Skip to programme
+94 112 515 215 +94 7 8100 8100 info@nextgencampus.edu.lk
LMS Portal Certificate Verify
NextGen Campus logo NEXTGEN CAMPUSTowards the Next Generation of IT
AI-generated Certificate in AI-Driven Cyber Security and Ethical Hacking campaign scene

AI-Driven Cyber Security and Ethical Hacking

Duration
6 months
Delivery
Blended
Total learning
496 hours

Career Outcomes

Career Opportunities & Progression

  • Junior Security Analyst
  • SOC Analyst Trainee
  • Junior Penetration Tester
  • Vulnerability Assessment Assistant
  • Security Monitoring Assistant
  • Incident Response Trainee

Before you apply

Your programme at a glance

Apply / enquire
Qualification
Certificate (non-NVQ)
Awarding institution
NextGen Campus · Academic Transcript
Duration
Six months (26 weeks; 24 teaching weeks)
Delivery
Blended learning – instructor-led lectures, NextGen LMS laboratories on an isolated virtual cyber range and a physical capstone
Class schedule
Tuesday 6.30 PM – 11.30 PM (4 contact hours and a 1-hour break)
Lecture / guided learning
96 hours – instructor-led
LMS laboratory hours
300 hours – Kali Linux, exploitation, web, SIEM and AI-security labs on an isolated cyber range via the NextGen LMS
Student Project Book
60 hours – including the Management Module
Modules
42 taught modules + Final Enterprise Project (M43)
Entry requirements
G.C.E. O/L with Mathematics and English passes, plus basic computer literacy. Basic networking is recommended. An ethical conduct agreement is required before labs.
Next intake
Confirm available batches with admissions

Class schedules follow the syllabus; confirm the batch timetable with admissions.

Complete Programme Map

Course Content Architecture

42 modules across 6 learning phases. Select a module to read its full curriculum.

42Taught modules
6Learning phases
216Syllabus topics
10Career directions
Six months (26 weeks; 24 teaching weeks)Programme duration
NextGen CampusAwarding institution
01 · Programme foundations
02 · Learning domains
03 · Hands-on practice
Map the CIA triad to real business scenariosMap protocols to layers and portsHarden a Windows workstation to a checklistComplete guided command-line exercisesBuild the isolated lab used for the rest of the courseClassify sample threats by type and impactDesign a layered defence for a small businessDraft a rules-of-engagement document

Guided laboratories, practical activities and a Student Project Book build evidence of your learning.

04 · Project, portfolio & progression
Professional portfolioDocumented laboratories, project evidence and the Management Module
Career directionsJunior Security Analyst · SOC Analyst Trainee · Junior Penetration Tester · Vulnerability Assessment Assistant · Security Monitoring Assistant
Further opportunitiesIncident Response Trainee · Digital Forensics Assistant · Network Security Technician · Endpoint Security Support Assistant · Security Governance and Reporting Assistant
DeliveryBlended learning – instructor-led lectures, NextGen LMS laboratories on an isolated virtual cyber range and a physical capstone
AssessmentContinuous assessment, practical work, final project and Student Project Book
CompletionNextGen Campus qualification and Academic Transcript on successful completion

42 modules · Full syllabus

Complete Curriculum

Explore every phase of the programme, then expand the modules below for the complete syllabus, outcomes and practical work.

Phase 1 — Security Foundations

  1. Introduction to Cyber Security
  2. Networking Fundamentals for Security
  3. Windows Security Fundamentals
  4. Linux Fundamentals for Cyber Security
  5. Virtual Cyber-Security Laboratory Setup
  6. Cyber Threats and Attack Methods
  7. Security Principles and Defence in Depth

Phase 2 — Ethical Hacking & Security Assessment

  1. Ethical Hacking Principles
  2. Ethical Hacking Methodology
  3. Open-Source Intelligence
  4. Network Reconnaissance
  5. Network Scanning
  6. Enumeration Fundamentals
  7. Vulnerability Assessment
  8. Vulnerability Scanning Tools
  9. Risk Classification and Prioritisation
  10. Penetration-Testing Fundamentals

Phase 3 — Network & Infrastructure Defence

  1. Kali Linux Security Tools
  2. Network Traffic Analysis
  3. Firewall Security
  4. Intrusion Detection and Prevention
  5. Virtual Private Networks
  6. Wireless Network Security

Phase 4 — Access, Endpoint, Server & Web Security

  1. Password and Authentication Security
  2. Identity and Access Management
  3. Endpoint Security
  4. Server Security and Hardening
  5. Web-Application Security Fundamentals
  6. Common Web-Application Risks
  7. Secure Web-Application Practices

Phase 5 — Threat Detection, Monitoring & Response

  1. Social Engineering and Phishing Awareness
  2. Malware and Ransomware Awareness
  3. Security Monitoring and SIEM Fundamentals
  4. Log Analysis
  5. Security Operations Centre Fundamentals
  6. Incident Response
  7. Digital Forensics Fundamentals

Phase 6 — Cloud, AI & Governance

  1. Cloud-Security Fundamentals
  2. AI in Cyber Security
  3. AI-Assisted Threat Analysis
  4. AI Security and Responsible Use
  5. Cyber-Security Governance and Reporting

Phase 1 — Security Foundations

M01Introduction to Cyber Security2 lecture h · 6.25 lab h

Understand the purpose of cyber security and how organisations protect systems, networks, applications and data. Students explore common security terminology, professional roles and the confidentiality, integrity and availability principles.

Syllabus Content

  • Purpose of cyber security
  • CIA triad
  • Security terminology
  • Threats, vulnerabilities and risk
  • Security roles and the industry

Learning Outcomes

  • Explain the purpose of cyber security and the CIA triad
  • Describe common security terminology and threats
  • Outline security roles and career paths

LMS Laboratories

  • Map the CIA triad to real business scenarios
  • Build a personal security glossary on the LMS

AI Integration

  • Use an AI assistant to explain security terms, verified against trusted sources

Syllabus alignment: CompTIA Security+ aligned

M02Networking Fundamentals for Security2 lecture h · 6.25 lab h

Learn how devices communicate through TCP/IP networks. Students study IP addressing, ports, protocols, DNS, routing, switching and network devices to understand how traffic can be analysed and protected.

Syllabus Content

  • OSI and TCP/IP models
  • IP addressing and subnetting
  • Ports and protocols
  • DNS and routing
  • Switches, routers and firewalls

Learning Outcomes

  • Explain the TCP/IP model and common protocols
  • Describe IP addressing, ports and DNS
  • Explain how switching and routing move traffic

LMS Laboratories

  • Map protocols to layers and ports
  • Trace a packet through a small network in a simulator

AI Integration

  • AI-assisted explanation of protocols and packet flows

Syllabus alignment: CompTIA Security+ aligned

M03Windows Security Fundamentals2 lecture h · 6.25 lab h

Explore Windows users, groups, permissions, services, updates, firewalls and event logs. Students learn how secure configurations reduce common operating-system risks.

Syllabus Content

  • Users, groups and NTFS permissions
  • Services and startup
  • Windows Update
  • Windows Defender Firewall
  • Event Viewer and security logs

Learning Outcomes

  • Manage Windows users, groups and permissions
  • Configure updates, services and the firewall
  • Read Windows event logs for security events

LMS Laboratories

  • Harden a Windows workstation to a checklist
  • Find security events in Event Viewer

AI Integration

  • AI-assisted interpretation of Windows event logs

Syllabus alignment: CompTIA Security+ aligned

M04Linux Fundamentals for Cyber Security2 lecture h · 6.25 lab h

Develop practical Linux skills using the command line. Students manage files, permissions, users, processes, services, network settings and logs within a controlled environment.

Syllabus Content

  • Shell navigation and file management
  • Users, groups and file permissions
  • Processes and services (systemd)
  • Networking commands
  • Logs under /var/log

Learning Outcomes

  • Navigate and manage files from the Linux shell
  • Manage users, permissions, processes and services
  • Inspect network settings and system logs

LMS Laboratories

  • Complete guided command-line exercises
  • Investigate a Linux system from the logs

AI Integration

  • AI-assisted help with shell commands, verified by the learner

Syllabus alignment: CompTIA Security+ aligned

M05Virtual Cyber-Security Laboratory Setup2 lecture h · 6.25 lab h

Build a safe virtual laboratory using approved virtualisation technologies. Students configure isolated Windows, Linux and security-testing machines for practical training.

Syllabus Content

  • Virtualisation with VirtualBox/VMware
  • Host-only and internal networks
  • Snapshots and safe rollback
  • Lab rules and isolation
  • Code of conduct

Learning Outcomes

  • Build an isolated virtual laboratory
  • Configure Windows, Linux and Kali machines
  • Apply lab rules and the code of conduct

LMS Laboratories

  • Build the isolated lab used for the rest of the course
  • Configure host-only networking and snapshots

AI Integration

  • AI-assisted troubleshooting of lab setup issues

Syllabus alignment: CompTIA Security+ aligned

M06Cyber Threats and Attack Methods2 lecture h · 6.25 lab h

Study malware, ransomware, phishing, social engineering, credential attacks and unauthorised access. Students learn how these threats affect organisations and how layered controls reduce risk.

Syllabus Content

  • Malware and ransomware
  • Phishing and social engineering
  • Credential attacks
  • Unauthorised access
  • Layered controls

Learning Outcomes

  • Describe common threats and attack methods
  • Explain how threats affect organisations
  • Match layered controls to threats

LMS Laboratories

  • Classify sample threats by type and impact
  • Map controls to a threat scenario

AI Integration

  • AI-assisted threat classification and summaries

Syllabus alignment: CompTIA Security+ aligned

M07Security Principles and Defence in Depth4 lecture h · 12.5 lab h

Understand least privilege, Zero Trust concepts, segmentation, access control and layered security. Students learn how multiple controls work together to protect organisational systems.

Syllabus Content

  • Least privilege
  • Zero Trust principles
  • Segmentation
  • Access control models
  • Defence in depth

Learning Outcomes

  • Apply least privilege and Zero Trust concepts
  • Design network segmentation and access control
  • Explain how layered controls combine

LMS Laboratories

  • Design a layered defence for a small business
  • Review a network for segmentation gaps

AI Integration

  • AI-assisted review of a defence-in-depth design

Syllabus alignment: CompTIA Security+ aligned

Phase 2 — Ethical Hacking & Security Assessment

M08Ethical Hacking Principles2 lecture h · 6.25 lab h

Learn the legal, ethical and professional responsibilities of security testing. Students study authorisation, scope, evidence handling, reporting and responsible disclosure.

Syllabus Content

  • Legal and ethical responsibilities
  • Authorisation and scope
  • Rules of engagement
  • Evidence handling
  • Responsible disclosure
  • Computer Crimes Act No. 24 of 2007

Learning Outcomes

  • Explain the legal and ethical basis of testing
  • Define authorisation, scope and rules of engagement
  • Apply evidence handling and responsible disclosure

LMS Laboratories

  • Draft a rules-of-engagement document
  • Review a disclosure case study

AI Integration

  • AI-assisted drafting of engagement paperwork, reviewed by the learner

Syllabus alignment: PenTest+ - CEH-style methodology

M09Ethical Hacking Methodology2 lecture h · 6.25 lab h

Explore the main stages of an authorised security assessment, including planning, reconnaissance, scanning, analysis, controlled validation, reporting and remediation.

Syllabus Content

  • Planning and scoping
  • Reconnaissance
  • Scanning
  • Analysis
  • Controlled validation
  • Reporting and remediation

Learning Outcomes

  • Describe the stages of an authorised assessment
  • Plan an engagement end to end
  • Link each stage to its deliverables

LMS Laboratories

  • Plan a full engagement for a lab scenario
  • Produce a stage-by-stage checklist

AI Integration

  • AI-assisted planning checklists, verified against the methodology

Syllabus alignment: PenTest+ - CEH-style methodology

M10Open-Source Intelligence4 lecture h · 12.5 lab h

Learn how publicly available information can reveal organisational risks. Students use responsible information- gathering methods while respecting privacy and legal boundaries.

Syllabus Content

  • OSINT sources and methods
  • DNS and domain information
  • Social-media exposure
  • Metadata
  • Privacy and legal limits

Learning Outcomes

  • Gather open-source information responsibly
  • Identify organisational exposure from public data
  • Respect privacy and legal boundaries

LMS Laboratories

  • Run authorised OSINT on a fictional organisation
  • Document exposure and recommendations

AI Integration

  • AI-assisted OSINT summaries, with sources verified

Syllabus alignment: PenTest+ - CEH-style methodology

M11Network Reconnaissance2 lecture h · 6.25 lab h

Understand how security professionals identify hosts, networks, services and exposed systems within an authorised scope. Students document discovered assets and possible risks.

Syllabus Content

  • Host discovery
  • Network mapping
  • Service identification
  • Asset documentation
  • Scope control

Learning Outcomes

  • Identify hosts, networks and services in scope
  • Map an authorised network
  • Document assets and risks

LMS Laboratories

  • Map an authorised lab network
  • Produce an asset inventory

AI Integration

  • AI-assisted asset documentation

Syllabus alignment: PenTest+ - CEH-style methodology

M12Network Scanning2 lecture h · 6.25 lab h

Use approved scanning tools to identify active hosts, open ports and services within controlled laboratories. Students learn how scan results support vulnerability assessment.

Syllabus Content

  • Nmap scan types
  • Port and service detection
  • Timing and safety
  • Reading scan output
  • From scanning to assessment

Learning Outcomes

  • Scan for active hosts, ports and services
  • Interpret scan output
  • Use scans to support vulnerability assessment

LMS Laboratories

  • Scan and enumerate lab targets with Nmap
  • Document open ports and services

AI Integration

  • AI-assisted interpretation of scan results

Syllabus alignment: PenTest+ - CEH-style methodology

M13Enumeration Fundamentals2 lecture h · 6.25 lab h

Learn how security professionals gather detailed information about users, shares, services and system configurations. Students practise safe enumeration in simulated environments.

Syllabus Content

  • SMB and share enumeration
  • User and group enumeration
  • Service banners
  • SNMP basics
  • Recording findings

Learning Outcomes

  • Enumerate users, shares and services
  • Gather configuration detail safely
  • Record enumeration findings

LMS Laboratories

  • Enumerate a lab server
  • Build an enumeration findings sheet

AI Integration

  • AI-assisted organisation of enumeration notes

Syllabus alignment: PenTest+ - CEH-style methodology

M14Vulnerability Assessment2 lecture h · 6.25 lab h

Identify weaknesses in systems, applications and network devices using authorised assessment methods. Students learn how to validate findings and avoid inaccurate conclusions.

Syllabus Content

  • Assessment methods
  • Common weaknesses
  • Validation and false positives
  • Evidence
  • Assessment reporting

Learning Outcomes

  • Identify weaknesses across systems and devices
  • Validate findings to remove false positives
  • Record assessment results clearly

LMS Laboratories

  • Assess a lab environment and validate findings
  • Write a vulnerability assessment record

AI Integration

  • AI-supported triage of findings, verified by the learner

Syllabus alignment: PenTest+ - CEH-style methodology

M15Vulnerability Scanning Tools2 lecture h · 6.25 lab h

Gain exposure to vulnerability-scanning platforms used to identify outdated software, insecure services and configuration weaknesses. Students review findings and prioritise remediation.

Syllabus Content

  • Vulnerability scanners (OpenVAS/Greenbone)
  • Scan configuration
  • Reading reports
  • False positives
  • Remediation priorities

Learning Outcomes

  • Run authorised vulnerability scans
  • Review and interpret scanner output
  • Prioritise remediation

LMS Laboratories

  • Run a scan against lab targets
  • Prioritise the findings for remediation

AI Integration

  • AI-assisted summarisation of scan reports

Syllabus alignment: PenTest+ - CEH-style methodology

M16Risk Classification and Prioritisation2 lecture h · 6.25 lab h

Learn how vulnerabilities are classified according to likelihood, impact and business importance. Students prepare clear risk summaries for technical and non-technical audiences.

Syllabus Content

  • Likelihood and impact
  • CVSS
  • Business context
  • Risk registers
  • Communicating risk

Learning Outcomes

  • Classify risk by likelihood and impact
  • Prioritise by business importance
  • Communicate risk to any audience

LMS Laboratories

  • Score findings with CVSS
  • Write a risk summary for management

AI Integration

  • AI-assisted drafting of risk summaries

Syllabus alignment: PenTest+ - CEH-style methodology

M17Penetration-Testing Fundamentals4 lecture h · 12.5 lab h

Understand how controlled penetration testing validates whether identified weaknesses could create business risk. Activities remain limited to approved training environments.

Syllabus Content

  • Purpose of penetration testing
  • Controlled validation
  • Exploitation basics (Metasploit)
  • Evidence capture
  • Staying in scope

Learning Outcomes

  • Explain how controlled testing validates risk
  • Safely validate a weakness in the lab
  • Record evidence professionally

LMS Laboratories

  • Validate a known weakness in the lab
  • Capture evidence for a report

AI Integration

  • AI-assisted exploit research, verified against lab evidence

Syllabus alignment: PenTest+ - CEH-style methodology

Phase 3 — Network & Infrastructure Defence

M18Kali Linux Security Tools2 lecture h · 6.25 lab h

Explore the Kali Linux interface and selected tools used for authorised scanning, analysis and testing. Students learn responsible tool selection and documentation.

Syllabus Content

  • Kali interface and tool categories
  • Common tools
  • Responsible tool selection
  • Documentation
  • Updates and maintenance

Learning Outcomes

  • Navigate Kali Linux and its tool categories
  • Select the right tool for a task
  • Document tool use responsibly

LMS Laboratories

  • Use selected Kali tools on lab targets
  • Document tool use and results

AI Integration

  • AI-assisted guidance on tool selection

Syllabus alignment: Security+ - Network+ aligned

M19Network Traffic Analysis2 lecture h · 6.25 lab h

Use Wireshark and related tools to inspect authorised network traffic. Students identify protocols, communication patterns and signs that may require investigation.

Syllabus Content

  • Packet capture
  • Wireshark filters
  • Protocol analysis
  • Communication patterns
  • Indicators of concern

Learning Outcomes

  • Capture and filter traffic in Wireshark
  • Identify protocols and patterns
  • Spot signs that need investigation

LMS Laboratories

  • Analyse captures for anomalies
  • Write investigation notes from a capture

AI Integration

  • AI-assisted explanation of packet captures

Syllabus alignment: Security+ - Network+ aligned

M20Firewall Security2 lecture h · 6.25 lab h

Understand hardware and software firewalls, rule design, network zones and traffic filtering. Students review how misconfigured rules can expose systems.

Syllabus Content

  • Firewall types
  • Rule design
  • Network zones
  • Traffic filtering
  • Common misconfigurations

Learning Outcomes

  • Design firewall rules and zones
  • Filter traffic between zones
  • Identify misconfigured rules

LMS Laboratories

  • Configure firewall rules for a lab network
  • Review a ruleset for exposure

AI Integration

  • AI-assisted firewall rule review

Syllabus alignment: Security+ - Network+ aligned

M21Intrusion Detection and Prevention2 lecture h · 6.25 lab h

Explore how intrusion-detection and prevention systems monitor traffic and generate alerts. Students analyse simulated alerts and recommend suitable response actions.

Syllabus Content

  • IDS vs IPS
  • Signatures and anomalies
  • Alert analysis
  • Tuning
  • Response actions

Learning Outcomes

  • Explain how IDS/IPS monitor traffic
  • Analyse alerts
  • Recommend response actions

LMS Laboratories

  • Deploy and tune an IDS in the lab
  • Analyse simulated alerts

AI Integration

  • AI-assisted alert prioritisation

Syllabus alignment: Security+ - Network+ aligned

M22Virtual Private Networks2 lecture h · 6.25 lab h

Learn how site-to-site and remote-access VPNs protect communication. Students explore encryption, authentication and secure remote-working requirements.

Syllabus Content

  • VPN types
  • IPsec and SSL/TLS
  • Encryption and authentication
  • Remote working
  • VPN weaknesses

Learning Outcomes

  • Explain site-to-site and remote-access VPNs
  • Describe VPN encryption and authentication
  • Apply secure remote-working requirements

LMS Laboratories

  • Configure a VPN between lab sites
  • Test secure remote access

AI Integration

  • AI-assisted VPN configuration review

Syllabus alignment: Security+ - Network+ aligned

M23Wireless Network Security2 lecture h · 6.25 lab h

Understand wireless standards, encryption, access-point security and common configuration weaknesses. Students assess authorised wireless environments and recommend improvements.

Syllabus Content

  • Wi-Fi standards
  • WPA2/WPA3
  • Access-point security
  • Common weaknesses
  • Site assessment

Learning Outcomes

  • Explain wireless standards and encryption
  • Secure access points
  • Assess wireless configuration weaknesses

LMS Laboratories

  • Assess an authorised wireless setup
  • Recommend wireless improvements

AI Integration

  • AI-assisted wireless configuration review

Syllabus alignment: Security+ - Network+ aligned

Phase 4 — Access, Endpoint, Server & Web Security

M24Password and Authentication Security2 lecture h · 6.25 lab h

Explore password policies, multifactor authentication, credential risks and secure authentication practices. Students perform controlled password-strength auditing without targeting unauthorised systems.

Syllabus Content

  • Password policies
  • Multifactor authentication
  • Credential risks
  • Hashing basics
  • Controlled auditing

Learning Outcomes

  • Design password policies and MFA
  • Explain credential risks
  • Audit password strength responsibly

LMS Laboratories

  • Audit password strength on lab accounts
  • Design an authentication policy

AI Integration

  • AI-assisted policy drafting

Syllabus alignment: Security+ - CySA+ aligned

M25Identity and Access Management2 lecture h · 6.25 lab h

Learn how organisations manage users, groups, roles and permissions. Students apply least privilege and role-based access principles to business scenarios.

Syllabus Content

  • Identity lifecycle
  • Groups and roles
  • RBAC
  • Least privilege
  • Access reviews

Learning Outcomes

  • Manage users, groups and roles
  • Apply least privilege and RBAC
  • Design access for a business scenario

LMS Laboratories

  • Design RBAC for a business scenario
  • Run an access review

AI Integration

  • AI-assisted access-model review

Syllabus alignment: Security+ - CySA+ aligned

M26Endpoint Security2 lecture h · 6.25 lab h

Understand antivirus, endpoint detection, system updates, application control, device policies and secure configurations used to protect organisational endpoints.

Syllabus Content

  • Antivirus and EDR
  • Updates and patching
  • Application control
  • Device policies
  • Secure configuration

Learning Outcomes

  • Configure endpoint protection and updates
  • Apply application control and device policies
  • Harden endpoint configurations

LMS Laboratories

  • Harden an endpoint to a baseline
  • Configure application control

AI Integration

  • AI-assisted endpoint hardening checklist

Syllabus alignment: Security+ - CySA+ aligned

M27Server Security and Hardening2 lecture h · 6.25 lab h

Learn how to reduce server risks through updates, service management, permissions, firewall settings, logging, auditing and removal of unnecessary components.

Syllabus Content

  • Patching
  • Service management
  • Permissions
  • Firewall and logging
  • Auditing and baselines

Learning Outcomes

  • Harden servers with updates and least service
  • Configure permissions, firewall and logging
  • Audit servers against a baseline

LMS Laboratories

  • Harden a lab server to a baseline
  • Audit a server for weaknesses

AI Integration

  • AI-assisted hardening review

Syllabus alignment: Security+ - CySA+ aligned

M28Web-Application Security Fundamentals2 lecture h · 6.25 lab h

Understand how web applications process users, sessions, databases and input. Students learn how insecure design and configuration can lead to security weaknesses.

Syllabus Content

  • Web application architecture
  • Users and sessions
  • Input handling
  • Databases
  • Insecure design

Learning Outcomes

  • Explain how web applications work
  • Describe sessions, input and database handling
  • Explain how insecure design creates risk

LMS Laboratories

  • Explore a lab web application
  • Map its trust boundaries

AI Integration

  • AI-assisted explanation of web application flows

Syllabus alignment: Security+ - CySA+ aligned

M29Common Web-Application Risks2 lecture h · 6.25 lab h

Explore recognised web-security risks such as insecure access control, weak authentication, injection and unsafe data handling through controlled demonstrations.

Syllabus Content

  • OWASP Top 10
  • Broken access control
  • Injection (SQLi)
  • Cross-site scripting
  • Unsafe data handling

Learning Outcomes

  • Identify OWASP Top 10 risks
  • Demonstrate injection and access-control flaws safely
  • Explain the impact of each risk

LMS Laboratories

  • Test DVWA and OWASP Juice Shop
  • Record findings with impact

AI Integration

  • AI-assisted explanation of web risks, verified in the lab

Syllabus alignment: Security+ - CySA+ aligned

M30Secure Web-Application Practices4 lecture h · 12.5 lab h

Learn how validation, secure authentication, patching, encryption and security testing reduce web-application risk. Students prepare practical remediation recommendations.

Syllabus Content

  • Input validation
  • Secure authentication
  • Patching
  • Encryption
  • Security testing
  • Remediation

Learning Outcomes

  • Apply input validation and secure authentication
  • Use patching, encryption and testing
  • Write remediation recommendations

LMS Laboratories

  • Remediate flaws in a lab web application
  • Write remediation recommendations

AI Integration

  • AI-assisted remediation guidance

Syllabus alignment: Security+ - CySA+ aligned

Phase 5 — Threat Detection, Monitoring & Response

M31Social Engineering and Phishing Awareness2 lecture h · 6.25 lab h

Understand how attackers manipulate users through phishing, impersonation and false urgency. Students analyse simulated messages and design awareness controls.

Syllabus Content

  • Social engineering
  • Phishing and impersonation
  • False urgency
  • Message analysis
  • Awareness controls

Learning Outcomes

  • Explain social-engineering techniques
  • Analyse phishing messages
  • Design awareness controls

LMS Laboratories

  • Analyse simulated phishing messages
  • Design an awareness campaign

AI Integration

  • AI-assisted phishing message analysis

Syllabus alignment: CySA+ - SC-200 pathway

M32Malware and Ransomware Awareness2 lecture h · 6.25 lab h

Study common malware behaviours, delivery methods and business impact. Students learn basic indicators, prevention measures and response procedures without creating malware.

Syllabus Content

  • Malware types
  • Delivery methods
  • Ransomware impact
  • Indicators of compromise
  • Prevention and response

Learning Outcomes

  • Describe malware behaviours and delivery
  • Recognise basic indicators
  • Apply prevention and response procedures

LMS Laboratories

  • Identify indicators from a safe sample report
  • Draft a ransomware response checklist

AI Integration

  • AI-assisted indicator summaries

Syllabus alignment: CySA+ - SC-200 pathway

M33Security Monitoring and SIEM Fundamentals2 lecture h · 6.25 lab h

Understand how security teams collect and review logs from endpoints, servers, applications and network devices. Students explore alert handling and security-event correlation.

Syllabus Content

  • SIEM concepts
  • Log sources
  • Correlation rules
  • Alert handling
  • Dashboards

Learning Outcomes

  • Explain SIEM log collection and correlation
  • Handle alerts
  • Correlate security events

LMS Laboratories

  • Connect log sources to a SIEM
  • Correlate events into an alert

AI Integration

  • AI-assisted event correlation

Syllabus alignment: CySA+ - SC-200 pathway

M34Log Analysis2 lecture h · 6.25 lab h

Review Windows, Linux, firewall and application logs within simulated incidents. Students identify unusual activity and prepare basic investigation notes.

Syllabus Content

  • Windows logs
  • Linux logs
  • Firewall and application logs
  • Spotting anomalies
  • Investigation notes

Learning Outcomes

  • Analyse Windows, Linux and firewall logs
  • Identify unusual activity
  • Prepare investigation notes

LMS Laboratories

  • Investigate a simulated incident from logs
  • Write investigation notes

AI Integration

  • AI-assisted log analysis, verified by the learner

Syllabus alignment: CySA+ - SC-200 pathway

M35Security Operations Centre Fundamentals2 lecture h · 6.25 lab h

Explore SOC responsibilities, analyst workflows, alert triage, escalation and incident documentation. Students practise basic analyst activities through guided scenarios.

Syllabus Content

  • SOC roles and tiers
  • Analyst workflow
  • Alert triage
  • Escalation
  • Documentation

Learning Outcomes

  • Describe SOC roles and workflows
  • Triage and escalate alerts
  • Document incidents

LMS Laboratories

  • Run a guided SOC shift scenario
  • Triage and escalate alerts

AI Integration

  • AI-assisted alert triage

Syllabus alignment: CySA+ - SC-200 pathway

M36Incident Response2 lecture h · 6.25 lab h

Learn the main stages of incident response: preparation, detection, analysis, containment, recovery and review. Students prepare response plans for common cyber incidents.

Syllabus Content

  • Preparation
  • Detection and analysis
  • Containment
  • Recovery
  • Review
  • NIST SP 800-61

Learning Outcomes

  • Describe the incident-response lifecycle
  • Contain and recover from an incident
  • Prepare a response plan

LMS Laboratories

  • Respond to a simulated incident end to end
  • Write an incident-response plan

AI Integration

  • AI-assisted incident timelines and reports

Syllabus alignment: CySA+ - SC-200 pathway

M37Digital Forensics Fundamentals4 lecture h · 12.5 lab h

Understand digital evidence, chain of custody, data preservation and basic forensic processes. Students learn how evidence must be handled professionally.

Syllabus Content

  • Digital evidence
  • Chain of custody
  • Data preservation
  • Imaging
  • Basic analysis

Learning Outcomes

  • Explain digital evidence and chain of custody
  • Preserve data correctly
  • Follow a basic forensic process

LMS Laboratories

  • Preserve and image evidence in the lab
  • Analyse an image with Autopsy

AI Integration

  • AI-assisted organisation of forensic notes

Syllabus alignment: CySA+ - SC-200 pathway

Phase 6 — Cloud, AI & Governance

M38Cloud-Security Fundamentals2 lecture h · 6.25 lab h

Explore shared responsibility, cloud identity, access control, secure storage, network protection and monitoring across cloud environments.

Syllabus Content

  • Shared responsibility
  • Cloud identity and access
  • Secure storage
  • Network protection
  • Cloud monitoring

Learning Outcomes

  • Explain the shared responsibility model
  • Secure cloud identity, storage and networks
  • Monitor cloud environments

LMS Laboratories

  • Secure a lab cloud workload
  • Review cloud monitoring alerts

AI Integration

  • AI-assisted cloud security review

Syllabus alignment: Cloud & AI security

M39AI in Cyber Security2 lecture h · 6.25 lab h

Understand how artificial intelligence supports threat detection, anomaly identification, phishing analysis, alert prioritisation and security automation.

Syllabus Content

  • AI for threat detection
  • Anomaly detection
  • Phishing analysis
  • Alert prioritisation
  • Security automation

Learning Outcomes

  • Explain how AI supports cyber defence
  • Describe anomaly and phishing detection
  • Explain security automation with AI

LMS Laboratories

  • Use an AI feature to prioritise alerts
  • Compare AI-assisted and manual detection

AI Integration

  • The dedicated AI-in-defence module

Syllabus alignment: Cloud & AI security

M40AI-Assisted Threat Analysis2 lecture h · 6.25 lab h

Use approved AI tools to summarise security information, organise investigation notes and support defensive analysis while maintaining privacy and verification requirements.

Syllabus Content

  • AI summarisation
  • Investigation support
  • Verification
  • Privacy and data handling
  • Responsible use

Learning Outcomes

  • Summarise security information with AI
  • Organise investigation notes
  • Verify AI output and protect privacy

LMS Laboratories

  • Summarise an incident with AI and verify it
  • Organise investigation notes with AI

AI Integration

  • Approved AI tools with human verification

Syllabus alignment: Cloud & AI security

M41AI Security and Responsible Use2 lecture h · 6.25 lab h

Explore risks involving AI-generated content, prompt manipulation, data exposure, inaccurate outputs and unauthorised automation. Students learn responsible AI-governance principles.

Syllabus Content

  • AI-generated content risks
  • Prompt injection
  • Data exposure
  • Inaccurate outputs
  • AI governance
  • OWASP Top 10 for LLM Applications

Learning Outcomes

  • Identify AI-specific risks
  • Mitigate prompt manipulation and data exposure
  • Apply responsible AI governance

LMS Laboratories

  • Test and mitigate prompt injection on a lab chatbot
  • Draft an AI-use policy

AI Integration

  • The dedicated AI-security module

Syllabus alignment: Cloud & AI security

M42Cyber-Security Governance and Reporting4 lecture h · 12.5 lab h

Understand policies, standards, risk registers, compliance awareness and professional reporting. Students prepare clear findings, business impact statements and remediation plans.

Syllabus Content

  • Policies and standards
  • Risk registers
  • Compliance awareness
  • Professional reporting
  • Business impact
  • Personal Data Protection Act No. 9 of 2022

Learning Outcomes

  • Explain security policies, standards and risk registers
  • Apply compliance awareness
  • Write professional reports and remediation plans

LMS Laboratories

  • Write a professional findings report
  • Prepare a remediation plan

AI Integration

  • AI-assisted report drafting, verified by the learner

Syllabus alignment: Cloud & AI security

Industry certification alignment is syllabus guidance. External examinations are separate; course completion does not award vendor certification.

Learning outcomes

Skills You Will Develop

  • Apply security, networking, Windows and Linux foundations and defence-in-depth principles.
  • Conduct the authorised ethical-hacking lifecycle from OSINT to controlled validation and reporting.
  • Defend networks with firewalls, IDS/IPS, VPNs and wireless security.
  • Secure identities, endpoints, servers and web applications.
  • Monitor, detect, analyse and respond to incidents, including basic digital forensics.
  • Apply cloud-security, AI-in-cyber and AI-security principles, and use AI tools responsibly.
  • Prepare professional findings, business-impact statements and remediation plans.
  • Plan, complete and defend an authorised enterprise security assessment.

Career Outcomes

Career Opportunities

Junior Security AnalystSOC Analyst TraineeJunior Penetration TesterVulnerability Assessment AssistantSecurity Monitoring AssistantIncident Response TraineeDigital Forensics AssistantNetwork Security TechnicianEndpoint Security Support AssistantSecurity Governance and Reporting Assistant

Potential roles to work towards, depending on your practical portfolio, experience and employer requirements. Some roles require further training or certification.

Tools & Platforms

Technologies used

  • Windows and Linux
  • Firewalls, IDS/IPS and VPNs
  • Security monitoring tools
  • Digital forensics tools
  • Authorised security-testing labs

Labs & practicals

How you will learn

  • Live online teaching with scheduled on-campus practical sessions
  • LMS module labs with trainer feedback
  • A Student Project Book documenting your learning
  • A final project, presentation and practical assessment

Admission requirements

Before you start

G.C.E. O/L with Mathematics and English passes, plus basic computer literacy. Basic networking is recommended. An ethical conduct agreement is required before labs.

You will need a computer and reliable internet for online classes and LMS activities.

NextGen Campus support

Student support

  • Academic guidance from your course coordinator
  • Trainer feedback on LMS laboratory work
  • Project planning and documentation support
  • LMS help for login and technical questions

Put your learning into practice

Projects & assessment

Complete an authorised enterprise security assessment in an isolated lab, presenting findings, business impact and remediation recommendations.

Continuous assessment
40%
Practical / final project
40%
Student Project Book
20%

Complete the required practical work and project submissions. The handbook sets out attendance, pass requirements, grading and re-sit arrangements.

Capstone Project — 40 Hours (Physical)

Final Enterprise Cyber-Security Project

The programme concludes with Module 43, the Final Enterprise Cyber-Security Project — an authorised, end-to-end security assessment of a simulated enterprise environment, delivered physically over five poya days (9.00 AM – 5.00 PM) at the NextGen Campus Head Office, Nugegoda, inside an isolated lab. Each day is scheduled after the phase it builds on. Students document assets, vulnerabilities, risks, controls, findings and recommended improvements, then present and defend the project to a panel.

Capstone Deliverables

  • Signed scope and rules of engagement
  • Asset inventory and reconnaissance findings
  • Validated vulnerability assessment with risk ratings
  • Defensive hardening and monitoring recommendations
  • Findings report with business-impact and remediation plan
  • Panel presentation and technical defence

Student Project Book & Management Module

The Student Project Book is a guided professional record developed throughout the course. It documents the student's laboratory work, findings and project outcomes, and contains the Management Module, which builds the professional and management skills expected of a security professional.

  • MU1 Professional Ethics & Rules of Engagement Authorisation, codes of conduct and handling sensitive findings
  • MU2 Service-Level Agreements & Engagement Scopes Engagement contracts, scopes, SLAs and escalation
  • MU3 Project Management Fundamentals Planning, scheduling and risk for security engagements
  • MU4 Security Governance, Risk & Compliance Security policies, risk registers and compliance
  • MU5 Professional Security Reporting Technical reports, executive summaries and responsible disclosure
  • MU6 Interview Skills and the IT Job Market CV, LinkedIn and portfolio; technical interviews; local and overseas job markets

Payment Options

Choose how you pay

Total course feeLKR 60,000Course tuition
Published course fee

Course payment

LKR60,000

Ask admissions for payment instructions and the payment due date for your intake.

Speak to admissions

Installment arrangements

Confirm whether an installment plan is available for your intake, including the initial payment, installment amounts and due dates.

Discuss payment options
Registration feeLKR 3,000 (one-time)
  • Lecturer-led learning and guided practical work
  • LMS laboratories and Student Project Book
  • Programme project and assessment

Course tuition and the one-time registration fee are listed separately. Confirm payment dates and installment availability with admissions. External professional certification examination fees are separate unless NextGen Campus specifically states otherwise.

Need Payment Guidance?

Having trouble choosing the right payment option?

Please talk to our Education Consultant for payment guidance, installment availability and registration support.

Talk to Our Education Advisor

Your next step

Request intake, fees and registration guidance.

Apply NowCall +94 78 100 8100