How apprenticeships are helping fill the cyber security skills gap

Apprenticeships are playing an important role in tackling skills shortages in cyber security. 

According to a recent government report, the number of apprentices enrolling on ICT related programmes in England has gone up in recent years, rising by 9% from 42,150 in 2020/21 to 46,080 in 2021/22, and increasing by a further 14% to 52,510 in 2022/23. 

These courses introduce students to the IT skills that lie behind online safety and networking, providing a useful stepping stone to a career in cyber security.  

The Cyber Security Technician (Level 3) Apprenticeship 

As well as apprenticeships in IT and digital. Learners can take a dedicated programme specifically designed to meet the needs of the cyber security sector. The Cyber Security Technician (Level 3) Apprenticeship provides training in vital first line support. 

First rolled out in 2020, this course typically lasts 18 months, not including EPA, and is eligible for up to £11,000 of government funding.  

Its content is relevant to several job roles in cyber security including Access Control Administrator, Cyber Security Administrator, Incident Response Technician, Junior Information Security Analyst and Junior Threat and Risk Analyst.  

Given the nature of online security these jobs exist in any industry, business or organisation where information and data must be protected. Sectors include finance, retail, local government, banking, healthcare and telecommunications.  

On this course, apprentices will learn a whole host of IT security related skills including how to:  

• Follow information security procedures 

• Maintain information security controls  

• Recognise when and how to escalate information security events following relevant procedures and standards 

• Develop information security training and awareness resources 

• Evaluate the results of a cyber security vulnerability assessment 

• Undertake digital information risk assessments 

• Review and modify access rights to digital information systems, services, devices or data 

• Monitor and report information security events. 

• Monitor the effectiveness of information security training and awareness 

• Keep up to date with legislation and industry standards related to cyber security implementation 

Cyber Security Technologist (2021) (level 4) 

This level 4 programme is for learners looking to take up roles such as Cyber Operations Manager, Cyber Risk Analyst, Intelligence Researcher, Security Analyst or Security Architect. 

Typically taking two years to complete, it attracts funding up to a maximum of £18,000. Apprentices will be taught how cyber security is applied to protect organisations, systems, information, personal data and people from attacks and unauthorised access. 

The skills they will learn include how to:  

• Discover vulnerabilities in a system by using a combination of research and practical exploration 

• Analyse and evaluate security threats and hazards to a system, service or process  

• Research and investigate common attack techniques and relate these to normal and observed digital system behaviour.  

• Analyse employer or customer requirements to derive security objectives  

• Configure, deploy and use computer, digital network and cyber security technology 

•  Identify cyber security threats relevant to a defined context 

• Write program code or scripts to meet a given design requirement per employers' coding standards. 

Cyber Security Technical Professional (Integrated Degree) (Level 6) 

This degree level apprenticeship is for those people looking for team leadership roles in the management of cyber security risks.  

Attracting funding up to a limit of £24,000, it prepares apprentices for occupations such as Cyber Incident Manager, Cyber Research Analyst, Cyber Risk Analyst and Cyber Security Design Engineer. 

One college and five universities, including De Montfort and Cranfield, currently offer this apprenticeship, with courses typically lasting around four years, not including EPA.  

Among the key skills level 6 apprentices will learn are how to: 

• Make concise, engaging and well-structured verbal presentations, arguments and explanations 

• Deal with different, competing interests within and outside the organisation with excellent negotiation skills 

• Conduct effective research, using literature and other media 

• Demonstrate a 'security mind-set'  

• Think logically and take a creative approach to problem solving  

• Develop analytical and critical thinking for Technology Solutions development 

• Give and receive feedback constructively and incorporate it into their development and life-long learning 

• Be competent in active listening and in leading, influencing and persuading others 

• Identify the preferences, motivations, strengths and limitations of other people and apply these insights to work more effectively with and to motivate others 

First approved in September 2018, this programme was updated in 2022. It is now being revised but can still be delivered in the meantime.  

As Cyber security skills in the UK labour market 2024 research and analysis published by UK government in September 2024 clearly shows, businesses continue to report technical skills shortfalls across all areas of their operations. And, as its findings conclude, entry apprenticeship roles can help fill these gaps as well as diversifying the workforce and building a cyber security skills pipeline for the future.