Training

Taught in front of you, with your hands on the keyboard.

Instructor-led and live, in small groups, with roughly half the time spent in the lab. Face to face in Cambridge, at your site, or online. Not a recorded video course, and not a room of thirty people moving at the pace of the average. Three structured programmes, and bespoke delivery where none of them fits.

Eight weeks, face to faceCyber Security Career PathwayFrom basic computer literacy to Security+ certified and able to work a SOC alert queue. 208 contact hours, taught face to face in a small group.~50% time in the lab9 modulesSee the curriculum →

Five weeks, face to faceGovernance, Risk and Compliance PractitionerBuild a management system, run an internal audit, and survive a certification audit. 130 contact hours, workshop-led, producing real documents.~60% time in workshop7 modulesSee the curriculum →

Four weeks, face to faceAI Security and GovernanceSecuring and governing AI systems. 104 contact hours covering how AI is attacked and defended, and how it is governed against the frameworks now in force.5 modules0 programming requiredSee the curriculum →

How they fit together

The Career Pathway takes someone from basic computer literacy to employable in a security operations team. AI Security and Governance starts where that finishes, and assumes you already have security fundamentals, so Career Pathway graduates are its natural intake, as are working analysts who have never had to cover AI.

Start here

New to security

Career Pathway, eight weeks, ending in Security+ and SOC-ready skills.

Or here

Responsible for compliance

GRC Practitioner, five weeks, if you have been handed ISO 27001 or an audit programme.

Or here

Already working in security

AI Security and Governance, four weeks, if you now have to cover AI systems.

Then

Neither quite fits

Bespoke delivery, scoped to your team and your estate.

Bespoke

Built for your team, your estate

Most organisations do not need a whole programme. They need three days on the thing that is actually a problem, taught against their own systems rather than a generic lab. That is scoped after a short consultancy conversation: what your team already knows, what they need to be able to do, and what your environment actually looks like.

Commonly asked for

A condensed two or three day AI security course for a corporate team.
Secure development and prompt injection for an engineering team shipping AI features.
SOC uplift: detection engineering, KQL or SPL, and ATT&CK mapping against your own log sources.
ISO 27001 or ISO 42001 internal auditor training ahead of a certification programme.
A board or leadership session on AI risk, with live demonstrations rather than slides.

How it is scoped

A short consultancy call, face to face where practical, at no charge.
A baseline of where the team actually is, rather than where the job titles suggest.
Labs built against your stack, so the practice transfers on the Monday.
A written outline you approve before anything is booked.
Delivery at your site, in Cambridge, or online, whichever suits the team.

Discuss bespoke training

How it is taught

Instructor-led, live

Face to face in Cambridge, at your site, or online. Either way a person is teaching, and questions get answered when they are asked rather than in a forum three days later.

Small groups

The pace adapts to each person. A baseline diagnostic on day one sets the actual starting point rather than an assumed one.

Lab-led

Roughly half of contact time is hands on. The longer weekly session is entirely practical, because real lab work needs uninterrupted blocks.

Your own lab, kept

Most programmes lend you a cloud lab and take it back on the last day. Here you are taught to build the environment yourself, on your own machine, so you can still practise a year later.

Portfolio out

You leave with work you built and can show: a lab estate, a governance pack, a documented exercise. In interviews that does more than a badge.