Technology

Certificate in Cyber Security

The Certificate in Cyber Security equips learners with foundational knowledge and practical skills in protecting computer systems, networks, and data from cyber threats. The programme covers network security, data protection, threat detection, and risk management within the context of Kenya's evolving digital landscape. Students gain hands-on competencies aligned with the CDACC Level 5 curriculum, preparing them for entry-level roles in the growing cybersecurity sector.

Learners develop skills in computer repair and maintenance, cyber security laws and policies, computer networking, software application security, database security, and security assessment and testing. The curriculum follows a competency-based education and training (CBET) model, emphasising practical competencies over theoretical knowledge alone. Industrial attachment is a core component, providing real-world exposure in cyber security firms.

Kenya has experienced a significant rise in cyber threats伴随着 the rapid expansion of digital services, mobile banking, and e-commerce. The Communications Authority of Kenya has reported increasing incidents of cyber attacks, creating demand for trained cyber security personnel across both public and private sectors. The National Kenya Computer Incident Response Team (National KE-CIRT) coordinates response to cyber incidents, highlighting the national priority placed on cyber security capacity building.

The programme combines classroom instruction, laboratory practicals, and industrial attachment. Students use industry-standard tools for vulnerability assessment, network defence, and security system installation. The CDACC curriculum ensures standardised competencies that are recognised across the East African region. Delivery modes include full-time, evening, and weekend options to accommodate diverse learner needs.

Graduates find employment as cyber security technicians, IT security assistants, network security support staff, or security operations centre analysts. The certificate also provides a pathway to diploma programmes in cyber security, information technology, or related fields. Professional registration with the Institute of Certified Safety and Security Professionals of Kenya (ICSSPK) is available upon completion.

This programme is ideal for KCSE graduates seeking an entry point into the IT security field, as well as working professionals in IT or security roles who wish to formalise their cyber security skills. The competency-based approach makes it accessible to learners from diverse educational backgrounds.

Duration: 1 year
Public, up to: Ksh 67,189
Private, up to: Ksh 60,000
Job market: High

The programme

What you study, how long it takes, and how it is delivered.

Practicalities

Study mode: Full-time, Part-time, Evening, Weekend
Attachment: 3 months
Average class: 30 students
Award: Certificate

What you study

10 subjects

Cyber Security Fundamentals
Computer Networking
Computer Repair and Maintenance
Database Security
Software Application Security
Cyber Security Laws and Policies
Risk Assessment and Testing
Digital Literacy
Network Protection
Security System Administration

Modules

8 in the programme

Digital Literacy
Year 1Semester 13 creditsCore
Foundation in digital technologies, computer operations, internet usage, and information management, providing the baseline digital skills required for cyber security studies.
Computer Repair and Maintenance
Year 1Semester 13 creditsCore
Practical skills in diagnosing, repairing, and maintaining computer hardware and software systems, including component replacement, system configuration, and preventive maintenance procedures.
Cyber Security Laws, Policies and Regulations
Year 1Semester 13 creditsCore
Study of Kenyan cyber security legislation including the Computer Misuse and Cybercrimes Act, Data Protection Act, and relevant international frameworks governing digital security and privacy.
Computer Networking
Year 1Semester 13 creditsCore
Fundamentals of computer networks including network topologies, protocols, IP addressing, routing, and switching, with emphasis on network security principles and secure configuration.
Software Application Security
Year 1Semester 23 creditsCore
Principles of securing software applications, covering common vulnerabilities, secure coding practices, application testing, and mitigation strategies for web and mobile applications.
Database Security
Year 1Semester 23 creditsCore
Techniques for protecting databases from unauthorised access, including access control, encryption, audit logging, backup strategies, and database vulnerability assessment methods.
Cyber Security System Administration
Year 1Semester 23 creditsCore
Installation, configuration, and administration of cyber security systems including firewalls, intrusion detection systems, antivirus software, and security information and event management tools.
Security Assessment and Testing
Year 1Semester 23 creditsCore
Methods and tools for conducting cyber security assessments, including vulnerability scanning, penetration testing basics, risk assessment frameworks, and security audit reporting.

Specialisations

Network Security
Focus on securing computer networks through firewalls, intrusion detection systems, and network access control configurations.
Database Security
Focus on protecting databases from unauthorised access, including encryption, access control, and audit monitoring.
Security Assessment and Testing
Focus on vulnerability scanning, penetration testing basics, and security risk assessment methodologies.
Cyber Security Policy and Compliance
Focus on Kenyan cyber security laws, data protection regulations, and organisational compliance frameworks.

A day as a student

A typical day begins with morning lectures on cyber security principles or network protocols, followed by afternoon laboratory sessions where students practise vulnerability assessments, configure firewalls, and use security tools. Industrial attachment provides real-world exposure in cyber security firms or IT departments.

The trade offs

In its favour

High demand for cyber security skills in Kenya's rapidly expanding digital economy.
CDACC Level 5 certification is nationally recognised and provides a clear pathway to diploma and degree programmes.
Industrial attachment provides practical experience that is highly valued by employers in the cyber security sector.

Against it

Cyber security tools and threats evolve rapidly, requiring continuous self-learning beyond the certificate curriculum.
Entry-level salaries may be modest compared to the cost of cyber security certifications required for career advancement.
Limited number of universities currently offer this programme, restricting geographic access for some learners.

What it costs

Tuition at both ends of the market, and how to pay for it.

What it costs, and where

Against 191 technology courses

Public67k to 67k

67k at Kamukunji Technical and Vocational College67k at Nairobi Technical Training Institute

Private60k to 60k

60k at Digiask Institute of Technology60k at Digiask Institute of Technology

Annual tuition in Kenyan shillings, rounded. The upright tick is the median for this field, so a bar sitting entirely to its right is an expensive programme by the standards of its own subject.

The fine print

Public TVET 67K/yr (kamukunjitvc.ac.ke). Private: Digiask 30K/sem=60K/yr (dit.ac.ke).

HELB loans and NGCDF bursaries are available for eligible Kenyan students enrolled in certificate programmes at chartered universities.

Funding options

HELB Loan
NGCDF Bursary

Scholarships

2 recorded

HELB Loan
LoanKsh 40,000Kenyan
Kenyan students enrolled in certificate programmes at chartered universities
NGCDF Bursary
BursaryKenyan
Kenyan students from respective constituencies pursuing certificate-level studies

Getting in

The grades, the alternatives, and who accredits the award.

What you need

KCSE mean grade: D
Alternative entry: Level 4 certificate in a related course with one year of continuous work experience, or equivalent qualifications as determined by KNQA.

How you are assessed

3 components

Competency-Based Assessments
Practical assessment50% of the mark
Continuous competency assessments conducted by trained industry assessors, evaluating learners on milestone achievements in each unit of competency.
End of Semester Examinations
Written examination30% of the mark
Written examinations covering theoretical knowledge across all modules taken during the semester.
Industrial Attachment Assessment
Practicum20% of the mark
Assessment of practical competencies demonstrated during the 480-hour industrial attachment at a cyber security firm or IT department.

Accreditation

The programme follows the TVET CDACC Level 5 curriculum framework, accredited by the Curriculum Development, Assessment and Certification Council (CDACC). Universities offering the programme are accredited by the Commission for University Education (CUE). Professional registration with ICSSPK is available for security professionals.

Accredited by

Commission for University Education
AcademicRequired
Programme follows TVET CDACC Level 5 curriculum. Universities offering the programme are accredited by CUE. Professional registration with ICSSPK is available.
Curriculum Development, Assessment and Certification Council (CDACC)
ProfessionalRequired
CDACC Level 5 certification is issued upon demonstration of competence in all units of the qualification pack.

Where it leads

The roles it opens, and what you leave with.

Where graduates go

4 roles

Cyber Security Technician
High demandKsh 30,000 to Ksh 80,000
Installs and maintains security systems, monitors networks for threats, and supports incident response activities in organisations.
IT Security Assistant
High demandKsh 28,000 to Ksh 70,000
Assists with implementing security policies, conducting vulnerability assessments, and supporting user awareness training programmes.
Network Security Support Staff
Moderate demandKsh 25,000 to Ksh 65,000
Configures and monitors network security devices, manages access controls, and supports network security operations under senior staff supervision.
Security Operations Centre Analyst
High demandKsh 35,000 to Ksh 90,000
Monitors security alerts, analyses security events, and escalates incidents in a security operations centre environment.

Graduate outcomes

Graduates find entry-level roles as cyber security technicians, IT security assistants, and network security support staff, with opportunities to progress to diploma programmes in cyber security.

Where these fields lead

8 careers

Tools you will learn

Wireshark
SoftwarePrimary
Kali Linux
SoftwarePrimary
Microsoft Office
Software

Certifications

Industry links

Common misconceptions

A certificate in cyber security qualifies you to be a professional hacker.
The certificate provides foundational cyber security skills for defensive roles. Ethical hacking requires advanced certifications and extensive experience beyond certificate level.
Cyber security is only for people with advanced IT degrees.
The CDACC Level 5 certificate is designed for KCSE graduates with a D plain, providing an accessible entry point into the cyber security field.
Cyber security jobs are only available in tech companies.
Every organisation that uses digital systems requires cyber security personnel, including banks, government agencies, hospitals, and NGOs.
Cyber security skills become outdated quickly, making the certificate useless.
While specific tools evolve, the fundamental principles of network security, risk assessment, and threat detection remain constant. The certificate provides a foundation for continuous learning.