Every networking and security professional must have an unshakeable command of how data moves across networks. This module builds that foundation - covering the OSI and TCP/IP models, IP addressing, subnetting, and the core protocols that govern every packet on the internet.

Network infrastructure engineering requires hands-on command of routers and switches. This module covers enterprise-grade configuration using Cisco IOS - from VLANs and trunking to dynamic routing protocols and spanning tree, all practised in GNS3 and Cisco Packet Tracer simulations.

Security is built on mathematical foundations. This module introduces the core security principles, cryptographic algorithms, and protocols that protect data in transit and at rest - from symmetric and asymmetric encryption to TLS handshakes, digital certificates, and VPN tunnelling.

Perimeter security is the first line of defence. This module teaches you to design and configure layered security at the network edge - from stateful firewalls and DMZ architectures to intrusion detection systems and web application firewalls that protect against both known and novel threats.

Penetration testing is the practice of legally simulating attacks to uncover vulnerabilities before real attackers do. This module covers the complete pentest methodology - from scoping and reconnaissance through exploitation and post-exploitation to professional report writing.

The Security Operations Centre is the nerve centre of any enterprise security team. This module trains you to work as a SOC analyst - ingesting and correlating logs, hunting for threats using MITRE ATT&CK, triaging alerts and escalating incidents through defined workflows.

When a breach occurs, the speed and quality of the response determines the outcome. This module covers the full digital forensics and incident response (DFIR) process - from evidence acquisition and memory forensics to malware analysis and writing the post-incident report.

Modern infrastructure lives in the cloud, and securing it requires an entirely different skillset from on-premises networking. This module covers cloud network design and security on AWS and Azure - VPCs, IAM, security groups, compliance monitoring, and shared responsibility model.

Modern enterprise security is governed by Zero Trust principles and international compliance frameworks. This module covers the strategic side of security - designing Zero Trust networks, implementing governance frameworks like ISO 27001, and managing security risk at an organisational level.

The capstone brings every skill from across the diploma into one end-to-end security engagement. You will conduct a full security audit of a simulated enterprise environment - performing reconnaissance, vulnerability assessment, exploitation, and producing a professional-grade report with remediation recommendations.