Bachelor of Science in Information Security and Forensics
The Bachelor of Science in Information Security and Forensics is a degree programme that equips students with knowledge and skills in in information security and forensics. The programme falls under the ICT & Computing category and typically spans 4 years of full-time study at accredited Kenyan universities.
The short answer
- What it costs
- Up to Ksh 264,500 a year at a public institution, Ksh 1,058,000 for the whole course. Up to Ksh 441,500 a year at a private one.The detail
- Who can get in
- A KCSE mean grade of C+ or above, plus 4 subject grades. There is another way in without it.The detail
- How long, and when
- Takes 4 years, full-time, with 6 months of attachment. Next intake January 2027, at 12 institutions.The detail
- Where it leads
- 8 careers in the catalogue. The least exposed to AI is Cloud Security Engineer, at 14 out of 100.The detail
The programme
What you study, how long it takes, and how it is delivered.
Overview
The curriculum covers Information Security and Cybersecurity, Digital Forensics and Computer Forensics, Network Security and Network Protection, Cryptography and Cryptographic Systems, Incident Response and Security Operations, Information Security Governance and Compliance. Students engage with both theoretical foundations and practical applications, developing competencies in Rust, Smart-contract security, Advanced Machine Learning, AI Ethics, AI Ethics and Governance. The coursework is designed to build progressive understanding from foundational concepts to advanced topics.
Throughout the programme, students study Network Security and Network Protection, Research Methods and Security Research, Malware Analysis and Threat Intelligence, Ethical Hacking and Penetration Testing, Incident Response and Security Operations. The teaching approach combines lectures, laboratory practicals, tutorials, assignments and independent research projects. This blend ensures graduates can apply theoretical knowledge to real-world problems in their field.
The programme offers specialisations in Cybersecurity and Network Security, Digital Forensics and Computer Forensics, Malware Analysis and Threat Intelligence. Students can focus their studies on areas of particular interest, allowing them to tailor their degree to specific career goals. The flexibility enables graduates to pursue diverse professional paths within the sector.
Graduates of the Bachelor of Science in Information Security and Forensics pursue careers as Cybersecurity Analyst / Security Analyst, Incident Responder / Security Operations Analyst, Security Consultant / Cybersecurity Consultant, Digital Forensics Investigator / Forensics Analyst. They find employment in various sectors including government agencies, private companies, research institutions, non-governmental organisations and academic institutions. The degree opens doors to both local and international opportunities.
The programme is accredited by the Commission for University Education (CUE) and offered at recognised universities across Kenya. Students benefit from industry attachments, fieldwork and practical training that complement classroom learning and enhance employability upon graduation.
What you study
10 subjects- Information Security and Cybersecurity
- Digital Forensics and Computer Forensics
- Network Security and Network Protection
- Cryptography and Cryptographic Systems
- Incident Response and Security Operations
- Information Security Governance and Compliance
- Ethical Hacking and Penetration Testing
- Malware Analysis and Threat Intelligence
- Security Architecture and Secure Design
- Research Methods and Security Research
Modules
10 in the programmeInformation Security and Cybersecurity
Year 1Semester 13 creditsCore
Information security, cybersecurity, security principles, and supporting information security.
Digital Forensics and Computer Forensics
Year 1Semester 23 creditsCore
Digital forensics, computer forensics, forensics investigation, and supporting digital forensics.
Network Security and Network Protection
Year 1Semester 33 creditsCore
Network security, network protection, network defence, and supporting network security.
Cryptography and Cryptographic Systems
Year 2Semester 13 creditsCore
Cryptography and Cryptographic Systems: Cryptography, cryptographic systems, encryption, and supporting cryptography. Covers theoretical foundations, practical applications, and industry-relevant s...
Incident Response and Security Operations
Year 2Semester 23 creditsCore
Incident response, security operations, incident handling, and supporting incident response.
Information Security Governance and Compliance
Year 2Semester 33 creditsCore
Security governance, compliance, security policy, and supporting security governance.
Ethical Hacking and Penetration Testing
Year 3Semester 13 creditsCore
Ethical hacking, penetration testing, vulnerability assessment, and supporting ethical hacking.
Malware Analysis and Threat Intelligence
Year 3Semester 23 creditsCore
Malware analysis, threat intelligence, malware detection, and supporting malware analysis.
Security Architecture and Secure Design
Year 3Semester 33 creditsCore
Security architecture, secure design, security engineering, and supporting security architecture.
Research Methods and Security Research
Year 4Semester 16 creditsCore
Research methods, security research, data collection, and supporting research methods and project work.
Specialisations
Cybersecurity and Network Security
Focuses on cybersecurity, network security, security operations, and incident response. This specialisation equips graduates with discipline-specific competencies for professional practice in Kenya and the East African region, with pathways to postgraduate study and professional certification.
Information Security Governance and Compliance
Concentrates on security governance, compliance, security policy, and risk management. This specialisation equips graduates with discipline-specific competencies for professional practice in Kenya and the East African region, with pathways to postgraduate study and professional certification.
Ethical Hacking and Penetration Testing
Focuses on ethical hacking, penetration testing, vulnerability assessment, and security testing. This specialisation equips graduates with discipline-specific competencies for professional practice in Kenya and the East African region, with pathways to postgraduate study and professional certification.
Digital Forensics and Computer Forensics
Specialises in digital forensics, computer forensics, forensics investigation, and evidence analysis.
Malware Analysis and Threat Intelligence
Focuses on malware analysis, threat intelligence, malware detection, and threat analysis. This specialisation equips graduates with discipline-specific competencies for professional practice in Kenya and the East African region, with pathways to postgraduate study and professional certification.
A day as a student
A typical day starts with morning lectures on cybersecurity, information security, or digital forensics, followed by cybersecurity laboratories, forensics projects, or industry visits. Students secure systems, conduct forensics investigations, work with security tools, analyse threats, and work on their security projects. Industrial attachments at government agencies, financial institutions, and technology companies provide hands-on experience.
The trade-offs
| In its favour | Against it |
|---|---|
| High demand — cybersecurity threats, digital transformation, and financial security needs create strong demand for information security and forensics professionals. | Continuous learning — information security and forensics faces rapid threat evolution, continuous learning requirements, and skills obsolescence. |
| Diverse applications — graduates work in government, finance, healthcare, education, technology, and various industries. | High pressure — cybersecurity work involves high pressure, incident response, critical decision-making, and sometimes stressful situations. |
| Impact — information security and forensics professionals directly protect organisations, prevent cybercrime, and support digital safety. | On-call work — incident response and security operations involve on-call duties, emergency response, and sometimes working outside normal hours. |
What it costs
Tuition at both ends of the market, and how to pay for it.
What it costs, and where
Against 191 technology coursesAnnual tuition in Kenyan shillings, rounded. The upright tick is the median for this field, so a bar sitting entirely to its right is an expensive programme by the standards of its own subject.
The fine print
KU Forensic Sci 245K/yr (mawese). UoN CS 264K/yr. Kabarak 219K, USIU 441K/yr (official)
Students can access HELB undergraduate loans and KUCCPS placement. County bursaries, cybersecurity industry sponsorships, and international security scholarships are available.
Funding options
HELB Undergraduate Loan
KUCCPS Placement
County Government Bursaries
Scholarships
5 recordedLaw Society of Kenya (LSK) Education Assistance Programme
BursaryKenyan
Children of deceased or distressed advocates and law students in need
Cybersecurity Industry Sponsorships
ScholarshipKsh 150,000Kenyan
Technology companies, financial institutions, and cybersecurity organisations may sponsor information security students in exchange for service commitment.
County Government Bursaries
BursaryKsh 50,000Kenyan
Students from specific counties. Varies by county.
Higher Education Loans Board (HELB) Loan
LoanKsh 60,000Kenyan
Kenyan citizens pursuing undergraduate studies at accredited universities.
Higher Education Fund (HEF)
PlacementKsh 0Kenyan
Kenyan students placed to public universities through KUCCPS receive government-subsidised tuition.
Scholarships you could apply for
6 usable where it is taught- Equity Group Foundation Wings to Fly
Closes 28 February 2027FullEquity Bank
Full secondary + university
- Aga Khan Foundation Scholarship
Closes 31 March 2027FullAga Khan Foundation
Full university study
- Family Bank Foundation Education Support
Closes 30 June 2027PartialFamily Bank
KES 80,000 per year
- HELB Undergraduate Scholarship
Closes 31 July 2027PartialHigher Education Loans Board
KES 40,000 to 60,000 per year
- County Government Scholarships
Varies by countyPartialCounty Governments
KES 50,000 to 200,000 per year
- Moringa School Craftbyte Scholarship
QuarterlyFullMoringa School
Full software development course
Getting in
The grades, the alternatives, and who accredits the award.
What you need
Diploma in Information Technology, Computer Science, Cybersecurity, or related fields from recognised institutions may be considered for upgrading. Relevant security or IT experience is advantageous.
When it next starts
Taught at 12 institutionsIncluding KCA University, Jaramogi Oginga Odinga University of Science and Technology, Machakos University.
Including KCA University, Jaramogi Oginga Odinga University of Science and Technology, Machakos University.
Including KCA University, Jaramogi Oginga Odinga University of Science and Technology, Machakos University.
How you are assessed
5 componentsInformation Security and Forensics Practical Examinations
Practicum30% of the mark
Assessment of information security and forensics competencies including cybersecurity, digital forensics, incident response, and security analysis.
End of Semester Written Examinations
Exam30% of the mark
Written examinations covering information security, cybersecurity, digital forensics, and security research.
Continuous Assessment Tests and Assignments
Cat20% of the mark
Assignments, tests, presentations, case studies, and security projects throughout each semester.
Industry Attachment Assessment
Clinical10% of the mark
Assessment of industry attachments including security work, forensics work, documentation, and supervision evaluation.
Research Project
Research10% of the mark
Independent information security and forensics research project, assessed through written report and presentation.
Accreditation
Commission for University Education
NationalRequired
CUE accredits all university programmes in Kenya.
Accredited by the Commission for University Education (CUE). Certified by Communication Authority of Kenya (CAK) for ICT professionals. The Kenya Information and Communications Act governs ICT. The Cybercrime Act governs cybersecurity. The Data Protection Act governs data protection.
Where it leads
The roles it opens, and what you leave with.
Where graduates go
5 rolesCybersecurity Analyst / Security Analyst
High demandKsh 70,000 to Ksh 180,000
Analyses security threats, implements security measures, monitors security systems, and supports cybersecurity at government agencies, financial institutions, or technology companies.
Incident Responder / Security Operations Analyst
High demandKsh 70,000 to Ksh 170,000
Responds to security incidents, manages incident response, security operations, and supports incident response at government agencies, financial institutions, or technology companies.
Security Consultant / Cybersecurity Consultant
High demandKsh 80,000 to Ksh 200,000
Provides security consulting, cybersecurity consulting, risk assessment, and supports security consulting at consulting firms, technology companies, or as independent consultants.
Digital Forensics Investigator / Forensics Analyst
High demandKsh 75,000 to Ksh 190,000
Conducts digital forensics investigations, forensic analysis, evidence collection, and supports forensics at government agencies, law enforcement, or consulting firms.
Information Security Officer / Security Officer
High demandKsh 75,000 to Ksh 180,000
Manages information security, security policies, security governance, and supports security management at government agencies, financial institutions, or business organisations.
Graduate outcomes
Graduates work as cybersecurity analysts and digital forensics investigators. Information security and forensics is in high demand driven by cybersecurity threats. Salaries range from KES 70,000 to 180,000 per month. Ministry of ICT, CAK, KE-CIRT, and financial institutions offer the main opportunities.
Where these fields lead
8 careers- Cloud Security EngineerTechnology14Low exposure
- Industrial Robotics ProgrammerTechnology14Low exposure
- Embedded Firmware EngineerTechnology15Low exposure
- Embedded Linux DeveloperTechnology15Low exposure
- Site Reliability EngineerTechnology15Low exposure
- Applied Cryptography EngineerTechnology16Low exposure
- Database Reliability EngineerTechnology16Low exposure
- Edge Computing EngineerTechnology16Low exposure
Tools you will learn
Git
CodePrimary
GitHub Copilot
Ai
Python
CodePrimary
VS Code
Code
Docker
Cloud
PostgreSQL
Database
Certifications
Industry links
Common misconceptions
Information security and forensics is just about hacking.
Information security and forensics includes cybersecurity, digital forensics, incident response, security governance, and risk management — hacking is one component.
Information security and forensics is only for technology companies.
Information security and forensics applies to government agencies, financial institutions, healthcare, education, and many other industries beyond technology companies.
There are limited career opportunities for information security graduates in Kenya.
Kenya's cybersecurity threats, digital transformation, financial security needs, and government security requirements create demand for information security and forensics professionals at government agencies, financial institutions, and technology companies.
This programme has limited career opportunities.
Graduates pursue diverse career paths across multiple sectors in Kenya and internationally.