CBIT Associate Award in Cyber Security Management (Level 5) with Integrated Real-world Experience

The industry projects are carefully curated to immerse students in real-world cybersecurity challenges. The project is designed to develop your technical expertise, creative problem-solving skills, and teamwork abilities in a professional cybersecurity environment. Examples of projects include:

Web Application Vulnerability Assessment Project

This project engages learners in the security assessment of deliberately vulnerable web applications. Interns identify, exploit, and mitigate real-world threats using widely adopted cybersecurity tools. The focus is on hands-on experience with ethical hacking methodologies, vulnerability scanning, and web application hardening aligned with OWASP Top 10.

Tech Stack

Key Learning Outcomes

• Conducting vulnerability scanning and penetration testing
• Exploiting common web vulnerabilities (e.g., SQL Injection, XSS, CSRF)
• Understanding and applying OWASP Top 10 security principles
• Securing web applications against file inclusion, brute force, and session attacks
• Writing remediation reports and documenting exploited weaknesses

During the project, learners follow a structured path that reflects the workflow of a cybersecurity team. Each phase is designed to provide practical, hands-on experience with tools and methods commonly used in the field:

• Threat Identification and Planning: Begin by analysing web applications to identify potential security risks. Use tools like Kali Linux to map out vulnerabilities and plan testing strategies in line with OWASP Top 10 principles.
• Penetration Testing and Exploitation: Conduct targeted tests to uncover weaknesses such as SQL injection, XSS, CSRF, and file inclusion. Interns use Burp Suite and Metasploit to simulate attacks and study exploitation techniques in a controlled environment.
• Remediation and Hardening: Apply mitigation strategies to address the vulnerabilities found. This includes implementing best practices for session management, authentication, and input validation, with a focus on strengthening real-world web application security.
• Validation and Security Review: Perform security audits and retesting to confirm that vulnerabilities have been resolved. Document findings, validate fixes, and align the application with security standards and OWASP recommendations.
• Final Testing and Reporting: Run final validation checks in a test environment to ensure all security controls are functioning. Interns compile a concise security report, outlining discovered issues, remediation steps, and verification outcomes.

Throughout the internship, you will have the opportunity to take on various roles within the cybersecurity project team, including:>

• Security Analyst: Identify vulnerabilities within web applications, using tools like Nmap and Kali Linux to perform vulnerability scans and assess system security.
• Penetration Tester: Conduct penetration testing on web applications using tools such as Burp Suite and Metasploit to exploit and understand the depth of vulnerabilities.• 
• Security Architect: Oversee the security design of web applications, ensuring that the systems are built with robust security measures such as secure authentication, session management, and protection against common threats like SQL injection and XSS.
• Compliance Auditor: Review security practices and systems against industry standards like OWASP to ensure the web application is compliant with security protocols, such as preventing security misconfigurations and ensuring proper file inclusion practices.

The programme evaluation process is designed to ensure that learners acquire the practical and theoretical knowledge necessary for success in their professional careers. By integrating the live projects evaluation with theoretical components, we provide a holistic approach to learning and development that emphasises both real-world application and academic rigor.

The Project Evaluation is guided by the International Point System, a comprehensive framework that standardises learner performance assessment during live projects. This system not only motivates students to excel but also ensures they are well-prepared for future professional challenges by promoting the completion of key tasks and objectives. The following components are essential for students to qualify for placement and are evaluated rigorously:

• Hacker Rank & Stack Overflow Participation: Students must achieve a score above 1000 on Hacker Rank and contribute by providing 10 answers on Stack Overflow. This fosters problem-solving skills and engagement with the global programming community.
• Project Involvement: Active participation within the selected project is required. Students are expected to present the project and implement CI/CD processes for hosting the project, demonstrating their technical and project management skills.
• Behavior and Attendance: Punctuality, consistent attendance, and active participation in sessions are critical. These aspects reflect the student’s professionalism and commitment to their responsibilities.
• GitHub Maintenance: Students must create and maintain repositories for session topics and projects on GitHub. This requirement ensures they develop skills in version control and collaborative development.
• Community Engagement: Engagement with programming communities on Slack and Discord is encouraged. This not only expands their professional network but also enhances their collaborative and communication skills.
• Communication Skills: Effective communication is crucial. Students must demonstrate their ability to convey ideas clearly and professionally in both written and verbal forms.
• Professionalism & Attitude: A positive, respectful demeanor, reliability, and a strong work ethic are essential attributes. These qualities are consistently evaluated throughout the internship period.
• Quality of Work: Delivering accurate, thorough, and high-standard results in all tasks and projects is mandatory. This aspect is critical to ensuring that students produce work that meets industry standards.

In addition to the practical aspects covered in the projects, learners will complete a series of theoretical assessments that align with their learning modules. Each module requires learners to submit a written assignment, report, or mini-project through the MyLearnDirect learning portal. These submissions are carefully assessed by their tutor.