Technology

Diploma in Cyber Security

The Diploma in Cyber Security is a programme that equips students with knowledge and practical skills in information security, network security, threat analysis and cyber defence. Offered at Lukenya University and Pan Africa Christian University, the programme prepares students for careers in the growing cybersecurity field.

The curriculum covers network security fundamentals, information security principles, ethical hacking and penetration testing, cyber threat intelligence, security operations, incident response, digital forensics, cryptography, access control, security policies and compliance, risk management, malware analysis, web application security, cloud security, operating system security, communication skills, ICT and entrepreneurship. Students develop both technical security and analytical skills.

Kenya's digital transformation has increased cyber threats across banking, government, healthcare and corporate sectors, creating demand for trained cybersecurity professionals. The programme responds to the need for skilled practitioners who can protect information systems, detect threats and respond to security incidents.

The programme is delivered through lectures, computer laboratory sessions, security simulation exercises, case studies, projects and industrial attachment. Students gain hands-on experience in vulnerability assessment, penetration testing, security monitoring and incident response through laboratory sessions and attachment at IT security departments or firms.

Graduates pursue careers as cybersecurity analysts, security operations centre assistants, IT security officers, penetration testing assistants, digital forensics assistants and security consultants in banks, government agencies, telecom firms, IT companies and corporate security departments. They can also progress to a Bachelor of Science in Cyber Security or related degree programmes.

Prospective students should have analytical skills, interest in IT security and problem-solving aptitude. The programme is suitable for students seeking practical cybersecurity skills for employment or further study.

Duration: 2 years
Public, up to: Ksh 67,189
Private, up to: Ksh 147,400
Job market: High

The programme

What you study, how long it takes, and how it is delivered.

Practicalities

Study mode: Full-time, Part-time
Attachment: 3 months
Average class: 25 students
Award: Diploma

What you study

8 subjects

Network Security and Information Security Principles
Ethical Hacking and Penetration Testing
Cyber Threat Intelligence and Incident Response
Digital Forensics and Malware Analysis
Cryptography and Access Control
Web Application and Cloud Security
Security Policies, Compliance and Risk Management
Security Operations and Entrepreneurship

Modules

8 in the programme

Network Security and Information Security Principles
Year 1Semester 13 creditsCore
Covers information security principles, CIA triad, network security fundamentals, firewalls, VPNs, intrusion detection systems, network protocols and secure network design.
Ethical Hacking and Penetration Testing
Year 1Semester 13 creditsCore
Covers ethical hacking methodologies, penetration testing techniques, vulnerability assessment, exploitation tools, reconnaissance and reporting.
Cryptography and Access Control
Year 1Semester 23 creditsCore
Covers cryptography fundamentals, encryption algorithms, digital signatures, PKI, authentication, access control models and identity management.
Digital Forensics and Malware Analysis
Year 1Semester 23 creditsCore
Covers digital forensics principles, evidence collection, forensic tools, malware types, malware analysis techniques and incident investigation.
Cyber Threat Intelligence and Incident Response
Year 2Semester 13 creditsCore
Covers cyber threat intelligence, threat actors, attack patterns, security operations, incident response procedures and security monitoring.
Web Application and Cloud Security
Year 2Semester 13 creditsCore
Covers web application vulnerabilities, OWASP Top 10, secure coding, cloud security fundamentals, cloud service models and cloud security controls.
Security Policies, Compliance and Risk Management
Year 2Semester 23 creditsCore
Covers security policies, standards, compliance frameworks, risk assessment, risk treatment, business continuity and entrepreneurship.
Industrial Attachment and Project
Year 2Semester 26 creditsCore
A three-month industrial attachment at an IT security department or firm, assessed through an attachment report and a cybersecurity project.

Specialisations

Penetration Testing
Focuses on ethical hacking, vulnerability assessment and exploitation for careers as penetration testing assistants.
Security Operations
Specialises in security monitoring, incident response and SOC operations for careers as SOC assistants.
Digital Forensics
Focuses on digital evidence collection, analysis and investigation for careers as forensics assistants.
Security Governance
Specialises in security policies, compliance and risk management for careers as IT security officers.

A day as a student

A typical day begins with a morning lecture on network security or cryptography, followed by a laboratory session on ethical hacking or vulnerability assessment. Afternoon sessions may include a digital forensics exercise, a malware analysis practical, or a group project on security policy design. Students also work on penetration testing simulations and incident response exercises.

The trade offs

In its favour

Cybersecurity is one of the fastest-growing fields in Kenya with high demand across all sectors.
The programme combines theoretical knowledge with practical laboratory sessions and industry attachment.
Graduates can progress to a Bachelor of Science in Cyber Security or related degree programmes.

Against it

The cybersecurity field evolves rapidly, requiring continuous learning and certification beyond the diploma.
The programme is offered at only two universities, limiting study location options.

What it costs

Tuition at both ends of the market, and how to pay for it.

What it costs, and where

Against 191 technology courses

Public67k to 67k

67k at Kibabii University TVET67k at Kibabii University TVET

Private70k to 147k

70k at TSI147k at Riara University

Annual tuition in Kenyan shillings, rounded. The upright tick is the median for this field, so a bar sitting entirely to its right is an expensive programme by the standards of its own subject.

The fine print

TVET 67K/yr public. TSI 70K, Riara 147K/yr private (tsi.ac.ke, riarauniversity.ac.ke).

Students can access HELB loans. PAC University offers scholarships to continuing students subject to availability.

Funding options

HELB Loan

Scholarships

1 recorded

HELB Loan
LoanKsh 40,000Kenyan
Kenyan students enrolled in accredited programmes at recognised institutions

Getting in

The grades, the alternatives, and who accredits the award.

What you need

KCSE mean grade: C-
Alternative entry: Certificate in ICT, Cyber Security or related field from a recognised institution.

How you are assessed

4 components

Continuous Assessment Tests
Written examination30% of the mark
Mid-semester and end-of-semester written tests covering security principles, network security and cryptography.
Laboratory Practicals
Practicum40% of the mark
Assessment of laboratory sessions including vulnerability assessment, penetration testing and forensics exercises.
Cybersecurity Project
Project50% of the mark
A practical cybersecurity project, assessed through a demonstration and report.
Industrial Attachment Report
Practicum100% of the mark
Assessment of performance during industrial attachment at an IT security department or firm.

Accreditation

TVETA accredited (PAC Institute) and CUE accredited. The programme is offered at Lukenya University and Pan Africa Christian University.

Accredited by

TVET Authority
AcademicRequired
TVETA accredited (PAC Institute) and CUE accredited. The programme is offered at Lukenya University and Pan Africa Christian University.

Where it leads

The roles it opens, and what you leave with.

Where graduates go

4 roles

Cybersecurity Analyst
High demandKsh 50,000 to Ksh 200,000
Monitors security systems, analyses threats, conducts vulnerability assessments, implements security controls and supports incident response.
IT Security Officer
High demandKsh 45,000 to Ksh 180,000
Implements and maintains security measures, manages access controls, conducts security audits and ensures compliance with security policies.
Security Operations Centre Assistant
Moderate demandKsh 40,000 to Ksh 150,000
Monitors security alerts, triages incidents, supports SOC operations, maintains security tools and assists with threat detection.
Digital Forensics Assistant
Low demandKsh 42,000 to Ksh 140,000
Supports digital investigations, collects and analyses digital evidence, prepares forensic reports and assists with incident investigation.

Graduate outcomes

Graduates work as cybersecurity analysts, IT security officers and security operations centre assistants in banks, government agencies, telecom firms and IT companies.

Where these fields lead

8 careers

Certifications

Industry links

Common misconceptions

Cyber security is only for hackers.
The programme covers security policies, risk management, compliance, forensics and incident response, requiring diverse skills beyond hacking.
You need to be an expert programmer to study cyber security.
While basic programming knowledge helps, the programme focuses on security principles, tools and practices that can be learned without advanced programming.
Cyber security has limited career opportunities in Kenya.
Kenya's digital transformation has created high demand for cybersecurity professionals across banking, government, telecom and corporate sectors.
Cyber security is only about preventing attacks.
The programme covers the full security lifecycle including prevention, detection, response, recovery and compliance.