BSc Information Security

The Bachelor of Science in Information Security prepares students to become information security professionals, cybersecurity practitioners, security analysts, technology specialists, and security-focused technology innovators capable of identifying, assessing, managing, and mitigating threats to digital information and computing environments.

The program begins with foundational study of computing, programming, mathematics, and information technology. Students develop knowledge of computer systems, operating systems, programming concepts, databases, computer architecture, algorithms, data structures, and networking while developing the computational and problem-solving skills required for further study in information security.

Students progress into the principles and foundations of information security and cybersecurity. They examine the confidentiality, integrity, and availability of information and explore security threats, vulnerabilities, attacks, controls, policies, standards, and defensive strategies. Students learn how security principles can be applied to personal, organizational, enterprise, and cloud-based computing environments.

The program provides comprehensive study of computer and network security. Students explore network architectures, protocols, network vulnerabilities, firewalls, intrusion detection and prevention systems, secure network design, wireless security, virtual private networks, network monitoring, and security controls. Practical activities enable students to examine network traffic, identify vulnerabilities, configure security controls, and respond to common network-based threats.

Students also develop practical expertise in ethical hacking and penetration testing. They learn how authorized security professionals identify vulnerabilities and assess the security of systems, applications, networks, and infrastructure. Topics include reconnaissance, vulnerability assessment, security testing, exploitation concepts, privilege escalation, web application security, password security, security reporting, and remediation. All security testing activities are conducted within appropriate ethical, legal, and controlled environments.

The program incorporates secure programming and application security, enabling students to understand how software vulnerabilities can be introduced, identified, exploited, and mitigated. Students examine secure coding practices, authentication, authorization, input validation, access control, application vulnerabilities, secure software development, code analysis, and security testing.

Cryptography and information assurance form an important component of the program. Students explore encryption, hashing, digital signatures, authentication, key management, certificates, public-key and symmetric cryptography, and cryptographic applications. They learn how cryptographic mechanisms support secure communication, identity verification, data protection, and information assurance.

The program develops practical knowledge of digital forensics and cyber investigations. Students learn how digital evidence is identified, acquired, preserved, examined, analysed, and documented. Coursework introduces forensic methodologies, file-system analysis, network forensics, memory analysis, incident investigation, evidence handling, forensic reporting, and the legal and ethical considerations associated with digital investigations.

Students also examine security operations and incident response. They learn how organizations monitor security environments, detect suspicious activity, investigate security events, contain incidents, recover affected systems, and implement lessons learned. Practical exercises introduce security monitoring, log analysis, security information and event management, incident-response procedures, threat detection, and security operations practices.

The program provides a strong foundation in information security risk management, governance, and compliance. Students explore security policies, risk assessment, security controls, asset management, business continuity, disaster recovery, compliance, audit, governance frameworks, and organizational security practices. They learn to evaluate security risks and recommend appropriate controls based on organizational requirements and threat environments.

Cloud, mobile, and emerging technology security are also addressed. Students examine security considerations associated with cloud computing, virtualization, mobile devices, Internet of Things environments, distributed systems, and other emerging technologies. They learn how traditional security principles can be adapted to modern digital infrastructures.

The program places significant emphasis on privacy, ethics, law, and responsible cybersecurity practice. Students examine data protection, privacy, cybercrime, digital rights, professional ethics, responsible disclosure, security governance, and the legal implications of security activities. This prepares graduates to operate responsibly within professional and regulatory environments.

Research, innovation, and practical application are integrated throughout the degree. Students develop the ability to investigate security problems, evaluate security technologies, analyse emerging threats, conduct structured security assessments, and communicate technical findings. The final-year Information Security Project enables students to investigate a significant information-security problem and develop, evaluate, or implement an appropriate solution under academic supervision.

Students may apply their knowledge to practical security challenges involving finance, healthcare, education, government, telecommunications, energy, manufacturing, retail, transportation, cloud computing, software development, and other technology-driven industries.

Graduates are equipped for professional careers in information security, cybersecurity, security operations, network security, penetration testing, digital forensics, information assurance, security administration, security consulting, risk management, and related technology fields. The degree also provides a foundation for professional certifications, postgraduate study, research, and further specialization in cybersecurity and information security.