THREE STEPS LEFT TRAINING CATALOGUE

Practical cybersecurity training for business, risk and technology teams

Choose the right Three Steps Left route for your learners, from free quick-start learning to instructor-led courses, intensive bootcamps and private cohorts.

Built by Envista Consulting, Three Steps Left helps learners understand cyber risk earlier, ask better questions and work more confidently across business, technology and governance conversations.

ROUTE SELECTOR

From awareness to practice

Free learning → Foundations → Core pathway → Bootcamp or private cohort

A calm, practical route for learners who need to connect cyber risk to real business and delivery decisions.

CHOOSE YOUR STARTING POINT

Start with the route that fits your learners

Free learning and Quick Start

A practical first step for learners who want to explore the Three Steps Left approach before joining an instructor-led course. Use this route if learners are new to the topic, need a short introduction, or want to understand the language and structure of the programme.

Next Level

For learners who are ready to move beyond introductory content and start building deeper capability through structured training. Use this route if learners already have some awareness of cyber risk, business analysis, governance, technology delivery or service management.

Foundations

The entry-level instructor-led course for learners who want a clear, practical grounding in the Three Steps Left approach. This is a two-day public or private course designed to help learners build shared language, context and confidence before progressing into the Core pathway.

Core pathway

Five two-day courses for learners who need more focused training across risk, people, data, systems, applications and services. The Core pathway can be taken as individual courses or as a structured development route.

Complete Cybersecurity Bootcamp

A five-day intensive option for learners who need a broader programme delivered in a concentrated format. This route is suited to organisational buyers who want to bring the training together for a cohort, including on-site delivery where appropriate.

Specialist and Advanced topics

Future Specialist and Advanced topics are in development and should be treated as provisional until course scope, format and pricing are confirmed.

WHY THIS PROGRAMME EXISTS

Cybersecurity is not only a technical issue

Many cyber risks are shaped long before systems go live. They appear in business decisions, process design, data handling, supplier choices, governance models, service operations and change delivery.

Three Steps Left is designed for learners who need to understand those decisions earlier and contribute more effectively. The aim is practical learning that helps learners connect cyber risk to the work they already do.

Designed for learners across

  • Business analysis
  • Risk and governance
  • Technology delivery
  • Cybersecurity and information security
  • Data and digital services
  • Product and service management
  • Change and transformation
  • Supplier and operational environments

LEARNING PATHWAY OVERVIEW

A structured route from awareness to deeper practice

1. Free learning and Quick Start — Introductory learning for learners exploring the Three Steps Left approach.

2. Foundations — A two-day instructor-led course for learners who need the entry-level grounding before progressing further. Public course price: £1,295 plus VAT per learner. Private cohort price: from £8,500 plus VAT for up to twelve learners.

3. Core pathway — Five two-day courses covering the main areas of cybersecurity practice across enterprise risk, human factors, data, systems, applications and services. Public course price: £1,295 plus VAT per learner, per two-day course. Private cohort price: from £8,500 plus VAT for up to twelve learners, per two-day course.

4. Complete Cybersecurity Bootcamp — A five-day intensive format using the supplied Three Steps Left training materials. Public five-day intensive price: £2,850 plus VAT per learner. Private five-day cohort price: from £16,500 plus VAT for up to twelve learners.

5. Specialist and Advanced learning — Developing topics include Strategic Cyber Risk Management, Quantum Business Analysis and AI Governance. Advanced pricing remains provisional until course format, scope and delivery model are confirmed.

FOUNDATIONS

Start with the core language, concepts and decisions

Foundations is the entry-level two-day instructor-led course in the Three Steps Left programme. It is designed for learners who want a practical introduction to cybersecurity from a business, risk and delivery perspective.

This course is a good starting point for learners who need to understand where cyber risk appears in everyday business and technology work, build shared language across business and technical teams, recognise why early decisions matter, connect cybersecurity to governance, change, service and delivery activity, and prepare for the Core pathway.

Format: two-day instructor-led course.

Public course price: £1,295 plus VAT per learner.

Private cohort price: from £8,500 plus VAT for up to twelve learners.

Register interest in Foundations

Use this form to register interest in the entry-level instructor-led course.

Register interest in Foundations

Tell us what you’re interested in and we’ll follow up with relevant Foundations course information.

CORE PATHWAY

Five focused courses for deeper practical learning

The Core pathway gives learners a structured way to build capability across the areas where cyber risk is shaped, managed and communicated. Each course is a two-day instructor-led course and can be taken individually or as part of the wider pathway.

Public course price: £1,295 plus VAT per learner, per course.

Private cohort price: from £8,500 plus VAT for up to twelve learners, per course.

Enterprise Risk Management

For learners who need to understand cyber risk in the context of organisational risk, governance and decision-making. This course focuses on how cyber risk connects to enterprise risk conversations, business priorities and accountable decision-making. Suitable for learners in risk, governance, business analysis, cyber, technology leadership, change and service roles. Format: two-day instructor-led course. Public course price: £1,295 plus VAT per learner. Private cohort price: from £8,500 plus VAT for up to twelve learners.

Human Factors

For learners who need to understand the people, process and behaviour elements of cybersecurity. This course focuses on how human decisions, operating models, ways of working and organisational context can affect cyber risk. Suitable for learners in business analysis, change, service management, governance, security awareness, risk and operational roles. Format: two-day instructor-led course. Public course price: £1,295 plus VAT per learner. Private cohort price: from £8,500 plus VAT for up to twelve learners.

Data Security

For learners who need to understand how data choices affect security, privacy, governance and operational risk. This course focuses on the way data is collected, used, shared, stored and protected across business and technology environments. Suitable for learners in data, business analysis, governance, risk, product, service, technology and transformation roles. Format: two-day instructor-led course. Public course price: £1,295 plus VAT per learner. Private cohort price: from £8,500 plus VAT for up to twelve learners.

Systems Security

For learners who need to understand security considerations across systems, platforms and technology environments. This course focuses on the business and delivery decisions that influence how systems are designed, changed, operated and protected. Suitable for learners in technology delivery, business analysis, architecture, operations, cyber, service and governance roles. Format: two-day instructor-led course. Public course price: £1,295 plus VAT per learner. Private cohort price: from £8,500 plus VAT for up to twelve learners.

Application & Service Security

For learners who need to understand cyber risk across applications, services and the full delivery lifecycle. This course focuses on how security is considered in application and service design, delivery, change, operation and continuous improvement. Suitable for learners in product, service management, business analysis, technology delivery, cyber, operations and transformation roles. Format: two-day instructor-led course. Public course price: £1,295 plus VAT per learner. Private cohort price: from £8,500 plus VAT for up to twelve learners.

COMPLETE CYBERSECURITY BOOTCAMP

A five-day intensive route through the programme materials

The Complete Cybersecurity Bootcamp is a concentrated five-day training option based on the supplied Three Steps Left materials. It is designed for learners or organisational cohorts who need a broader programme delivered in a single intensive format.

This route may be suitable when a team needs a shared baseline across cyber risk, human factors, data, systems, applications and services.

Format: five-day intensive training.

Public five-day intensive price: £2,850 plus VAT per learner.

Private five-day cohort price: from £16,500 plus VAT for up to twelve learners.

On-site delivery can be discussed for private cohorts.

SPECIALIST AND ADVANCED LEARNING

Developing topics for targeted learning needs

Specialist and Advanced topics are being developed to support learners with more focused needs. Provisional topics include Strategic Cyber Risk Management, Quantum Business Analysis and AI Governance.

These topics should be treated as developing until the course scope, delivery format, pricing and learner requirements are confirmed.

Public two-day Specialist courses, where confirmed, are priced at £1,295 plus VAT per learner. Private two-day Specialist cohorts, where confirmed, start from £8,500 plus VAT for up to twelve learners. Advanced pricing remains provisional until each Advanced course is confirmed.

PUBLIC OR PRIVATE TRAINING

Choose the delivery model that fits your learners

Public training

Public courses are suitable for individual learners or small groups who want to join scheduled instructor-led training. Public two-day Foundation, Core and Specialist courses are priced at £1,295 plus VAT per learner. Public five-day intensive training is priced at £2,850 plus VAT per learner. Early bird pricing should only be used where dates and cut-off details have been confirmed.

Private cohorts

Private cohorts are suitable for organisations that want a dedicated group learning experience. Private two-day cohorts start from £8,500 plus VAT for up to twelve learners. Private five-day cohorts start from £16,500 plus VAT for up to twelve learners. Private training can be discussed for teams, functions, programmes or organisations that need the learning aligned to their context.

Enquire about private training

Use this form to discuss a dedicated cohort, team route or organisation-wide learning plan.

Private training enquiry

Tell us about your organisation’s training needs and we’ll follow up about private delivery options.

Professional development and accreditation

Clear wording will be confirmed for each course. Where a course supports professional development, continuing learning records or accreditation requirements, the relevant course information should state the confirmed wording, evidence and applicable hours. Learners who are maintaining IIBA or other professional development records should check the individual course details before making a claim. Formal accreditation claims, credit values and certification wording should only be used where they have been confirmed for the specific course.

Community of Practice

Ongoing support after the course. The Community of Practice is intended to provide ongoing support for learners who want to continue discussing Three Steps Left topics after training. It may include access to learning discussions, practical prompts, shared questions and peer support, depending on the final configuration. Entitlements, access rules, pricing and membership terms need to be confirmed before this is configured or published as a live offer.

FOR ORGANISATIONS AND TEAM BUYERS

Build a route around your learners

Envista Consulting can discuss private training routes for organisations that need a dedicated cohort or a more tailored learning plan.

This route may suit business analysis teams, risk and governance teams, cybersecurity and information security teams, technology delivery teams, product and service teams, transformation programmes, and cross-functional leadership groups.

A private cohort can focus on a single course, the Core pathway, the five-day intensive, or a planned route across multiple learning needs.

PRIVATE COHORT OPTIONS

Team, function or organisation-wide routes

Use a single course, the Core pathway, the five-day intensive, or a planned route across multiple needs.

START WITH THE RIGHT ROUTE

Find the best next step for your learners

Choose Foundations if your learners need the entry-level instructor-led course. Choose the Core pathway if your learners are ready for focused two-day courses across key cybersecurity practice areas. Choose private training if you are planning learning for a team, function or organisation.