About the Skills Programme

The Skills Programme: Cybersecurity Defender (SP-220330) is a QCTO-aligned programme that prepares learners to protect, detect and respond to cybersecurity threats, intrusions and attacks in an organisational environment. At 60 credits over 75 days it is a substantial commitment, and it responds directly to South Africa's shortage of defensive security capability — practitioners who can recognise an attack in progress, contain it, and account for what they did afterwards.

The programme integrates theoretical knowledge with supervised laboratory work across the full defensive cycle — from cyber defence fundamentals and the threat landscape, through how attacks actually work, to security controls, monitoring, incident response and authorised penetration testing. On completion, learners are able to recognise social engineering, physical vulnerability and malware attacks by mechanism and indicator, select and configure security controls appropriate to a risk, monitor and analyse network traffic to distinguish normal from abnormal, detect and contain an intrusion, respond to and document an incident, and conduct authorised security testing within a defined scope with proper evidence handling.

Purpose

The purpose of this skills programme is to prepare a learner to defend an organisation's systems and data against cybersecurity threats, intrusions and attacks. Some of what the programme teaches describes how attacks work, because you cannot defend against something you do not understand. That knowledge carries an obligation, and the obligation is not a formality: in South Africa the difference between a security professional and a criminal offence is authorisation, and nothing else.

Who Should Enrol?

This programme is designed for people moving into defensive security roles, as well as IT staff who already carry security responsibility without formal training. It is well suited to:

• IT support technicians and network administrators moving into security.
• Junior security analysts and SOC team members seeking assessed competence.
• Systems administrators responsible for patching, access control and monitoring.
• IT staff in organisations without a dedicated security function.
• Employers building internal defensive capability rather than relying entirely on outsourced security.

Entry Requirements

Learners must hold an NQF Level 3 qualification with literacy and numeracy, or demonstrate equivalent competence, with the ability to read, write and communicate in English at that level. Basic computer literacy is required: file management, installing software, and comfort with a command line at an introductory level. All practical work is performed in the accredited Tonex laboratory, against targets the laboratory owns, under direct facilitator supervision. Recognition of Prior Learning for access is available in accordance with the QCTO RPL Policy and must be lodged before the programme commences; candidates working in IT support or network administration are frequently strong RPL candidates for parts of KM-03.

Conditions of enrolment. Learners apply nothing taught on this programme to any system they do not own, unless they hold written authorisation from somebody entitled to give it, covering exactly that system, before they begin. Techniques taught in the laboratory are not used outside it. Under the Cybercrimes Act 19 of 2020, unlawful access to a computer system or data is a criminal offence carrying a fine or imprisonment — curiosity is not a defence, being a student is not a defence, and intending no harm is not a defence. A learner who breaches these conditions is removed from the programme, and where the conduct appears criminal, Tonex will report it.

Career Opportunities

Graduates of this programme are equipped for roles carrying defensive security responsibility. Outcomes include:

• Junior security analyst or SOC analyst.
• IT security administrator or security operations support.
• Network or systems administrator with formal security duties.
• Incident response team member.
• Foundation for further study toward security specialisations and NQF 5 IT qualifications.