Technology

Certificate in Cybersecurity

The Certificate in Cybersecurity is a TVET-CDACC examined programme that equips trainees with foundational skills in computer security, network protection, and cyber threat management. The programme is accredited by the Technical and Vocational Education and Training Authority (TVETA) and assessed through the Curriculum Development, Assessment and Certification Council (CDACC).

Trainees develop competencies in computer repair and maintenance, cybersecurity laws and regulations, computer networking, software application security, database security, and security assessment. The curriculum emphasises hands-on practical skills through laboratory-based learning using industry-standard security tools.

Kenya's digital economy expansion has led to increasing cyber threats, creating strong demand for cybersecurity professionals at all levels. The programme aligns with the National Cybersecurity Strategy and supports the government's Digital Superhighway initiative by training frontline cybersecurity personnel.

The course is delivered through computer laboratory sessions and classroom theory. Trainees spend approximately 70 per cent of their time in practical labs configuring security tools, testing vulnerabilities, and implementing security measures, and 30 per cent in theory classes.

Graduates can work as cybersecurity technicians, IT security assistants, or network security support staff in various organisations. The programme provides a foundation for progression to Diploma in Cybersecurity or related IT qualifications.

This programme is suitable for individuals with a KCSE mean grade of D (plain) who have an interest in IT and cybersecurity. It provides entry-level cybersecurity skills for employment in Kenya's growing digital security sector.

Duration: 1 year
Public, up to: Ksh 67,189
Private, up to: Ksh 60,000
Job market: Very high

The programme

What you study, how long it takes, and how it is delivered.

Practicalities

Study mode: Full-time
Attachment: 3 months
Average class: 35 students
Award: Certificate

What you study

8 subjects

Computer Repair and Maintenance
Cybersecurity Laws and Regulations
Computer Networking
Software Application Security
Database Security
Security Assessment and Testing
Network Security
Digital Literacy

Modules

8 in the programme

Computer Repair and Maintenance
Year 1Semester 13 creditsCore
Covers computer hardware components, assembly, preventive maintenance, and basic hardware troubleshooting relevant to cybersecurity operations.
Cybersecurity Laws and Regulations
Year 1Semester 12 creditsCore
Introduces Kenyan cyber laws including the Computer Misuse and Cybercrimes Act, data protection regulations, and compliance requirements.
Computer Networking
Year 1Semester 14 creditsCore
Covers network fundamentals, protocols, IP addressing, network devices, and basic network configuration for security purposes.
Building Secure Networks
Year 1Semester 13 creditsCore
Trainees learn to design and implement secure networks using firewalls, access control lists, and network segmentation techniques.
Software Application Security
Year 1Semester 13 creditsCore
Covers application security principles, common vulnerabilities, secure coding practices, and application hardening techniques.
Database Security
Year 1Semester 13 creditsCore
Introduces database security concepts including access control, encryption, backup and recovery, and database vulnerability assessment.
Security Assessment and Testing
Year 1Semester 13 creditsCore
Develops skills in conducting basic security assessments, vulnerability scanning, and penetration testing using industry tools.
Cybersecurity System Installation
Year 1Semester 13 creditsCore
Covers installation and configuration of cybersecurity systems including antivirus, firewalls, intrusion detection systems, and security monitoring tools.

Specialisations

Network Security
Focuses on securing network infrastructure including firewalls, VPNs, and network monitoring.
Security Operations
Specialises in monitoring, incident response, and security operations centre activities.
Database Security
Covers database access control, encryption, and database vulnerability management.
Compliance and Policy
Focuses on cybersecurity compliance, policy implementation, and regulatory adherence.

A day as a student

A typical day involves morning theory on cybersecurity principles or network protocols, followed by afternoon lab sessions where trainees configure firewalls, run vulnerability scans, practise incident response, and implement security measures on test networks.

The trade offs

In its favour

Cybersecurity is one of the fastest-growing IT fields in Kenya with very high demand.
Skills are transferable across all sectors that use computer systems.
Clear progression path to diploma and degree-level cybersecurity qualifications.

Against it

The field requires continuous learning as cyber threats evolve rapidly.
High responsibility as security breaches can have serious consequences for organisations.

What it costs

Tuition at both ends of the market, and how to pay for it.

What it costs, and where

Against 191 technology courses

Public67k to 67k

67k at Kamukunji Technical and Vocational College67k at Nairobi Technical Training Institute

Private31k to 60k

31k at Lukenya University60k at Digiask Institute of Technology

Annual tuition in Kenyan shillings, rounded. The upright tick is the median for this field, so a bar sitting entirely to its right is an expensive programme by the standards of its own subject.

The fine print

Public TVET 67K/yr. Private: Lukenya 30.8K, Digiask 60K/yr (thehorizonwire.co.ke, dit.ac.ke).

HELB TVET loans, KUCCPS capitation, and county bursaries are available for eligible students.

Funding options

HELB TVET Loan
KUCCPS Government Capitation
County Bursary

Scholarships

2 recorded

HELB TVET Loan
LoanKsh 50,000Kenyan
Kenyan students enrolled in TVET institutions
County Bursary
BursaryKenyan
Residents of the respective county enrolled in TVET programmes

Getting in

The grades, the alternatives, and who accredits the award.

What you need

KCSE mean grade: D
Alternative entry: KCSE D- (minus) with a Level 4 certificate in a related course and one year of work experience.

How you are assessed

3 components

CDACC Practical Assessment
Practical assessment60% of the mark
Competency-based practical assessment of cybersecurity skills in lab settings.
CDACC Theory Assessment
Written assessment30% of the mark
Written assessment of cybersecurity theory and knowledge.
Project Assessment
Project10% of the mark
Assessment of a practical cybersecurity project such as securing a small office network.

Accreditation

Assessed and certified by TVET-CDACC under the CBET framework. Institutions accredited by TVETA. Cybersecurity practice in Kenya is guided by the Kenya Information and Communications Act and regulations by the Communications Authority.

Accredited by

Curriculum Development, Assessment and Certification Council
AcademicRequired
TVET-CDACC assesses and certifies competencies under the CBET framework for cybersecurity.
Technical and Vocational Education and Training Authority
AcademicRequired
TVETA accredits institutions offering cybersecurity programmes.

Where it leads

The roles it opens, and what you leave with.

Where graduates go

4 roles

Cybersecurity Technician
Very high demandKsh 30,000 to Ksh 60,000
Installs and maintains cybersecurity systems including firewalls, antivirus, and intrusion detection systems.
IT Security Assistant
High demandKsh 28,000 to Ksh 55,000
Assists IT security officers in monitoring systems, responding to incidents, and maintaining security controls.
Network Security Support
High demandKsh 25,000 to Ksh 50,000
Provides network security support including firewall configuration, access control, and network monitoring.
Security Operations Centre (SOC) Analyst
Very high demandKsh 32,000 to Ksh 65,000
Monitors security events and alerts in a SOC environment, escalating incidents as required.

Graduate outcomes

Graduates work as cybersecurity technicians and IT security assistants in organisations facing increasing cyber threats.

Certifications

Industry links

Common misconceptions

Cybersecurity requires advanced mathematics.
The certificate level focuses on practical security skills, configuration, and procedures, not advanced mathematics.
Cybersecurity is only for hackers.
Cybersecurity involves defence, compliance, risk assessment, and policy, not just offensive security techniques.
Certificate-level cybersecurity graduates cannot find jobs.
There is a severe shortage of cybersecurity skills in Kenya, with opportunities at all qualification levels.
Cybersecurity is only relevant to IT companies.
Every organisation that uses computers needs cybersecurity personnel, including banks, hospitals, and government.