Six Tiers.
One Mission.
Security Excellence.
Next Generation Security Practitioner is not just a training programme - It's a transformational learning Arc.
NGSP courses mirror the real challenges security teams face - moving from identifying risk to influencing decisions, building alliances, and executing under pressure. Training that transforms practitioners from technical contributors into strategic operators who can read the landscape, align to the business, and lead with credibility.
Driving Capability - Not just knowledge
-
Building a stronger bridge between security and the business.
-
Turning data into decisions.
-
Increasing resilience not slowing progress.
-
Creating a culture where security is instinctive.
Not Theory - An immersive practical experience
You’ll learn by doing - live simulations that recreate the real-life security situations. No lectures. Just the tools, mindsets, and behaviours that better outcomes. All our courses will earn you 10 CPE hours.
Customise Your Programme
Six Tiers.
One Mission.
Security Excellence.
Turn your Strategy
Into action.
Customise your programme.
Drive Outcomes
Next Generation Security Practitioner (NGSP), is the most customisable and practical learning programme in the industry.
Designed to align your team around one strategic mission - to deliver better security outcomes for your organisation. To deliver, security excellence.
If you're a CISO or leader looking for real ROI from training investment, NGSP is the only fully customisable learning programme of its kind in the industry.
-
Tackle Your Critical Gaps at Team-Level - Choose from up to 36 powerful learning units - covering business-critical areas of Security GRC, including simulation-based learning powered by AI, a comprehensive video-lesson library and tailored team-workshop activities
-
'Build Your Own' - Select any combination of modules and focus only on what your team needs
-
Align to your strategy - Every private programme we build, is tailored to deliver your strategic security goals. It's more than just a training programme.
If you're a CISO or leader looking for real ROI from training investment, NGSP is the only fully customisable learning programme in the industry. Designed to deliver required security outcomes. By the end of an NGSP private programme, your team will:
-
Align and integrate security into the DNA of frontline operations - By understanding business goals, pressures and priorities better.
-
Increase the strength and longevity of security controls - By applying the THOR Lens - Technical, Human, Operational and Regulatory.
-
Improve the way they identify, capture, escalate and mitigate security risk - By applying the TVI-Q and FACTR unification methods.
-
Increase buy-in and ownership on the ground - Learning how to collaborate and negotiate-in security practices
-
Increase the strength of security across all frontline functions - By building stronger stakeholder alliances - not just in IT
-
Become internal consultants - Skilled in security problem-solving and solution-building through our PULSE consulting methodology
-
Become more joined up - By cross-leveraging GRC skills and disciplines, irrespective of specialism
-
Improve the quality and speed of day to day security operations - By learning to consistently review, reframe, rework and re-design stronger security practices
-
Make compliance a business-enabler - Learning how to remove barriers and achieve stronger adoption of compliance practices
-
Design stronger, better security processes and policies - Ones that increase the strength of the organisation’s security posture
-
Ensure security drives value not cost - By cutting out wasteful activities and maximising resource
-
Build a strong communication bridge with leadership - Learning to communicate security in a language that business leaders understand
-
Mature your governance framework - Learning to streamline the way governance weaknesses are identified and align your governance model with the business environment
-
Leverage threaten intelligence - Learn to analyse data better, build attack vector profiles and decision briefs.
Identifying emerging security risk across the corporate environment is a critical task faced by InfoSec teams. An even tougher challenge is bringing it to light and getting the most important people in the room to listen.
Security teams often sense danger early but struggle to be heard. Risks move faster than organisations can read them, and early indicators get dismissed as noise. Practitioners battle bias, apathy and pressure that dilute their message.
By the time leaders react, the harm is already visible. This course builds the clarity and influence needed to surface and communicate security risk, with confidence and authority.
A one-day high-impact experience that sharpens your ability to spot risk early, read the landscape clearly and surface emerging risks with confidence.
NGSP Tier 1
Profiling Risk
Introduction
Learning Goals
Watch our video
Introduction
Learning Goals
Sharpen your ability to see risk and escalate it, in a way leaders pay attention to.
By the end of this course, you will be able to:
-
Identify emerging risk before it becomes hindsight
-
Spot the drivers of security risk amidst the change environment
-
Engage on security risk early and get the business to act
-
Cut through bias so risk isn’t dismissed because it feels inconvenient
-
Explain risk in a language the business understands
Learn about why Profiling Risk matters and the key skills and capabilities covered by the course.
Presented by Matt Kent
CEO - GRC-X
Lesson Plan
Structured
Workshop Lessons
Immersive skills sessions accompanied by powerful simulation- based activities
1. Why Risk Matters
The critical challenges practitioners and leaders face when understanding and communicating security risk inside modern organisations.
2. Risk Mindset
How businesses weigh up security risk (cost vs loss) and how real-world pressures influence risk acceptance and decision-making.
3. Understanding the Risk Landscape
How changes in external forces, business focus and risk appetite create a cascade of new threats and emerging risks across the organisation.
4. THOR Risk Lens
How to view risks through a Technical, Human, Operational and Regulatory lens to understand where they originate.
5. Increasing Your TVI-Q
How to develop a powerful and fast way of assessing risk using TVI-Q (the three question rule).
6. Business Impact Assessment
How to identify and quantify real business harm and build clear loss scenarios grounded in operational reality.
7. Mitigating Risk
Determining risk ratings and required mitigations to bring risk to a level the business is prepared to accept.

Battlecards &
Take-Aways
Get equipped with ready-to-go methodologies and tools that you can apply in real-life
Next Generation Security Practitioner blends video learning, live simulation and ready-to-use toolkits to create a fast, immersive learning arc. You won’t just hear ideas - you’ll test them under pressure, practise with realistic scenarios, and leave with methods you can apply immediately inside your organisation.
On-Demand
Video Learning
Powerful video lessons accompany the course to help introduce the core concepts and models covered
