THREE STEPS LEFT CORE PATHWAY
Choose the cybersecurity learning route that fits your team
A practical overview of the five Core courses and the five-day Complete Cybersecurity Bootcamp from Three Steps Left by Envista Consulting.
Build practical cybersecurity analysis capability through focused instructor-led training. The Three Steps Left Core pathway gives learners a flexible way to build capability across five two-day courses. Teams that need a concentrated format can choose the five-day Complete Cybersecurity Bootcamp. This page helps learners and team buyers compare the routes, understand the course focus and choose the right next step.
Route selector
Flexible Core pathway
Five separate two-day courses for staged capability-building.
Complete Cybersecurity Bootcamp
A five-day intensive route through the full Core content.
Private cohort
A structured route for teams that need shared language and consistent delivery.
For learners who work where cyber, risk, systems and change meet
The Core pathway is designed for learners who need to understand cybersecurity in practical business and delivery contexts.
It is suited to business analysts and change professionals working on digital, data or technology initiatives; product, service and delivery teams who need stronger cybersecurity awareness in day-to-day decisions; risk, compliance and governance professionals who need to connect cyber risk with business outcomes; technology-adjacent learners who need clearer language, structure and confidence when working with security teams; and team leaders and capability leads building a shared cybersecurity analysis baseline across a group.
The pathway is practical, structured and instructor-led. It is not positioned as a live checkout page. It is an overview and enquiry route for public course interest and private cohort discussion.
Two ways to build Core capability
Flexible Core pathway
Choose the flexible Core pathway if learners need to build capability in stages. The flexible route is made up of five separate two-day instructor-led courses. Each course includes four 75-minute sessions per day, with eight sessions in total.
Complete Cybersecurity Bootcamp
Choose the Complete Cybersecurity Bootcamp if learners need a concentrated programme. The intensive route brings the Core content together across five days, with twenty 75-minute sessions in total. It is suitable where a team needs a shared learning experience over a shorter period, built from the Three Steps Left Core curriculum.
Both routes are built around practical understanding, shared language and better decision-making in cybersecurity-related work.
CORE COURSE OPTIONS
Five focused two-day courses
Each Core course is designed to help learners build practical cybersecurity analysis capability in a specific area.
Enterprise Risk Management
Understand cybersecurity as a business risk, not just a technical issue. This course helps learners connect cyber risk with organisational priorities, governance, controls and decision-making.
Best suited for learners who need to understand how cyber risk affects business outcomes; work more confidently with risk owners, governance teams and security stakeholders; translate cyber concerns into clearer analysis and decision support; and explore how controls, assurance and accountability fit together.
Topics include cyber risk in an enterprise context; risk identification, assessment and treatment; governance and accountability; controls and assurance thinking; and communicating risk clearly to stakeholders.
Human Factors
Understand the people side of cybersecurity. This course explores how behaviour, culture, communication and decision-making influence cybersecurity outcomes.
Best suited for learners who need to understand why people make insecure choices, even with good intentions; design better processes, prompts and communications; support security-aware ways of working without relying only on policy; and work with stakeholders in a way that improves adoption and understanding.
Topics include human behaviour and cyber risk; security culture and organisational habits; usability, friction and secure decision-making; awareness, communication and stakeholder engagement; and designing for realistic working conditions.
Data Security
Understand how data needs to be protected across its lifecycle. This course helps learners analyse data risk, protection needs and security requirements in business and technology change.
Best suited for learners who need to work with personal, sensitive or business-critical data; understand how data classification, access and handling affects risk; ask better questions during analysis, design and delivery; and support clearer conversations between business, data and security teams.
Topics include data types, value and sensitivity; data lifecycle and handling risks; access, permissions and least privilege; confidentiality, integrity and availability; and security requirements for data-led change.
Systems Security
Understand how systems are protected, connected and exposed. This course gives learners a practical view of systems security, helping them understand common risks, controls and architecture considerations.
Best suited for learners who need to work on technology, infrastructure or platform-related change; understand the security impact of system design decisions; engage more effectively with architects, engineers and security specialists; and recognise where systems create, reduce or transfer risk.
Topics include system boundaries and trust relationships; identity, access and authentication concepts; network and infrastructure security considerations; threats, vulnerabilities and control points; and security considerations in system change.
Application & Service Security
Understand security in applications, services and user-facing delivery. This course focuses on how security requirements, design choices and service decisions affect applications and digital services.
Best suited for learners who need to work on application, product or service change; understand common application and service security concerns; support better requirements, acceptance criteria and risk conversations; and work more effectively with product, engineering, testing and security teams.
Topics include application and service risk; secure requirements and design considerations; authentication, authorisation and session concepts; common application security weaknesses; and security in delivery, testing and service operation.
INTENSIVE ROUTE
Complete Cybersecurity Bootcamp
A five-day intensive route through the Core content. The Complete Cybersecurity Bootcamp is designed for learners or teams who need a concentrated learning format rather than separate two-day courses.
The bootcamp includes twenty 75-minute sessions across five days. It is delivered as an on-site or intensive format built from the Three Steps Left Core curriculum.
This route may be appropriate when a team needs a shared baseline quickly; learners can commit to an intensive schedule; a private cohort needs a consistent experience across roles; or the organisation wants to reduce the time between learning, discussion and application.
The bootcamp covers the Core pathway in a compressed format. It should be chosen for focus and momentum, rather than for a lighter workload.
Start with shared language, then build Core capability
Foundations is the recommended entry point for learners who are new to cybersecurity concepts or who need a common language before moving into the Core pathway. Foundations is not mandatory unless agreed as part of a specific team route or learning plan.
The Core pathway then lets learners go deeper into the areas most relevant to their role, team or organisation: enterprise risk, human factors, data security, systems security, and application and service security.
Community can support continued discussion around the learning, helping learners revisit ideas, compare perspectives and apply the language in context.
Public and private training options
Public Core courses
Ā£1,295 plus VAT per learner per two-day course.
Each two-day Core course includes four 75-minute instructor-led sessions per day, with eight sessions in total.
Public five-day intensive
Ā£2,850 plus VAT per learner.
The five-day intensive includes twenty 75-minute sessions in total.
Private two-day cohort
From Ā£8,500 plus VAT for up to twelve learners.
A private cohort is suitable for teams who want one Core course delivered to a defined group.
Private five-day cohort
From Ā£16,500 plus VAT for up to twelve learners.
A private five-day cohort is suitable for teams who want the Complete Cybersecurity Bootcamp delivered to a defined group.
Pricing is shown for planning and route selection. This page does not take payment or confirm a booking.
Supporting preparation for cybersecurity analysis content
The Core pathway is designed to support learning in areas relevant to cybersecurity analysis.
Where the relevant syllabus areas are covered, the Core courses can support preparation for IIBA Certificate in Cybersecurity Analysis content.
Three Steps Left and Envista Consulting are responsible for this training content. IIBA certification, assessment and credential requirements are governed by IIBAā€™s own current rules and guidance.
Learners should also review the current IIBA guidance, syllabus and assessment requirements when planning any certification preparation.
Completion of a course or pathway does not guarantee certification, exam readiness or assessment outcomes.
For team buyers and private cohorts
Private cohorts are useful when an organisation needs a consistent learning experience across a group of learners.
A private route can help teams align on shared cybersecurity language; discuss examples in a more relevant organisational context; build confidence across mixed roles and experience levels; choose the most suitable Core course sequence or intensive format; and plan learning around team priorities and delivery constraints.
For a private cohort, start with a short enquiry so the most suitable route can be discussed before confirming delivery details.
PRIVATE TRAINING ENQUIRY
Private training enquiry
Tell us about your organisationā€™s training needs and weā€™ll follow up about private delivery options.
Choose the route that fits the learning need
Use the flexible Core pathway for staged learning across specific cybersecurity areas. Use the Complete Cybersecurity Bootcamp for a concentrated five-day intensive experience. Use a private cohort when a team needs shared language, consistent delivery and a route shaped around the group.
CORE COURSE INTEREST
Register your Core course interest
Tell us what you are exploring so we can point you to the right Core course or pathway.