#1 · BSBCRT51230 hrs
Originate and Develop Concepts
Generate, evaluate and refine new ideas for products, services and workflows. Move from raw concept to a structured, testable proposal.
What you'll learn
IdeationConcept DesignCritical Thinking
A practitioner-led program built around real platforms — SIEMs, cloud-native security, identity, IR playbooks and secure-by-default architecture. Complete all five Group G units and your testamur carries the Cyber Security specialisation.
20
Total units
980
Nominal hours
6
Core units
14
Electives
Program at a glance
A practitioner-first curriculum. Every unit comes with the platforms you'll touch and the outcomes you'll be able to deliver on day one of the job.
6 units · the foundation every graduate needs
Ethics, leadership, client management and strategic ICT — the universal skills that wrap around every specialisation.
Generate, evaluate and refine new ideas for products, services and workflows. Move from raw concept to a structured, testable proposal.
What you'll learn
Drive a security-first culture. Plan awareness campaigns, deliver training, and embed best practices across teams.
What you'll learn
Lead small teams through projects: set goals, run stand-ups, resolve conflict, and report progress to stakeholders.
What you'll learn
Translate business strategy into ICT requirements. Conduct gap analysis and propose technology roadmaps aligned to organisational goals.
What you'll learn
Navigate IP rights, privacy law, and ethical frameworks in technology workplaces. Handle data lawfully under the Privacy Act and APPs.
What you'll learn
Run a structured incident & support workflow — triage, escalate, document, and close out client issues against SLAs.
What you'll learn
Group G · earns the testamur specialisation
Five units that turn you into a defender — threat intelligence, critical-infrastructure protection, security architecture, incident response and disaster recovery.
Hunt for threats: collect IOCs, correlate signals across logs, and produce actionable threat intelligence reports.
What you'll learn
Defend systems classified as critical infrastructure under the SOCI Act. Build risk registers, controls and obligations reporting.
What you'll learn
Design secure-by-default architectures. Apply SABSA / Zero-Trust principles and document architecture decisions.
What you'll learn
Author end-to-end IR plans: playbooks for ransomware, BEC, data exfil. Run tabletop exercises and post-incident reviews.
What you'll learn
Build and rehearse DR / BCP plans. Set RTO/RPO targets, test failover, and align with business continuity strategy.
What you'll learn
5 units · 330 nominal hours
Identity, detection, data protection, incident response and pipelines — everything you need to operate securely on AWS, Azure or GCP.
Implement IAM at scale: roles, policies, MFA, SSO and federated identity across major cloud providers.
What you'll learn
Stand up cloud-native detection: log pipelines, alert rules, and 24/7 monitoring for cloud workloads.
What you'll learn
Harden cloud infra: encryption, network segmentation, data classification, key management and DLP.
What you'll learn
Lead cloud incident response: forensic acquisition from snapshots, containment in IaC, and lessons-learned reports.
What you'll learn
Ship secure software with automated pipelines: build, test, scan, and deploy across environments.
What you'll learn
4 units · 240 nominal hours
Lock down the network edge, ship secure software in agile cycles, and manage enterprise risk end-to-end.
Run a hardened network: segmentation, IDS/IPS, secure remote access, and ongoing vulnerability management.
What you'll learn
Design layered perimeter defences: firewalls, DMZs, ZTNA gateways and inspection at the edge.
What you'll learn
Ship features in short cycles: user stories, sprints, code reviews and continuous delivery.
What you'll learn
Identify, assess and treat enterprise risks. Build risk registers and present treatment options to leadership.
What you'll learn
Platforms & tooling
Every tool below is touched in at least one unit — from SIEMs and cloud-native security to ticketing, IaC and code-quality platforms.
61 platforms across 20 units · 980 nominal hours