Level 4 Physical Penetration Testing Course (RQF)
Anyone can walk a perimeter with a clipboard. Getting past the fence, the reception desk and the badge reader — without ever being challenged — is a different skill entirely.
The Level 4 Award in Physical Penetration Testing Operations (RQF) is a nationally recognised, Ofqual-regulated qualification for professionals who need to test an organisation’s physical security the way a real attacker would — and then prove, in writing, exactly where it failed.
We deliver this course both as open enrolment dates and as closed, in-house courses for organisations that want to train a team together, subject to minimum numbers.
Delivery:Classroom
Duration:5 Days
Awarding Body:QNUK
Certificate: Included
Course Overview
Physical security testing is easy to fake and hard to do properly.
The Level 4 Award in Physical Penetration Testing Operations (RQF) is built for people who need to prove — not assume — that a building, site or venue is actually secure.
Most organisations have never had their physical security tested by someone who actually knows how to defeat it. Alarm systems, access control, security guarding and CCTV all look robust on paper. Whether they hold up against a determined, skilled adversary is a different question entirely — and one most organisations can’t currently answer.
This course exists to close that gap.
Delivered over 5 days, combining classroom instruction with practical, external venue-based exercises, the course takes learners through the full physical penetration testing lifecycle — from legal groundwork and reconnaissance through to gaining access and producing a report a client can act on.
By the end of the course, learners will be able to:
- Plan and scope a physical penetration test lawfully and ethically
- Conduct open-source intelligence gathering (OSINT) against a target site
- Apply social engineering techniques to test human vulnerabilities
- Identify weaknesses in access control, surveillance and physical security systems
- Carry out covert reconnaissance and gain access using recognised methods
- Work alongside IT/cyber penetration testers as part of a converged security assessment
- Prepare and present a professional, client-ready findings report
This isn’t theory delivered from a slide deck. It’s a practical, assessed qualification built around real operational method.
About the Trainers
This course is delivered by professionals who have operated at the sharp end of security, risk and incident management, bringing real world experience from policing, investigations, event command and complex operational environments. Their backgrounds span public and private sectors, with extensive experience in risk assessment, protective security planning and managing live incidents where decisions carry real consequence. This means the course is not taught from theory alone but grounded in practical application, giving learners direct access to the insight, judgement and experience required to operate confidently as a Physical Penetration Operative.
What Does the Course Include?
- Full course handbook aligned to the QNUK Level 4 qualification specification
- Reference guides covering OSINT methodology, social engineering technique and physical security systems
- Reconnaissance and access planning frameworks
- Reporting templates used to structure client-ready findings
- All materials provided in advance — no hidden costs
- Assessment through a portfolio of evidence demonstrating both theoretical and practical knowledge
- Practical scenario-based exercises assessed in real time
- A full physical penetration test exercise, planned and executed as part of the course
- A final written report, assessed to professional consulting standard
- All assessment marking aligned to QNUK criteria
- Direct access to your 1705 Consultancy trainer throughout the course
- Guidance on portfolio evidence, assignments and expectations
- Support tailored to your sector and operating environment
- Access to instructors with genuine operational background, not classroom-only trainers
- QNUK Level 4 Award in Physical Penetration Testing Operations (RQF)
- Ofqual-regulated — nationally recognised and recorded on the Regulated Qualifications Framework
- Demonstrates verified, assessed capability to employers and clients
- Supports tender requirements and professional indemnity conversations where physical testing capability needs to be evidenced
- Open courses — scheduled dates, individual bookings, ideal for consultants, in-house security staff and career changers
- Closed / in-house courses — delivered exclusively for your organisation or team, run at your preferred location subject to a minimum of 6 delegates
- Closed courses can be tailored to reflect your sector, your typical site types and your existing security stack
- Contact us to discuss dates, delegate numbers and bespoke delivery
Learning Outcomes
To achieve this qualification, learners must complete 10 mandatory units covering the full spectrum of physical penetration testing.
These include:
- Legal & Ethical Standards — the law and ethics governing safe, authorised physical penetration testing
- Open-Source Intelligence (OSINT) — gathering target intelligence before a test ever begins
- Social Engineering — testing the human layer of an organisation's security
- Operational Planning — scoping, planning and risk-managing a physical test
- Physical Security Systems — access control, surveillance and alarm systems, and how they fail
- Reconnaissance — covert and overt methods of assessing a target site
- Methods of Gaining Access — recognised techniques for defeating physical controls
- Equipment — the tools of the trade and how to use them lawfully and safely
- Working with IT Penetration Testers — where physical and cyber testing meet
- Reporting — producing findings a client can actually act on
Who Is This Course For?
This qualification is suited to professionals already working in — or moving into — a security testing or advisory role.
This includes:
- Physical & Corporate Security Professionals looking to formalise red team physical testing skills with a regulated qualification
- Cyber Security Professionals & Penetration Testers extending their capability into the physical domain, to deliver true converged security assessments
- Police, Military & Close Protection Personnel transitioning operational skills into a civilian security testing career
- Risk & Security Consultants wanting to add physical penetration testing to their service offer
- In-House Security Managers who need to understand — and commission — genuine physical security testing
Because of the sensitive nature of this qualification, candidates must hold one of the following:
- A DBS check appropriate to the sector in which you intend to operate
- A DBS check in progress, supported by a letter of recommendation from a senior member of your organisation
- SC or DV security clearance
- BS7858 screening
General requirements:
- You must be 18 or over
- A good command of English is required — all materials, assessments and instruction are delivered in English
- Basic physical fitness is required to take part in the practical elements
Prior experience in security, facility management, policing or the military is beneficial but not essential — what matters most is your ability to engage fully with both the theory and the practical scenarios.
Frequently Asked Questions
A security audit checks whether controls exist on paper. A physical penetration test actively attempts to defeat those controls the way a real attacker would, exposing gaps that a checklist alone would never find.
No. While the course is highly relevant to cyber security professionals looking to add physical testing to their skillset, it’s equally suited to those from a security, policing or military background with no cyber experience at all.
Yes. We run closed, in-house courses for organisations that want to train a team together, subject to a minimum number of delegates. Contact us to discuss numbers, dates and location.
Contact our team to discuss your situation — a DBS check in progress with a supporting letter from your organisation may be sufficient. We’ll advise on the best route before you book.
Yes. The Level 4 Award in Physical Penetration Testing Operations is regulated by Ofqual and sits on the Regulated Qualifications Framework (RQF), awarded by QNUK.
Ready To Test What Others Only Assume is Secure?
One Qualification. Real Capability. Real Assurance.
Whether you’re building a career in physical security testing or commissioning your own in-house team, this course gives you the assessed, regulated capability to find the gaps before someone else does.
Price: £1800 + VAT per person Group discounts available · Closed/bespoke company courses on request (minimum numbers apply)
- Duration: 5 Days
- Level: Level 4
- Delivery: Classroom in person
- Awarding Body: QNUK
- Start Date: Various and Bespoke
Book your space today
Ready to Take the Next Step?
One Qualification. Real Capability. Real Peace of Mind.
This qualification means that when it matters most, you know what to do. Your people are safer for it. And you can look a family in the eye.
Price: £1800 + VAT Per person
Group discounts available · Bespoke company courses on request