Skip to main content
Boom Training
Book a call

Move from reacting to incidents to preventing them

The Cyber Security programme develops the skills to monitor threats, assess vulnerabilities, harden systems, and respond to incidents, so security work happens inside your team rather than outside it.

Cyber security apprentice working at a laptop, framed by logos of the tools the programme covers: Burp Suite, Python, Wazuh, Suricata, Wireshark and Nessus

Mentors bring first-hand experience from companies and universities such as:

University of Cambridge
University of Oxford
Google
Amazon
Meta
Spotify
Vinted
Backed by Y Combinator
Apprenticeship standardCyber Security Technician Level 3
Duration18 months delivery
End Point Assessment (EPA)3 months
Worth£ 11,000
Fully-funded with Levy funding

Put your security effort where the risk is greatest

Every organisation now holds data worth stealing, and the day-to-day work of protecting it tends to fall to whoever has time. Alerts go unread, patching slips, and audit evidence gets assembled in a rush. This 18-month programme gives your team the skills to:

Monitor and triage security events as they happen.
Find and fix vulnerabilities on a repeatable cycle.
Harden systems and networks against common attack paths.
Produce the evidence auditors, insurers and clients ask for.

Who is this training for?

This programme is for employees who already touch security work but have not had formal training in it. Typical learners work in IT support, helpdesk, system administration, networking, compliance, risk or operations.

No cyber security or coding background is required. The focus is on practical first-line security work rather than technical specialisation.

Eligibility criteria:

  • Employed in England for 30+ hours per week

  • Current role involves IT systems, data or security responsibilities

  • Aged 16+ (no upper age limit)

  • Able to commit to a minimum of 6 hours of off-the-job training per week

  • Blended learning with 10 practical projects

  • Future-proofed curriculum

  • Self-paced, 100% online

  • 1:1 mentoring and community access

Programme overview

Cyber Security is a work-based programme designed to build first-line security capability inside your organisation rather than buying it in.

Over 18 months, learners develop the judgment and skills to monitor for threats, assess and prioritise vulnerabilities, harden infrastructure and respond to incidents. The programme is structured around focused modules and practical sprints, with every project tied to a real organisational scenario.

Tools and languages

WazuhElastic StackOpenVASNessusWiresharkpfSenseiptablesSnortSuricataMITRE ATT&CKOpenSSLGPGBurp SuiteOWASP WebGoatDVWAREMnuxPython

Core modules

01Cyber Security Foundations & Landscape

Your team gains a clear view of where the organisation is exposed, mapping information assets, network architecture and existing controls, and delivering a first security assessment you can act on.

02Threats, Actors & Social Engineering

Staff learn which threat actors realistically target your sector and how, so phishing and social engineering get caught earlier and reported in terms the business understands.

03Vulnerabilities, Attacks & Assessment

Learners run and score their own vulnerability scans, turning raw findings into a prioritised remediation plan that says what to fix first and why. The module also covers AI and LLM-specific risks.

04Identity, Data Protection & Asset Management

Access creep and unmanaged assets get brought under control as staff configure role-based access, enforce MFA, classify data and learn to spot insider threat patterns in logs.

05Cryptography

Your team learns to encrypt data properly, manage keys and certificates, and verify integrity, closing the gaps that expired certificates and weak TLS settings tend to leave open.

06Hardening, Network Security & Monitoring

Staff harden servers against CIS benchmarks, configure firewalls and intrusion detection, and deploy a working SIEM, so security events get seen in real time rather than discovered later.

07Security Architecture, Resilience & Change Management

Learners design segmented, Zero Trust network architectures and build disaster recovery plans with realistic RTO and RPO targets, reducing how much damage a single incident can do.

08Incident Response & Digital Forensics

Your organisation gains a rehearsed response capability as staff run tabletop exercises, capture forensic evidence, reconstruct timelines and report to both technical and executive audiences.

09GRC, Compliance & Security Awareness

Compliance work becomes routine rather than reactive as learners build quantified risk registers, map policies to UK legislation, assess vendors and run phishing awareness campaigns with measurable results.

10Capstone Project & Security+ Preparation

Every learner delivers an integrated security assessment of a real environment and presents a professional portfolio, while completing timed Security+ practice exams with targeted revision.
  • End Point Assessment (EPA)

    The programme concludes with an independent End Point Assessment. Apprentices present a portfolio of projects and complete scenario-based tasks to demonstrate their competence. By this stage they have already delivered real improvements at work, so the EPA serves as formal recognition of that. Passing earns the nationally recognised Level 3 Cyber Security Technician qualification, which aligns with Associate membership of BCS, The Chartered Institute for IT.

Book a discovery call

Schedule a 20-minute call with our consultant.

Understand how the Cyber Security programme works
Explore how it could reduce risk across your teams
Confirm Apprenticeship Levy funding eligibility and next steps
Number of employees based in the UKHow did you first find out about Boom Training?

How different industries put these skills to work

Meet regulatory expectations without adding headcount

  • Maintain risk registers with quantitative analysis that stand up to scrutiny.

  • Run vendor and third-party security assessments in-house.

  • Evidence control effectiveness for audits and client due diligence.

How Boom Training works

Boom’s blended learning model combines the flexibility of online education with the effectiveness of face-to-face learning.

  • Mastery-based learning for stronger outcomes

    Employees progress only after demonstrating mastery of each topic, ensuring deep understanding before moving forward.

  • Hands-on, project-based approach

    Training is built around real-world projects, simulating actual business scenarios to reinforce practical skills.

  • Peer-to-peer learning

    Learners review each other’s work, strengthening their own understanding while improving critical thinking and communication skills.

  • 1:1 mentorship and unlimited support

    Learners receive personalised support from industry experts with 5+ years of experience. They also get access to a global network of 3,000+ peers and 140+ mentors, ensuring faster learning and deeper insights.

Dozens of mentors from top global companies

Your employees will get 1:1 feedback on every project from industry mentors with 5+ years’ experience at companies like Google, Spotify and Meta. That means they build the exact skills modern businesses demand, with guidance from people who use them every day.

What our customers say about us

We have to be at the competitive edge to keep performing. Being leaders in AI and training our people feels like exactly the right moment — and we chose Boom Training because they've provided us with the capability we believe we need over the next three to four years.
Andrew Jones
President @ ASR Group (Tate & Lyle Sugars) (Europe)
There's a risk to not upskilling teams in AI. We want to give our workforce the confidence and competence to be ready — and Boom Training's specialisation in AI, combined with the interactive platform and mentor support throughout, made them the right partner for us.
Gaynor Powley
Senior Director, Human Resources @ ASR Group (Tate & Lyle Sugars)

FAQ

Who can enrol?

This programme is open to employees who are employed in England and work 30+ hours per week. It is designed for people whose role involves IT systems, data or security responsibilities and who can commit a minimum of 6 hours per week to off-the-job training. No prior cyber security or coding experience is required. The role does need to give the apprentice real first-line security duties to apply, and we will help you shape that if it does not yet.

What does it cost?

The programme is valued at £11,000 and is fully funded through the Apprenticeship Levy for Levy-paying employers. There are no additional training fees for eligible organisations. If your company does not pay into the Levy, you may be asked to contribute a co-investment fee of 5% of the training cost. In some cases this can also be covered through a Levy transfer from another employer. Our team can advise on funding options and eligibility as part of an initial conversation.

How much time is required?

The apprenticeship requires a minimum of 6 hours per week of off-the-job training, around 450 hours across the programme. There is no classroom attendance and no rigid timetables, making it easier for employees to balance learning with day-to-day responsibilities.

What support will employees receive?

Each learner is supported by a personal tutor providing regular one-to-one check-ins, and technical mentors who review projects and provide practical, industry-grounded feedback. They also receive structured learning materials, clear milestones and ongoing guidance.

What qualification will my staff achieve?

On completion you will earn the nationally recognised Level 3 Cyber Security Technician qualification, worth £11,000, and recognised well beyond your current employer. You can also add an optional CompTIA Security+ certification. Please note that the exam fees are not included in the apprenticeship.

Ready to build security capability across your teams?

Book a free discovery call today. We will check levy eligibility and give you tailored advice on building security capability in your organisation.