Practical Cybersecurity Training from Foundations to Professional Practice
DCCP is DigiUK Academy’s structured 75-hour ethical hacking and cybersecurity training programme in Manchester. It is delivered across 50 tutor-led sessions of 90 minutes and develops practical skills in defensive security, incident response, evidence handling and professional penetration-testing practice.
DCCP follows DigiUK’s dedicated Network+ and Kali Linux foundation courses. Therefore, complete beginners can start at the networking stage, while learners with equivalent knowledge can discuss their entry point during the free induction. The 50 DCCP sessions then apply those foundations instead of repeating the separate networking and Kali courses.
Visit the Lab Before You Enrol
Free DCCP Induction
This free induction takes place before Session 1 and is separate from the 50 paid DCCP sessions. Before deciding whether to enrol, visit DigiUK Academy, meet the tutor, see the training environment and review the complete pathway.
- Discuss your current knowledge and career goals
- See how the controlled practical laboratory works
- Review the Network+ foundation, Kali Linux foundation and 25-chapter DCCP syllabus
- Confirm the correct starting stage for your existing knowledge
- Ask about the current timetable and payment arrangements
Flexible Financing
£30 per practical session
- Block payments: Pay for four sessions at a time (£120)
- No long contract: Continue only while the programme remains right for you
- Small classes: Maximum of five learners
- Practical focus: More than 80% guided practical activity
Why Choose the DigiUK DCCP?
DigiUK uses one connected route: first understand networks, then operate Kali Linux confidently, and then apply those foundations during the 50-session DCCP cybersecurity programme. Each stage has a clear purpose, so the DCCP syllabus can spend its time on authorised security testing, defence, evidence and reporting instead of repeating earlier courses.
Networking and Network+
Understand how networks, protocols, services, devices, security controls and faults behave.
Kali Linux
Build Linux command-line, administration, troubleshooting, logging and Bash confidence.
25 Cybersecurity Chapters
Apply security tools and methods to ethical hacking, defence, response and modern environments.
Evidence and Reporting
Explain what the evidence proves, recommend controls and communicate results clearly.
- Beginner-friendly explanations in clear language
- Tutor demonstrations before supervised practice
- Exact commands, arguments and realistic output
- Safe exercises inside an isolated laboratory
- Offensive and defensive security perspectives
- Questions, answers and reasons throughout
- Technical evidence and professional reporting
- English teaching with Persian-language support available
Experienced Instructor
Learn with guidance informed by more than 30 years of IT-industry experience, 21 years of networking and cybersecurity teaching, and a Master’s Degree in Software Engineering.
Practical, Not Exam-Cram Training
The programme connects learning areas from respected certifications and guidance, but lessons focus on clear understanding, safe technical work, evidence and reporting—not memorising answers for one examination.
What Learners Bring from Network+ and Kali Linux
The two foundation courses are practical and complete in their own right. Afterwards, DCCP applies that knowledge during security exercises rather than reteaching basic networking or Linux commands. The summary below therefore makes the boundary between the courses clear.
Network+ foundation — 20 connected learning chapters
Networking Foundations
First, learners understand how a service depends on devices, protocols and infrastructure. They then learn to read evidence, isolate faults and explain a defensible response. Throughout, the course teaches network concepts and practical troubleshooting without turning Network+ into vendor-specific Cisco command training.
| Chapter | Main learning area |
|---|---|
| 1 | Network outcomes, device roles and service dependencies |
| 2 | Topologies, architectures and end-to-end traffic flow |
| 3 | OSI and TCP/IP as practical troubleshooting models |
| 4 | Ethernet switching, VLANs, trunks, STP and link aggregation |
| 5 | Copper structured cabling and hands-on termination |
| 6 | Fibre, transceivers, racks, power and physical installation |
| 7 | IPv4 addressing, CIDR, subnetting and VLSM |
| 8 | IPv6, neighbour discovery and transition methods |
| 9 | Routing, route selection, NAT/PAT and WAN connectivity |
| 10 | TCP, UDP, ports and application protocols |
| 11 | DHCP, DNS, NTP/PTP and core network services |
| 12 | Wireless LAN operation, design and troubleshooting |
| 13 | Cloud, virtualisation, data centres, availability and recovery |
| 14 | SDN, SD-WAN, VXLAN, SASE, automation and AI in networking |
| 15 | Documentation, IPAM, change, lifecycle and service operations |
| 16 | Monitoring, observability, logging, flow and packet evidence |
| 17 | Identity, cryptography, segmentation and secure access |
| 18 | Network threats, defences, hardening and incident response |
| 19 | Structured troubleshooting, tools and common fault domains |
| 20 | Integrated enterprise capstone and Network+ readiness |
Kali Linux foundation — command line, administration and evidence
Kali Linux Foundations
The Kali course teaches the operating system itself. First, learners read a command as command + options + arguments and understand the purpose of each part. They then run it safely, interpret the result and verify any change. Later, specialist scanning, exploitation and web-testing tools begin in the authorised DCCP laboratory.
| Chapter | Main learning area |
|---|---|
| 1 | Kali workstation setup, safe laboratory use, validation and recovery |
| 2 | Terminal confidence, Bash command structure, help and history |
| 3 | Linux filesystem structure, absolute paths and relative paths |
| 4 | Creating, copying, moving, renaming and removing files and directories |
| 5 | Viewing, comparing and editing text safely |
| 6 | Searching, filtering, pipes, redirection and controlled file discovery |
| 7 | Users, groups, ownership, permissions, sudo and least privilege |
| 8 | Processes, services, packages and system-change verification |
| 9 | Storage, archives, checksums, memory, disk and system resources |
| 10 | Linux network interfaces, addresses, routes, DNS, sockets and connectivity checks |
| 11 | Host firewall, journals, text logs and evidence-led troubleshooting |
| 12 | Safe Bash automation, evidence bundles and workstation capstone |
The 25-Chapter DCCP Curriculum
The 50-session DCCP core begins here. Building on the networking and Kali foundations, it moves from essential cybersecurity principles to advanced technical and defensive topics. Because a chapter covers a complete learning area, some require several teaching sessions rather than one 90-minute class. Open each stage below to see every chapter.
Stage One — Programme Safety and Cybersecurity Foundations
Chapter 0 — Programme Orientation
Start by exploring the programme structure and four-machine laboratory. Next, cover authorisation, scope, evidence folders, screenshots, privacy, rules of engagement and stop conditions.
Chapter 1 — Ethical Hacking Foundations
First, explore assets, data, systems, services, confidentiality, integrity, availability and identity. Then, examine threats, vulnerabilities, risk, controls, ethical-hacking lifecycles, professional conduct and UK legal boundaries.
Stage Two — Reconnaissance, Discovery and Vulnerability Assessment
Chapter 2 — Footprinting and Reconnaissance
Discover passive and active reconnaissance, OSINT, DNS, RDAP, public information and metadata. In addition, consider source quality, confidence levels and safe evidence collection.
Chapter 3 — Discovery, Scanning and Enumeration
Begin with host discovery, ports, TCP and UDP, service identification and operating-system clues. Next, explore Nmap, SMB, DNS, SNMP and other enumeration methods. Finally, learn to recognise false positives and uncertain results.
Chapter 4 — Vulnerability Analysis
Follow the vulnerability-management lifecycle from discovery to verification, prioritisation, treatment and retesting. Along the way, examine CVE, CWE, CVSS, EPSS, scanner limitations and manual validation.
Stage Three — System, Network and Defensive Security
Chapter 5 — System Hacking
Examine controlled system access, password security, privilege boundaries and Windows and Linux evidence. Next, explore Metasploit checks, persistence concepts, detection and recovery. Throughout, practical work remains inside the authorised laboratory.
Chapter 6 — Malware Threats and Safe Analysis
Identify malware families, delivery methods and behaviour. Then, examine hashes, strings, file structure, YARA rules, indicators of compromise and static analysis. Finally, cover safe dynamic-analysis principles, containment and recovery.
Chapter 7 — Packet Capture and Sniffing
Learn how frames, packets, protocols and TCP streams work. Then, use Wireshark, TShark and Tcpdump to apply filters, inspect traffic, identify cleartext risks and preserve network evidence.
Chapter 8 — Social Engineering Defence
Explore phishing, business email compromise, deepfakes, impersonation and human influence. In response, study email authentication, reporting processes, awareness controls and safe simulation design.
Chapter 9 — Denial of Service and Resilience
Investigate denial-of-service and distributed denial-of-service concepts, resource exhaustion and traffic baselines. Next, consider rate controls, logging, resilience, incident communication and recovery. However, the course does not conduct uncontrolled flooding.
Chapter 10 — Session Security and Hijacking Defence
Examine cookies, session identifiers, tokens, fixation and replay. In addition, explore logout, timeout controls, CSRF, JWT security, concurrent sessions and session-anomaly detection.
Chapter 11 — IDS, Firewalls and Honeypots
Discover network and host controls, firewall rules, stateful inspection, signatures and behaviour-based detection. Next, examine false positives, alert validation, Suricata, Zeek, honeypots and change control.
Stage Four — Web, Application and Identity Security
Chapter 12 — Web Server Security
Study HTTP methods, headers, TLS, virtual hosts, default content and directory exposure. Then, explore authentication, access logs, error logs and security hardening for Apache, Nginx and IIS environments.
Chapter 13 — Web Application Security
Explore access control, input validation, cross-site scripting, CSRF, file uploads and path traversal. In addition, study SSRF, APIs, business-logic weaknesses and structured testing using OWASP guidance.
Chapter 14 — Authentication and MFA Security
Trace the identity lifecycle through password policy, multifactor authentication, passkeys and federation. Next, examine account recovery, lockout controls, authentication telemetry and local Windows identity security.
Chapter 15 — SQL Injection
Understand how unsafe input can affect database queries. For example, study error-based, union-based, boolean-based and time-based concepts. Then, cover parameterised queries, least privilege, validation, logging, safe testing and retesting.
Stage Five — Wireless Security and Cryptography
Chapter 16 — Wireless Security
Start with 802.11 communication, WPA2, WPA3 and protected management frames. Next, explore WPS risks, enterprise wireless concepts, guest isolation, supplied-capture analysis and defensive wireless assessment.
Chapter 17 — Cryptography
Examine security properties, symmetric and asymmetric encryption, hashes, MACs and digital signatures. In addition, study PKI, certificates, TLS, key management, password storage and post-quantum planning.
Stage Six — Professional Practice, Linux and Incident Recovery
Chapter 18 — Professional Penetration Testing
Learn how professional testing is planned and controlled. First, cover pre-engagement work, scope, rules of engagement, threat modelling and test plans. Then, examine evidence, severity, reporting, quality assurance, retesting and cleanup.
Chapter 19 — Physical Security
Consider layered physical protection, reception controls, visitors, badges and CCTV. Next, explore server rooms, removable media, device disposal, physical incidents and joint physical and cybersecurity response.
Chapter 20 — Linux Security Assessment
Assess Linux accounts, groups, permissions, sudo, SUID and capabilities. Then, examine services, scheduled tasks, packages, logs, containers, SSH, secrets and system-hardening controls.
Chapter 21 — Viruses, Outbreak Triage and Recovery
Recognise virus behaviour, infection methods and outbreak warning signs. Next, study triage, isolation, containment, eradication and recovery. Finally, cover backup validation, endpoint protection, threat hunting and lessons learned.
Stage Seven — AI, Cloud, Mobile, IoT and OT Security
Chapter 22 — AI Security and AI-Assisted Ethical Hacking
Learn how AI can support security work and where it can fail. For example, examine hallucination, data leakage, prompt injection, excessive agency, insecure output and model supply-chain risk. Then, consider human verification, the NIST AI Risk Management Framework and current OWASP guidance for generative-AI systems.
Chapter 23 — Cloud Security Assessment
Explore shared responsibility, cloud identity, management and data planes, storage and networking. In addition, examine secrets, logging, containers, Kubernetes, serverless systems, misconfiguration and cloud evidence.
Chapter 24 — Mobile, IoT and OT Security
Study mobile storage, permissions, application packages, APIs, firmware and mobile-security testing. Next, explore MQTT, CoAP, Bluetooth Low Energy and IoT device risks. Finally, consider operational-technology safety, passive monitoring and incident response.
Professional Knowledge and Framework Coverage
DCCP has been independently compared with selected learning areas used by recognised cybersecurity courses, certifications and guidance. The tables below therefore explain how each reference supports the programme without suggesting external accreditation or endorsement.
- CEH
- Security+
- ISC2 CC
- CySA+
- CISSP
- CISM
- CISA
- PEN-200 / OSCP+
- OWASP
- MITRE ATT&CK
- NIST
- UK NCSC
View the complete independent coverage matrix
Technical and Analyst Learning Areas
| Reference | Relevant DCCP coverage | How to understand the mapping |
|---|---|---|
| CEH | Ethical-hacking methodology, reconnaissance, scanning, enumeration, vulnerability analysis, system security, malware, social engineering, web and wireless security. | Broad independent topic coverage; DCCP is not an official EC-Council course or CEH examination. |
| CompTIA Security+ | Security principles, threats, vulnerabilities, architecture, identity, network protection, security operations, incident response, governance and risk. | Supports related knowledge areas without replacing official CompTIA study materials or examination objectives. |
| ISC2 Certified in Cybersecurity (CC) | Security principles, access controls, network security, security operations, incident response and continuity foundations. | Provides relevant foundational knowledge; it is not an ISC2 course or examination award. |
| CompTIA CySA+ | Vulnerability management, evidence analysis, monitoring, detection, security operations, incident investigation and response. | Selected analyst skills are taught as part of DCCP’s wider practical pathway. |
Professional and Management Learning Areas
| Reference | Relevant DCCP coverage | How to understand the mapping |
|---|---|---|
| ISC2 CISSP | Relevant principles from risk, asset security, architecture, network security, identity, assessment, operations and software security. | Introduces related professional concepts; DCCP does not claim to replace CISSP experience or official preparation. |
| ISACA CISM | Information-security governance, risk, programme development and incident-management principles. | Management topics provide organisational context for technical decisions. |
| ISACA CISA | Audit evidence, governance, system implementation, operational resilience and information-asset protection. | Audit concepts strengthen evidence quality, control evaluation and professional reporting. |
| OffSec PEN-200 / OSCP+ | Practical methodology, enumeration, evidence-led validation, privilege-boundary analysis, troubleshooting and reporting. | Supports related hands-on habits in DigiUK’s isolated lab; it is not official OffSec training or an OSCP exam lab. |
Security Frameworks and UK Guidance
| Reference | Relevant DCCP coverage | How to understand the mapping |
|---|---|---|
| OWASP | OWASP Top 10:2025, web-server and web-application testing, API security, authentication, sessions, input validation, injection and generative-AI application risks. | Current OWASP awareness and testing guidance supports repeatable web and application-security learning. |
| MITRE ATT&CK | Enterprise, Mobile and ICS attacker-behaviour mapping, defensive visibility, evidence, detection opportunities and controls. | The current MITRE ATT&CK knowledge base is used as a common language for connecting observed behaviour with defensive action. |
| NIST | NIST Cybersecurity Framework 2.0, incident response informed by SP 800-61 Rev. 3, technical-testing principles and the AI Risk Management Framework. | Recognised NIST guidance supports governance, structured decisions, evidence-based practice, response and recovery. |
| UK NCSC | Authorised penetration-testing scope, commissioning, safe delivery, communication, limitations, reporting and responsible professional behaviour. | UK NCSC penetration-testing guidance supports legal, safe and professional classroom practice while recognising that a penetration test is one part of wider assurance. |
The DCCP Laboratory Environment
Practical work takes place inside a controlled and isolated training environment. Active testing is limited to DigiUK’s approved lab or another system for which clear written authorisation has been obtained.
Authorised testing and analysis workstation
Deliberately vulnerable lab target
Endpoint and local-security exercises
Server exercises without an Active Directory dependency
See how every practical command and tool is explained
| Teaching element | What is explained | What the learner records |
|---|---|---|
| Purpose | What the command or tool does and why it is appropriate. | The task objective and approved target. |
| Exact syntax | The complete command and the meaning of every argument used. | The command exactly as performed. |
| Output | Realistic output, important fields and common variations. | Relevant terminal output or screenshot. |
| Interpretation | What the result proves, what it suggests and what it cannot prove. | A short evidence-based conclusion. |
| Troubleshooting | Common errors, permissions, network issues and safe checks. | The error and the action used to resolve it. |
| Close and clean | Evidence storage, stopping tools, restoring settings and confirming lab state. | Saved evidence and completed cleanup. |
From Scope to Retest
DCCP Learning Outcomes
Develop practical ability in authorised assessment, ethical hacking, defensive analysis, incident response, evidence, remediation and professional reporting.
View all 15 practical learning outcomes
- Explain how modern networks, systems and applications communicate
- Work confidently with Kali Linux and its command line
- Prepare an isolated and authorised cybersecurity laboratory
- Define scope, rules of engagement and stop conditions
- Perform controlled reconnaissance and service enumeration
- Interpret vulnerability information and verify important findings
- Assess Windows, Linux, web, wireless and cloud security controls
- Analyse packets, logs, alerts and other technical evidence
- Recognise common malware and social-engineering indicators
- Explain authentication, sessions, cryptography and access controls
- Use relevant OWASP, MITRE ATT&CK, NIST and NCSC guidance
- Record repeatable evidence without exaggerating conclusions
- Recommend practical defensive controls
- Produce clear professional security reports
- Retest findings and document remediation results
Who Is DCCP For?
- Learners aged 12 and over
- College and university students
- Complete cybersecurity beginners
- Technical career changers
- IT support and helpdesk professionals
- Networking learners
- Aspiring SOC and security analysts
- Aspiring vulnerability analysts
- Aspiring junior penetration testers
Previous professional IT experience is not required. Complete beginners can start with DigiUK’s dedicated Network+ and Kali Linux foundation courses. Direct entry to the 50-session DCCP core requires those foundations or equivalent knowledge, which is discussed during the free induction.
Skills for Developing Roles
DCCP provides a practical foundation relevant to developing and entry-level roles such as:
- IT Support or Network Support Technician
- Junior Network Technician
- Cybersecurity Technician
- Junior SOC Analyst
- Security Operations Analyst
- Junior Vulnerability Analyst
- Junior Penetration-Testing Assistant
- Cybersecurity Analyst
Completion provides a foundation for continued development. It does not guarantee employment, professional registration or success in an external certification examination.
Course Information
50 tutor-led sessions, 90 minutes each, 75 guided hours, maximum five learners and more than 80% guided practical activity. Sessions cost £30 and are normally paid in four-session blocks of £120.
View prices, entry route, delivery and assessment details
Programme Structure and Fees
| Programme | Digital Cybersecurity Career Programme (DCCP) |
|---|---|
| Total sessions | 50 structured tutor-led sessions |
| Session length | 90 minutes |
| Guided learning | 75 hours |
| Practical proportion | More than 80% guided practical activity, supported by the theory needed to understand and apply each method safely |
| Class size | Maximum of five learners |
| Price | £30 per practical session |
| Payment block | Four sessions for £120 |
Entry, Delivery and Learning Environment
| Free induction | A separate induction before enrolment and before Session 1 is free, subject to arrangement and availability |
|---|---|
| Delivery | Practical instructor-led training |
| Location | DigiUK Academy, Stretford, Manchester |
| Entry level | Complete beginners can start with the foundation pathway; direct DCCP entry requires Network+ and Kali Linux knowledge or an equivalent level |
| Main pathway | Dedicated Network+ foundation → dedicated Kali Linux command-line foundation → 50-session DCCP applied cybersecurity core |
| Laboratory | Controlled and isolated virtual environment |
| Languages | English, with Persian-language support available |
| Course dates | Current timetable provided during the free induction |
Assessment and Certificate
| Assessment | Guided practical work, questions, evidence and tutor feedback |
|---|---|
| Award | DigiUK Academy DCCP Certificate of Completion |
| Official exams | Not included unless expressly stated in writing |
Frequently Asked Questions
Is DCCP an official CEH, CompTIA, ISC2, ISACA or OffSec course?
No. DCCP is independently designed and delivered by DigiUK Academy. It covers related knowledge and practical skills but is not an official vendor course or certification.
How do Network+ and Kali Linux fit into the DCCP pathway?
They are the two dedicated foundation courses that prepare learners for DCCP. Network+ develops network understanding and troubleshooting. Kali Linux develops command-line, administration, logging and Bash skills. Their full content is not repeated inside the 50-session DCCP core, where specialist cybersecurity tools and methods are taught in context.
Do I need previous cybersecurity experience?
No previous cybersecurity employment is required. Complete beginners normally start with the Network+ and Kali Linux foundations. Learners with equivalent knowledge can discuss direct DCCP entry during the free induction.
Is the programme practical?
Yes. It includes tutor demonstrations, controlled lab work, exact command examples, realistic technical output, evidence collection, interpretation and professional reporting.
Does the course fee include official certification examinations?
No official certification examination or voucher is included unless it is expressly stated in writing.
Can learners test public websites or networks?
No. Active exercises are limited to DigiUK’s isolated laboratory or another system for which clear written authorisation has been obtained.
Book Your Free DCCP Induction
Visit DigiUK Academy, see the practical laboratory and discuss your learning or career goals with the tutor. We will explain the separate Network+ and Kali Linux foundation stages, the 50-session and 25-chapter DCCP cybersecurity core, the timetable, laboratory requirements and payment options.
Class sizes are limited to a maximum of five learners.