Diploma in Cyber Security
The Diploma in Cyber Security is a programme that equips students with knowledge and practical skills in information security, network security, threat analysis and cyber defence. Offered at Lukenya University and Pan Africa Christian University, the programme prepares students for careers in the growing cybersecurity field.
The short answer
- What it costs
- Up to Ksh 67,189 a year at a public institution, Ksh 134,378 for the whole course. Up to Ksh 147,400 a year at a private one.The detail
- Who can get in
- A KCSE mean grade of C- or above. There is another way in without it.The detail
- How long, and when
- Takes 2 years, full-time, part-time, with 3 months of attachment. Next intake January 2027, at 7 institutions.The detail
- Where it leads
- 8 careers in the catalogue. The least exposed to AI is Cloud Security Engineer, at 14 out of 100.The detail
The programme
What you study, how long it takes, and how it is delivered.
Overview
The curriculum covers network security fundamentals, information security principles, ethical hacking and penetration testing, cyber threat intelligence, security operations, incident response, digital forensics, cryptography, access control, security policies and compliance, risk management, malware analysis, web application security, cloud security, operating system security, communication skills, ICT and entrepreneurship. Students develop both technical security and analytical skills.
Kenya's digital transformation has increased cyber threats across banking, government, healthcare and corporate sectors, creating demand for trained cybersecurity professionals. The programme responds to the need for skilled practitioners who can protect information systems, detect threats and respond to security incidents.
The programme is delivered through lectures, computer laboratory sessions, security simulation exercises, case studies, projects and industrial attachment. Students gain hands-on experience in vulnerability assessment, penetration testing, security monitoring and incident response through laboratory sessions and attachment at IT security departments or firms.
Graduates pursue careers as cybersecurity analysts, security operations centre assistants, IT security officers, penetration testing assistants, digital forensics assistants and security consultants in banks, government agencies, telecom firms, IT companies and corporate security departments. They can also progress to a Bachelor of Science in Cyber Security or related degree programmes.
Prospective students should have analytical skills, interest in IT security and problem-solving aptitude. The programme is suitable for students seeking practical cybersecurity skills for employment or further study.
What you study
8 subjects- Network Security and Information Security Principles
- Ethical Hacking and Penetration Testing
- Cyber Threat Intelligence and Incident Response
- Digital Forensics and Malware Analysis
- Cryptography and Access Control
- Web Application and Cloud Security
- Security Policies, Compliance and Risk Management
- Security Operations and Entrepreneurship
Modules
8 in the programmeNetwork Security and Information Security Principles
Year 1Semester 13 creditsCore
Covers information security principles, CIA triad, network security fundamentals, firewalls, VPNs, intrusion detection systems, network protocols and secure network design.
Ethical Hacking and Penetration Testing
Year 1Semester 13 creditsCore
Covers ethical hacking methodologies, penetration testing techniques, vulnerability assessment, exploitation tools, reconnaissance and reporting.
Cryptography and Access Control
Year 1Semester 23 creditsCore
Covers cryptography fundamentals, encryption algorithms, digital signatures, PKI, authentication, access control models and identity management.
Digital Forensics and Malware Analysis
Year 1Semester 23 creditsCore
Covers digital forensics principles, evidence collection, forensic tools, malware types, malware analysis techniques and incident investigation.
Cyber Threat Intelligence and Incident Response
Year 2Semester 13 creditsCore
Covers cyber threat intelligence, threat actors, attack patterns, security operations, incident response procedures and security monitoring.
Web Application and Cloud Security
Year 2Semester 13 creditsCore
Covers web application vulnerabilities, OWASP Top 10, secure coding, cloud security fundamentals, cloud service models and cloud security controls.
Security Policies, Compliance and Risk Management
Year 2Semester 23 creditsCore
Covers security policies, standards, compliance frameworks, risk assessment, risk treatment, business continuity and entrepreneurship.
Industrial Attachment and Project
Year 2Semester 26 creditsCore
A three-month industrial attachment at an IT security department or firm, assessed through an attachment report and a cybersecurity project.
Specialisations
Penetration Testing
Focuses on ethical hacking, vulnerability assessment and exploitation for careers as penetration testing assistants.
Security Operations
Specialises in security monitoring, incident response and SOC operations for careers as SOC assistants.
Digital Forensics
Focuses on digital evidence collection, analysis and investigation for careers as forensics assistants.
Security Governance
Specialises in security policies, compliance and risk management for careers as IT security officers.
A day as a student
A typical day begins with a morning lecture on network security or cryptography, followed by a laboratory session on ethical hacking or vulnerability assessment. Afternoon sessions may include a digital forensics exercise, a malware analysis practical, or a group project on security policy design. Students also work on penetration testing simulations and incident response exercises.
The trade-offs
| In its favour | Against it |
|---|---|
| Cybersecurity is one of the fastest-growing fields in Kenya with high demand across all sectors. | The cybersecurity field evolves rapidly, requiring continuous learning and certification beyond the diploma. |
| The programme combines theoretical knowledge with practical laboratory sessions and industry attachment. | The programme is offered at only two universities, limiting study location options. |
| Graduates can progress to a Bachelor of Science in Cyber Security or related degree programmes. | — |
What it costs
Tuition at both ends of the market, and how to pay for it.
What it costs, and where
Against 191 technology coursesAnnual tuition in Kenyan shillings, rounded. The upright tick is the median for this field, so a bar sitting entirely to its right is an expensive programme by the standards of its own subject.
The fine print
TVET 67K/yr public. TSI 70K, Riara 147K/yr private (tsi.ac.ke, riarauniversity.ac.ke).
Students can access HELB loans. PAC University offers scholarships to continuing students subject to availability.
Funding options
HELB Loan
Scholarships
1 recordedHELB Loan
LoanKsh 40,000Kenyan
Kenyan students enrolled in accredited programmes at recognised institutions
Scholarships you could apply for
6 usable where it is taught- Equity Group Foundation Wings to Fly
Closes 28 February 2027FullEquity Bank
Full secondary + university
- Aga Khan Foundation Scholarship
Closes 31 March 2027FullAga Khan Foundation
Full university study
- Family Bank Foundation Education Support
Closes 30 June 2027PartialFamily Bank
KES 80,000 per year
- HELB Undergraduate Scholarship
Closes 31 July 2027PartialHigher Education Loans Board
KES 40,000 to 60,000 per year
- County Government Scholarships
Varies by countyPartialCounty Governments
KES 50,000 to 200,000 per year
- Moringa School Craftbyte Scholarship
QuarterlyFullMoringa School
Full software development course
Getting in
The grades, the alternatives, and who accredits the award.
What you need
Certificate in ICT, Cyber Security or related field from a recognised institution.
When it next starts
Taught at 7 institutionsIncluding Lukenya University, Pan Africa Christian University, Kibabii University.
Including Lukenya University, Pan Africa Christian University, Kibabii University.
Including Lukenya University, Pan Africa Christian University, Kibabii University.
How you are assessed
4 componentsContinuous Assessment Tests
Written examination30% of the mark
Mid-semester and end-of-semester written tests covering security principles, network security and cryptography.
Laboratory Practicals
Practicum40% of the mark
Assessment of laboratory sessions including vulnerability assessment, penetration testing and forensics exercises.
Cybersecurity Project
Project50% of the mark
A practical cybersecurity project, assessed through a demonstration and report.
Industrial Attachment Report
Practicum100% of the mark
Assessment of performance during industrial attachment at an IT security department or firm.
Accreditation
TVET Authority
AcademicRequired
TVETA accredited (PAC Institute) and CUE accredited. The programme is offered at Lukenya University and Pan Africa Christian University.
Where it leads
The roles it opens, and what you leave with.
Where graduates go
4 rolesCybersecurity Analyst
High demandKsh 50,000 to Ksh 200,000
Monitors security systems, analyses threats, conducts vulnerability assessments, implements security controls and supports incident response.
IT Security Officer
High demandKsh 45,000 to Ksh 180,000
Implements and maintains security measures, manages access controls, conducts security audits and ensures compliance with security policies.
Security Operations Centre Assistant
Moderate demandKsh 40,000 to Ksh 150,000
Monitors security alerts, triages incidents, supports SOC operations, maintains security tools and assists with threat detection.
Digital Forensics Assistant
Low demandKsh 42,000 to Ksh 140,000
Supports digital investigations, collects and analyses digital evidence, prepares forensic reports and assists with incident investigation.
Graduate outcomes
Graduates work as cybersecurity analysts, IT security officers and security operations centre assistants in banks, government agencies, telecom firms and IT companies.
Where these fields lead
8 careers- Cloud Security EngineerTechnology14Low exposure
- Industrial Robotics ProgrammerTechnology14Low exposure
- Embedded Firmware EngineerTechnology15Low exposure
- Embedded Linux DeveloperTechnology15Low exposure
- Site Reliability EngineerTechnology15Low exposure
- Applied Cryptography EngineerTechnology16Low exposure
- Database Reliability EngineerTechnology16Low exposure
- Edge Computing EngineerTechnology16Low exposure
Certifications
Industry links
Common misconceptions
Cyber security is only for hackers.
The programme covers security policies, risk management, compliance, forensics and incident response, requiring diverse skills beyond hacking.
You need to be an expert programmer to study cyber security.
While basic programming knowledge helps, the programme focuses on security principles, tools and practices that can be learned without advanced programming.
Cyber security has limited career opportunities in Kenya.
Kenya's digital transformation has created high demand for cybersecurity professionals across banking, government, telecom and corporate sectors.
Cyber security is only about preventing attacks.
The programme covers the full security lifecycle including prevention, detection, response, recovery and compliance.