Technology

Bachelor of Science in Information Security and Forensics

The Bachelor of Science in Information Security and Forensics is a degree programme that equips students with knowledge and skills in in information security and forensics. The programme falls under the ICT & Computing category and typically spans 4 years of full-time study at accredited Kenyan universities.

The curriculum covers Information Security and Cybersecurity, Digital Forensics and Computer Forensics, Network Security and Network Protection, Cryptography and Cryptographic Systems, Incident Response and Security Operations, Information Security Governance and Compliance. Students engage with both theoretical foundations and practical applications, developing competencies in Rust, Smart-contract security, Advanced Machine Learning, AI Ethics, AI Ethics and Governance. The coursework is designed to build progressive understanding from foundational concepts to advanced topics.

Throughout the programme, students study Network Security and Network Protection, Research Methods and Security Research, Malware Analysis and Threat Intelligence, Ethical Hacking and Penetration Testing, Incident Response and Security Operations. The teaching approach combines lectures, laboratory practicals, tutorials, assignments and independent research projects. This blend ensures graduates can apply theoretical knowledge to real-world problems in their field.

The programme offers specialisations in Cybersecurity and Network Security, Digital Forensics and Computer Forensics, Malware Analysis and Threat Intelligence. Students can focus their studies on areas of particular interest, allowing them to tailor their degree to specific career goals. The flexibility enables graduates to pursue diverse professional paths within the sector.

Graduates of the Bachelor of Science in Information Security and Forensics pursue careers as Cybersecurity Analyst / Security Analyst, Incident Responder / Security Operations Analyst, Security Consultant / Cybersecurity Consultant, Digital Forensics Investigator / Forensics Analyst. They find employment in various sectors including government agencies, private companies, research institutions, non-governmental organisations and academic institutions. The degree opens doors to both local and international opportunities.

The programme is accredited by the Commission for University Education (CUE) and offered at recognised universities across Kenya. Students benefit from industry attachments, fieldwork and practical training that complement classroom learning and enhance employability upon graduation.

Duration: 4 years
Public, up to: Ksh 264,500
Private, up to: Ksh 441,500
Job market: High

The programme

What you study, how long it takes, and how it is delivered.

Practicalities

Study mode: Full-time
Attachment: 6 months
Average class: 50 students
Award: Bachelor

What you study

10 subjects

Information Security and Cybersecurity
Digital Forensics and Computer Forensics
Network Security and Network Protection
Cryptography and Cryptographic Systems
Incident Response and Security Operations
Information Security Governance and Compliance
Ethical Hacking and Penetration Testing
Malware Analysis and Threat Intelligence
Security Architecture and Secure Design
Research Methods and Security Research

Modules

10 in the programme

Information Security and Cybersecurity
Year 1Semester 13 creditsCore
Information security, cybersecurity, security principles, and supporting information security.
Digital Forensics and Computer Forensics
Year 1Semester 23 creditsCore
Digital forensics, computer forensics, forensics investigation, and supporting digital forensics.
Network Security and Network Protection
Year 1Semester 33 creditsCore
Network security, network protection, network defence, and supporting network security.
Cryptography and Cryptographic Systems
Year 2Semester 13 creditsCore
Cryptography and Cryptographic Systems: Cryptography, cryptographic systems, encryption, and supporting cryptography. Covers theoretical foundations, practical applications, and industry-relevant s...
Incident Response and Security Operations
Year 2Semester 23 creditsCore
Incident response, security operations, incident handling, and supporting incident response.
Information Security Governance and Compliance
Year 2Semester 33 creditsCore
Security governance, compliance, security policy, and supporting security governance.
Ethical Hacking and Penetration Testing
Year 3Semester 13 creditsCore
Ethical hacking, penetration testing, vulnerability assessment, and supporting ethical hacking.
Malware Analysis and Threat Intelligence
Year 3Semester 23 creditsCore
Malware analysis, threat intelligence, malware detection, and supporting malware analysis.
Security Architecture and Secure Design
Year 3Semester 33 creditsCore
Security architecture, secure design, security engineering, and supporting security architecture.
Research Methods and Security Research
Year 4Semester 16 creditsCore
Research methods, security research, data collection, and supporting research methods and project work.

Specialisations

Cybersecurity and Network Security
Focuses on cybersecurity, network security, security operations, and incident response. This specialisation equips graduates with discipline-specific competencies for professional practice in Kenya and the East African region, with pathways to postgraduate study and professional certification.
Information Security Governance and Compliance
Concentrates on security governance, compliance, security policy, and risk management. This specialisation equips graduates with discipline-specific competencies for professional practice in Kenya and the East African region, with pathways to postgraduate study and professional certification.
Ethical Hacking and Penetration Testing
Focuses on ethical hacking, penetration testing, vulnerability assessment, and security testing. This specialisation equips graduates with discipline-specific competencies for professional practice in Kenya and the East African region, with pathways to postgraduate study and professional certification.
Digital Forensics and Computer Forensics
Specialises in digital forensics, computer forensics, forensics investigation, and evidence analysis.
Malware Analysis and Threat Intelligence
Focuses on malware analysis, threat intelligence, malware detection, and threat analysis. This specialisation equips graduates with discipline-specific competencies for professional practice in Kenya and the East African region, with pathways to postgraduate study and professional certification.

A day as a student

A typical day starts with morning lectures on cybersecurity, information security, or digital forensics, followed by cybersecurity laboratories, forensics projects, or industry visits. Students secure systems, conduct forensics investigations, work with security tools, analyse threats, and work on their security projects. Industrial attachments at government agencies, financial institutions, and technology companies provide hands-on experience.

The trade offs

In its favour

High demand — cybersecurity threats, digital transformation, and financial security needs create strong demand for information security and forensics professionals.
Diverse applications — graduates work in government, finance, healthcare, education, technology, and various industries.
Impact — information security and forensics professionals directly protect organisations, prevent cybercrime, and support digital safety.

Against it

Continuous learning — information security and forensics faces rapid threat evolution, continuous learning requirements, and skills obsolescence.
High pressure — cybersecurity work involves high pressure, incident response, critical decision-making, and sometimes stressful situations.
On-call work — incident response and security operations involve on-call duties, emergency response, and sometimes working outside normal hours.

What it costs

Tuition at both ends of the market, and how to pay for it.

What it costs, and where

Against 191 technology courses

Public245k to 265k

245k at Kenyatta University265k at University of Nairobi

Private219k to 442k

219k at Kabarak University442k at United States International University Africa

Annual tuition in Kenyan shillings, rounded. The upright tick is the median for this field, so a bar sitting entirely to its right is an expensive programme by the standards of its own subject.

The fine print

KU Forensic Sci 245K/yr (mawese). UoN CS 264K/yr. Kabarak 219K, USIU 441K/yr (official)

Students can access HELB undergraduate loans and KUCCPS placement. County bursaries, cybersecurity industry sponsorships, and international security scholarships are available.

Funding options

HELB Undergraduate Loan
KUCCPS Placement
County Government Bursaries

Scholarships

5 recorded

Law Society of Kenya (LSK) Education Assistance Programme
BursaryKenyan
Children of deceased or distressed advocates and law students in need
Cybersecurity Industry Sponsorships
ScholarshipKsh 150,000Kenyan
Technology companies, financial institutions, and cybersecurity organisations may sponsor information security students in exchange for service commitment.
County Government Bursaries
BursaryKsh 50,000Kenyan
Students from specific counties. Varies by county.
Higher Education Loans Board (HELB) Loan
LoanKsh 60,000Kenyan
Kenyan citizens pursuing undergraduate studies at accredited universities.
Higher Education Fund (HEF)
PlacementKsh 0Kenyan
Kenyan students placed to public universities through KUCCPS receive government-subsidised tuition.

Getting in

The grades, the alternatives, and who accredits the award.

What you need

KCSE mean grade: C+
Alternative entry: Diploma in Information Technology, Computer Science, Cybersecurity, or related fields from recognised institutions may be considered for upgrading. Relevant security or IT experience is advantageous.

Mathematics
C+
Physics or Computer Studies
C
English or Kiswahili
C
Chemistry or Biology
C

How you are assessed

5 components

Information Security and Forensics Practical Examinations
Practicum30% of the mark
Assessment of information security and forensics competencies including cybersecurity, digital forensics, incident response, and security analysis.
End of Semester Written Examinations
Exam30% of the mark
Written examinations covering information security, cybersecurity, digital forensics, and security research.
Continuous Assessment Tests and Assignments
Cat20% of the mark
Assignments, tests, presentations, case studies, and security projects throughout each semester.
Industry Attachment Assessment
Clinical10% of the mark
Assessment of industry attachments including security work, forensics work, documentation, and supervision evaluation.
Research Project
Research10% of the mark
Independent information security and forensics research project, assessed through written report and presentation.

Accreditation

Accredited by the Commission for University Education (CUE). Certified by Communication Authority of Kenya (CAK) for ICT professionals. The Kenya Information and Communications Act governs ICT. The Cybercrime Act governs cybersecurity. The Data Protection Act governs data protection.

Accredited by

Commission for University Education
NationalRequired
CUE accredits all university programmes in Kenya.

Where it leads

The roles it opens, and what you leave with.

Where graduates go

5 roles

Cybersecurity Analyst / Security Analyst
High demandKsh 70,000 to Ksh 180,000
Analyses security threats, implements security measures, monitors security systems, and supports cybersecurity at government agencies, financial institutions, or technology companies.
Incident Responder / Security Operations Analyst
High demandKsh 70,000 to Ksh 170,000
Responds to security incidents, manages incident response, security operations, and supports incident response at government agencies, financial institutions, or technology companies.
Security Consultant / Cybersecurity Consultant
High demandKsh 80,000 to Ksh 200,000
Provides security consulting, cybersecurity consulting, risk assessment, and supports security consulting at consulting firms, technology companies, or as independent consultants.
Digital Forensics Investigator / Forensics Analyst
High demandKsh 75,000 to Ksh 190,000
Conducts digital forensics investigations, forensic analysis, evidence collection, and supports forensics at government agencies, law enforcement, or consulting firms.
Information Security Officer / Security Officer
High demandKsh 75,000 to Ksh 180,000
Manages information security, security policies, security governance, and supports security management at government agencies, financial institutions, or business organisations.

Graduate outcomes

Graduates work as cybersecurity analysts and digital forensics investigators. Information security and forensics is in high demand driven by cybersecurity threats. Salaries range from KES 70,000 to 180,000 per month. Ministry of ICT, CAK, KE-CIRT, and financial institutions offer the main opportunities.

Where these fields lead

8 careers

Tools you will learn

Git
CodePrimary
GitHub Copilot
Ai
Python
CodePrimary
VS Code
Code
Docker
Cloud
PostgreSQL
Database

Certifications

Industry links

Common misconceptions

Information security and forensics is just about hacking.
Information security and forensics includes cybersecurity, digital forensics, incident response, security governance, and risk management — hacking is one component.
Information security and forensics is only for technology companies.
Information security and forensics applies to government agencies, financial institutions, healthcare, education, and many other industries beyond technology companies.
There are limited career opportunities for information security graduates in Kenya.
Kenya's cybersecurity threats, digital transformation, financial security needs, and government security requirements create demand for information security and forensics professionals at government agencies, financial institutions, and technology companies.
This programme has limited career opportunities.
Graduates pursue diverse career paths across multiple sectors in Kenya and internationally.