Conduct Security Assessment And Testing

Cyber Security · Level 6  ·  7 Chapters

What this unit covers

In this unit, you will be able to confidently conduct thorough security assessments by reviewing organizational policies, mapping out critical assets, and using advanced tools to scan and enumerate systems. You will learn to identify vulnerabilities and potential risks through detailed analysis of networks, user roles, and third-party connections, empowering you to protect real-world environments effectively. By the end, you’ll have the skills to gather and interpret vital security data, helping organizations strengthen their defenses with precision and care.

Where this takes you

In Kenya’s rapidly growing digital and physical security landscape, the ability to conduct thorough security assessments and testing is a highly valuable skill. Whether you aim to work in established organizations or start your own security consultancy, mastering these skills opens doors to numerous career opportunities and entrepreneurial ventures that protect Kenya’s critical infrastructure and business assets.

  • Employment opportunities: You can find roles in government agencies like the National Transport and Safety Authority (NTSA), county governments managing public infrastructure, energy companies such as KenGen and Kenya Power, and financial institutions that require robust cybersecurity measures. The booming ICT sector, including tech hubs in Nairobi and Mombasa, also employs security professionals to safeguard data and networks.

  • Jua Kali and informal sectors: Small-scale businesses and matatu operators increasingly rely on digital payment systems and mobile apps, creating demand for security assessments to prevent fraud and data breaches. You could offer affordable security audit services to these enterprises, helping them build trust with customers.

  • Agribusiness and manufacturing: Organizations like the Kenya Tea Development Agency (KTDA) and agro-processing firms need security experts to protect sensitive data and operational technology from cyber threats and sabotage.

  • Self-employment and entrepreneurship: With your skills, you can start a consultancy offering security assessments, penetration testing, and compliance audits to SMEs and public sector clients. This is a growing market as Kenyan businesses become more aware of cybersecurity risks.

  • Why it matters: Mastering security assessment and testing equips you to be a guardian of Kenya’s digital and physical assets, contributing to the safety and resilience of communities and businesses. Your expertise will be crucial in preventing costly security breaches, supporting economic growth, and building a safer future for all Kenyans.

Step confidently into this vital role and become a trusted security professional who makes a real difference in Kenya’s development journey!

Chapters

1
Gather Information About Organization and its Systems
8 topics
✓ Notes Ready
2
Scan and Map the Network
11 topics
✓ Notes Ready
3
Enumerate Target Resources
10 topics
✓ Notes Ready
4
Exploit Known Vulnerabilities
7 topics
✓ Notes Ready
5
Perform Social Engineering
7 topics
✓ Notes Ready
6
Conduct System hacking
21 topics
✓ Notes Ready
7
Prepare Security Assessment and Testing Report
9 topics
✓ Notes Ready

1 past paper for this unit →

Practise this unit

The practical 76 The assessment itself — tools, materials and the marks Step-by-step guide 76 PPE, each step, what good looks like, common mistakes

Revise this unit

Past papers & answers 1 Real CDACC papers for this unit, free to download Exam-style questions 98 Written to CDACC standard, with answers Test yourself 272 Multiple-choice, one at a time Practise questions 230 Quick recall — check you know the facts
3 more for this unit

Beyond the syllabus

Decision simulator 7 On site, what would you do? Workplace scenarios 140 Real site situations — what would you do? Turn this into income 84 Where this skill earns — what to charge, how to find clients