principles and purpose of Security Assessment & Applied Practice.

08

Apply appropriate methods and judgement within Security Assessment & Applied Practice.

09

Produce defensible evidence demonstrating capability in Security Assessment & Applied Practice.

Secure Systems & Digital Assurance

3 capability outcomes
10

Explain the concepts, principles and purpose of Secure Systems & Digital Assurance.

11

Apply appropriate methods and judgement within Secure Systems & Digital Assurance.

12

Produce defensible evidence demonstrating capability in Secure Systems & Digital Assurance.

Responsible Security & Risk Practice

3 capability outcomes
13

Explain the concepts, principles and purpose of Responsible Security & Risk Practice.

14

Apply appropriate methods and judgement within Responsible Security & Risk Practice.

15

Produce defensible evidence demonstrating capability in Responsible Security & Risk Practice.

Cybersecurity Capability Demonstration

3 capability outcomes
16

Explain the concepts, principles and purpose of Cybersecurity Capability Demonstration.

17

Apply appropriate methods and judgement within Cybersecurity Capability Demonstration.

18

Produce defensible evidence demonstrating capability in Cybersecurity Capability Demonstration.

04 · Capability architecture

Understand → Apply → Build → Prove → Grow.

This is more than a five-word model. It describes the learner movement through the programme — and the kind of participation Astraal SymbiOS is designed to support after enrolment.

01UNDERSTAND
Build the foundation before you act.In SymbiOS: Engage with the concepts, explanations and guided learning experiences that establish the knowledge needed for the programme.
02APPLY
Use what you have learned in context.In SymbiOS: Work through guided activities, examples, exercises or cases and connect the concepts to practical situations.
03BUILD
Turn understanding into something tangible.In SymbiOS: Create, practise or develop an artefact, solution, analysis or other applied work that demonstrates growing capability.
04PROVE
Demonstrate capability with evidence.In SymbiOS: Complete the relevant assessments and produce the evidence needed to show what you can actually do.
05GROW
Extend capability beyond the immediate task.In SymbiOS: Reflect, refine and transfer the capability into broader contexts so learning can continue beyond the individual programme activities.
What this means for the learner: the Marketplace tells you what the programme is and what capability it is designed to develop. After enrolment, Astraal SymbiOS becomes the execution environment where the detailed learning activities, practice, assessment and evidence journey are carried through.
05 · Programme architecture

See what you will actually move through.

Explore modules, topics, subtopics, outcomes, assessments, evidence and learning experiences before enrolment.

01

Cybersecurity Foundations & Threat Framing

Core concepts, threat framing, security principles and the foundations of trustworthy digital systems.

6.00 hrs
Explore module content · 4 topics3 outcomes · 1 assessment · 1 evidence

Cybersecurity Concepts & Security Principles

Core topic within Cybersecurity Foundations & Threat Framing.

  • Cybersecurity Concepts & Security Principles — concepts and terminology — Core concepts and terminology.
  • Cybersecurity Concepts & Security Principles — methods and practice — Methods and applied practice.
  • Cybersecurity Concepts & Security Principles — evidence and application — Evidence and application.

Threat Landscape & Attack Surfaces

Core topic within Cybersecurity Foundations & Threat Framing.

  • Threat Landscape & Attack Surfaces — concepts and terminology — Core concepts and terminology.
  • Threat Landscape & Attack Surfaces — methods and practice — Methods and applied practice.
  • Threat Landscape & Attack Surfaces — evidence and application — Evidence and application.

Security Objectives, Assets & Trust Boundaries

Core topic within Cybersecurity Foundations & Threat Framing.

  • Security Objectives, Assets & Trust Boundaries — concepts and terminology — Core concepts and terminology.
  • Security Objectives, Assets & Trust Boundaries — methods and practice — Methods and applied practice.
  • Security Objectives, Assets & Trust Boundaries — evidence and application — Evidence and application.

Cybersecurity Problem Framing

Core topic within Cybersecurity Foundations & Threat Framing.

  • Cybersecurity Problem Framing — concepts and terminology — Core concepts and terminology.
  • Cybersecurity Problem Framing — methods and practice — Methods and applied practice.
  • Cybersecurity Problem Framing — evidence and application — Evidence and application.
Learning outcomes• Explain the concepts, principles and purpose of Cybersecurity Foundations & Threat Framing.
• Apply appropriate methods and judgement within Cybersecurity Foundations & Threat Framing.
• Produce defensible evidence demonstrating capability in Cybersecurity Foundations & Threat Framing.
AssessmentCybersecurity Foundations & Threat Framing Assessment

Assess understanding, applied judgement and defensible evidence for Cybersecurity Foundations & Threat Framing.

EvidenceCybersecurity Foundations & Threat Framing Evidence

Evidence artefact demonstrating applied cybersecurity capability in Cybersecurity Foundations & Threat Framing.

Learning experience: Guided learning experience for Cybersecurity Foundations & Threat Framing. · Professional Programme · Hybrid
02

Security Controls, Tools & Evidence

Security controls, operational tools, evidence collection and defensible security practice.

8.00 hrs
Explore module content · 4 topics3 outcomes · 1 assessment · 1 evidence

Security Controls & Control Families

Core topic within Security Controls, Tools & Evidence.

  • Security Controls & Control Families — concepts and terminology — Core concepts and terminology.
  • Security Controls & Control Families — methods and practice — Methods and applied practice.
  • Security Controls & Control Families — evidence and application — Evidence and application.

Security Tools & Operational Workflows

Core topic within Security Controls, Tools & Evidence.

  • Security Tools & Operational Workflows — concepts and terminology — Core concepts and terminology.
  • Security Tools & Operational Workflows — methods and practice — Methods and applied practice.
  • Security Tools & Operational Workflows — evidence and application — Evidence and application.

Security Monitoring & Detection Evidence

Core topic within Security Controls, Tools & Evidence.

  • Security Monitoring & Detection Evidence — concepts and terminology — Core concepts and terminology.
  • Security Monitoring & Detection Evidence — methods and practice — Methods and applied practice.
  • Security Monitoring & Detection Evidence — evidence and application — Evidence and application.

Evidence Handling & Security Reporting

Core topic within Security Controls, Tools & Evidence.

  • Evidence Handling & Security Reporting — concepts and terminology — Core concepts and terminology.
  • Evidence Handling & Security Reporting — methods and practice — Methods and applied practice.
  • Evidence Handling & Security Reporting — evidence and application — Evidence and application.
Learning outcomes• Explain the concepts, principles and purpose of Security Controls, Tools & Evidence.
• Apply appropriate methods and judgement within Security Controls, Tools & Evidence.
• Produce defensible evidence demonstrating capability in Security Controls, Tools & Evidence.
AssessmentSecurity Controls, Tools & Evidence Assessment

Assess understanding, applied judgement and defensible evidence for Security Controls, Tools & Evidence.

EvidenceSecurity Controls, Tools & Evidence Evidence

Evidence artefact demonstrating applied cybersecurity capability in Security Controls, Tools & Evidence.

Learning experience: Guided learning experience for Security Controls, Tools & Evidence. · Professional Programme · Hybrid
03

Security Assessment & Applied Practice

Assessment methods, vulnerability analysis, risk interpretation and applied security problem solving.

10.00 hrs
Explore module content · 4 topics3 outcomes · 1 assessment · 1 evidence

Security Assessment Methods

Core topic within Security Assessment & Applied Practice.

  • Security Assessment Methods — concepts and terminology — Core concepts and terminology.
  • Security Assessment Methods — methods and practice — Methods and applied practice.
  • Security Assessment Methods — evidence and application — Evidence and application.

Vulnerability Analysis & Prioritisation

Core topic within Security Assessment & Applied Practice.

  • Vulnerability Analysis & Prioritisation — concepts and terminology — Core concepts and terminology.
  • Vulnerability Analysis & Prioritisation — methods and practice — Methods and applied practice.
  • Vulnerability Analysis & Prioritisation — evidence and application — Evidence and application.

Risk Analysis & Treatment Decisions

Core topic within Security Assessment & Applied Practice.

  • Risk Analysis & Treatment Decisions — concepts and terminology — Core concepts and terminology.
  • Risk Analysis & Treatment Decisions — methods and practice — Methods and applied practice.
  • Risk Analysis & Treatment Decisions — evidence and application — Evidence and application.

Applied Security Investigation

Core topic within Security Assessment & Applied Practice.

  • Applied Security Investigation — concepts and terminology — Core concepts and terminology.
  • Applied Security Investigation — methods and practice — Methods and applied practice.
  • Applied Security Investigation — evidence and application — Evidence and application.
Learning outcomes• Explain the concepts, principles and purpose of Security Assessment & Applied Practice.
• Apply appropriate methods and judgement within Security Assessment & Applied Practice.
• Produce defensible evidence demonstrating capability in Security Assessment & Applied Practice.
AssessmentSecurity Assessment & Applied Practice Assessment

Assess understanding, applied judgement and defensible evidence for Security Assessment & Applied Practice.

EvidenceSecurity Assessment & Applied Practice Evidence

Evidence artefact demonstrating applied cybersecurity capability in Security Assessment & Applied Practice.

Learning experience: Guided learning experience for Security Assessment & Applied Practice. · Professional Programme · Hybrid
04

Secure Systems & Digital Assurance

Secure architecture, resilience, assurance mechanisms and integration of security into digital systems.

7.00 hrs
Explore module content · 4 topics3 outcomes · 1 assessment · 1 evidence

Secure Architecture & Design Principles

Core topic within Secure Systems & Digital Assurance.

  • Secure Architecture & Design Principles — concepts and terminology — Core concepts and terminology.
  • Secure Architecture & Design Principles — methods and practice — Methods and applied practice.
  • Secure Architecture & Design Principles — evidence and application — Evidence and application.

Identity, Access & Trust Architecture

Core topic within Secure Systems & Digital Assurance.

  • Identity, Access & Trust Architecture — concepts and terminology — Core concepts and terminology.
  • Identity, Access & Trust Architecture — methods and practice — Methods and applied practice.
  • Identity, Access & Trust Architecture — evidence and application — Evidence and application.

Resilience, Recovery & Secure Operations

Core topic within Secure Systems & Digital Assurance.

  • Resilience, Recovery & Secure Operations — concepts and terminology — Core concepts and terminology.
  • Resilience, Recovery & Secure Operations — methods and practice — Methods and applied practice.
  • Resilience, Recovery & Secure Operations — evidence and application — Evidence and application.

Digital Assurance & Systems Integration

Core topic within Secure Systems & Digital Assurance.

  • Digital Assurance & Systems Integration — concepts and terminology — Core concepts and terminology.
  • Digital Assurance & Systems Integration — methods and practice — Methods and applied practice.
  • Digital Assurance & Systems Integration — evidence and application — Evidence and application.
Learning outcomes• Explain the concepts, principles and purpose of Secure Systems & Digital Assurance.
• Apply appropriate methods and judgement within Secure Systems & Digital Assurance.
• Produce defensible evidence demonstrating capability in Secure Systems & Digital Assurance.
AssessmentSecure Systems & Digital Assurance Assessment

Assess understanding, applied judgement and defensible evidence for Secure Systems & Digital Assurance.

EvidenceSecure Systems & Digital Assurance Evidence

Evidence artefact demonstrating applied cybersecurity capability in Secure Systems & Digital Assurance.

Learning experience: Guided learning experience for Secure Systems & Digital Assurance. · Professional Programme · Hybrid
05

Responsible Security & Risk Practice

Risk governance, privacy, responsible security decisions, resilience and accountability.

6.00 hrs
Explore module content · 4 topics3 outcomes · 1 assessment · 1 evidence

Security Risk Governance

Core topic within Responsible Security & Risk Practice.

  • Security Risk Governance — concepts and terminology — Core concepts and terminology.
  • Security Risk Governance — methods and practice — Methods and applied practice.
  • Security Risk Governance — evidence and application — Evidence and application.

Privacy, Data Protection & Responsible Practice

Core topic within Responsible Security & Risk Practice.

  • Privacy, Data Protection & Responsible Practice — concepts and terminology — Core concepts and terminology.
  • Privacy, Data Protection & Responsible Practice — methods and practice — Methods and applied practice.
  • Privacy, Data Protection & Responsible Practice — evidence and application — Evidence and application.

Human Factors, Ethics & Accountability

Core topic within Responsible Security & Risk Practice.

  • Human Factors, Ethics & Accountability — concepts and terminology — Core concepts and terminology.
  • Human Factors, Ethics & Accountability — methods and practice — Methods and applied practice.
  • Human Factors, Ethics & Accountability — evidence and application — Evidence and application.

Resilience, Continuity & Risk Communication

Core topic within Responsible Security & Risk Practice.

  • Resilience, Continuity & Risk Communication — concepts and terminology — Core concepts and terminology.
  • Resilience, Continuity & Risk Communication — methods and practice — Methods and applied practice.
  • Resilience, Continuity & Risk Communication — evidence and application — Evidence and application.
Learning outcomes• Explain the concepts, principles and purpose of Responsible Security & Risk Practice.
• Apply appropriate methods and judgement within Responsible Security & Risk Practice.
• Produce defensible evidence demonstrating capability in Responsible Security & Risk Practice.
AssessmentResponsible Security & Risk Practice Assessment

Assess understanding, applied judgement and defensible evidence for Responsible Security & Risk Practice.

EvidenceResponsible Security & Risk Practice Evidence

Evidence artefact demonstrating applied cybersecurity capability in Responsible Security & Risk Practice.

Learning experience: Guided learning experience for Responsible Security & Risk Practice. · Professional Programme · Hybrid
06

Cybersecurity Capability Demonstration

Integrated demonstration of cybersecurity judgement, artefacts, evidence and defensible recommendations.

8.00 hrs
Explore module content · 4 topics3 outcomes · 1 assessment · 1 evidence

Security Problem Definition & Assessment Plan

Core topic within Cybersecurity Capability Demonstration.

  • Security Problem Definition & Assessment Plan — concepts and terminology — Core concepts and terminology.
  • Security Problem Definition & Assessment Plan — methods and practice — Methods and applied practice.
  • Security Problem Definition & Assessment Plan — evidence and application — Evidence and application.

Security Artefacts & Technical Evidence

Core topic within Cybersecurity Capability Demonstration.

  • Security Artefacts & Technical Evidence — concepts and terminology — Core concepts and terminology.
  • Security Artefacts & Technical Evidence — methods and practice — Methods and applied practice.
  • Security Artefacts & Technical Evidence — evidence and application — Evidence and application.

Findings, Risk Judgement & Recommendations

Core topic within Cybersecurity Capability Demonstration.

  • Findings, Risk Judgement & Recommendations — concepts and terminology — Core concepts and terminology.
  • Findings, Risk Judgement & Recommendations — methods and practice — Methods and applied practice.
  • Findings, Risk Judgement & Recommendations — evidence and application — Evidence and application.

Capability Defence & Professional Communication

Core topic within Cybersecurity Capability Demonstration.

  • Capability Defence & Professional Communication — concepts and terminology — Core concepts and terminology.
  • Capability Defence & Professional Communication — methods and practice — Methods and applied practice.
  • Capability Defence & Professional Communication — evidence and application — Evidence and application.
Learning outcomes• Explain the concepts, principles and purpose of Cybersecurity Capability Demonstration.
• Apply appropriate methods and judgement within Cybersecurity Capability Demonstration.
• Produce defensible evidence demonstrating capability in Cybersecurity Capability Demonstration.
AssessmentCybersecurity Capability Demonstration Assessment

Assess understanding, applied judgement and defensible evidence for Cybersecurity Capability Demonstration.

EvidenceCybersecurity Capability Demonstration Evidence

Evidence artefact demonstrating applied cybersecurity capability in Cybersecurity Capability Demonstration.

Learning experience: Guided learning experience for Cybersecurity Capability Demonstration. · Professional Programme · Hybrid
06 · The Astraal difference

From programme discovery to demonstrable capability.

Astraal separates the public marketplace experience from the detailed learning execution — so learners can understand the proposition before they enrol and know what happens next.

Marketplace → SymbiOS

Academy Marketplace helps you discover the programme, understand its purpose, structure, capability outcomes and access pathway. Astraal SymbiOS takes over after enrolment for the detailed learning, practice, assessment and evidence journey.

Capability → Evidence → Recognition

The programme is not presented as content alone. Its outcomes connect to learning activities, assessments and evidence so that capability can move from learning to demonstration and, where applicable, to recognition.

Your Astraal learner pathway
DISCOVER
UNDERSTAND
ENROL
EXECUTE IN SYMBIOS
PROVE
RECOGNISE

What changes after enrolment: the Marketplace remains your programme reference, while SymbiOS becomes the environment in which you engage with the detailed experiences, practice, assessment and evidence required by the published programme architecture.

07 · Recognition

Turn learning into something you can demonstrate.

The programme connects capability development with evidence, assessment and — where the published programme provides for it — Academy recognition.

Recognition pathway

Capability can become a credential.

The credential layer gives the learner a visible endpoint for demonstrated achievement. The credential names shown here come directly from the published V2 programme record.

Learn→ Demonstrate→ Recognise
Programme Credential
Evidence matters

Show what you can demonstrate.

6evidence

Evidence is part of the published programme architecture. It gives the learner a concrete way to show what has been produced, applied or demonstrated across the learning journey.

6module assessments
6evidence items
Cybersecurity Foundations & Threat Framing Evidence
Security Controls, Tools & Evidence Evidence
Security Assessment & Applied Practice Evidence
Evidence is not an extra layer added after learning. It is part of the programme architecture that connects learning, assessment and demonstrable capability.

Ready to explore the pathway?

Review the published access offer and take the next step into this programme. Detailed learning execution continues in Astraal SymbiOS after enrolment.

View access & enrolment →Browse programmes