This module will enable students to gain an understanding of threat detection and management at the macro and micro levels. It will develop both the knowledge of strategic business continuity management and introduce practical approaches to identifying, triaging and responding to threats and attacks.

This Module can only be taken as an Accredited Short Course.
For more information please go to the 'Upgrade to a professional qualification' section.

Due to the nature of the subject matter in this Module, security clearance may be required. 

At a glance

  • Dates
    • Please enquire for course dates
  • Duration5 days
  • LocationCranfield University at Shrivenham
  • Cost

    £1,800 - Accredited Short Course fee

    Concessions available

Course structure

The course will be delivered using compulsory residential activities, including lab work, and supported by online activities.

What you will learn


  • understand the construction of evidence preservation procedures,
  • analyse, select and justify appropriate responses to detected intrusions.


  • formulate the assumptions and requirements for developing a business continuity strategy, critically analyse, design and select appropriate technical solutions and processes for the identification, triage and response to cyber-attacks and threats.

Core content

Incident identification

  • the role of the security operations centre, 
  • intrusion detection methods and tools.

Incident containment

  • intrusion management,
  • intrusion analysis, monitoring and logging,
  • evidence preservation

Incident management

  • backup management,
  • disaster recovery techniques,
  • business continuity management,
  • stakeholder management.

Upgrade to a professional qualification

After successful completion of this Accredited Short Course, 10 credit points can be put towards the Cyber Defence and Information Assurance MSc and the Cyberspace Operations MSc.

 Find out more about short course credit points.

Who should attend

Students must have successfully completed Foundations of Cyber in order to take this as an Accredited Short Course.



A limited number of MOD sponsored places are available.

Location and travel

Cranfield Defence and Security (CDS) is a Cranfield School based at the Ministry of Defence establishment on the Oxfordshire/Wiltshire borders.

Shrivenham itself lies in the picturesque Vale of the White Horse, close to the M4 motorway which links London and South Wales. It is 7 miles from Swindon, the nearest town, which lies off the M4 at the hub of Britain’s motorway network.

Bath, Cheltenham, Bristol and Oxford are all within an hour’s drive and London less than two hours away by car.

All visitors must be pre-booked in at reception by the person they are visiting on the campus.

For further location and travel details

How to apply

To apply for this course please use the online application form.

Read our Professional development (CPD) booking conditions.