Technology

Master of Science in Cybersecurity and Digital Forensics

The Master of Science in Cybersecurity and Digital Forensics is a postgraduate programme that prepares professionals for advanced practice in cyber security, digital forensics, and incident response. The programme combines cyber security theory with practical digital investigation, evidence analysis, and forensic techniques application.

Core areas include cyber security fundamentals, digital forensics, network security, malware analysis, incident response, cryptography, secure system design, cyber threat intelligence, digital privacy, legal and ethical aspects, research methods, and project. Students engage with both security theory and practical forensic laboratory work through coursework and research.

The programme is offered by the Open University of Kenya as MSc in Cyber Security and Digital Forensics through flexible learning, JKUAT as MSc in Cyber Security through the School of Computing and Information Technology, and Strathmore University as MSc in Information Systems Security with digital forensics specialisation through iLabAfrica. Public and private universities offer programmes over two academic years through full-time, part-time, and flexible learning modes.

Students develop competencies in cyber security, digital forensics, network security, malware analysis, incident response, cryptography, secure system design, and cyber threat intelligence. The programme includes coursework, examinations, laboratory work, and a supervised research project.

Open University of Kenya charges KES 93,750/year (KES 187,500 total) for cyber security and digital forensics. JKUAT charges approximately KES 252,500/year (KES 505,000 total) for cyber security. Strathmore charges approximately KES 704,250/year (KES 1,408,500 total) for information systems security. Entry requires a Bachelor's degree with Second Class Honours Upper Division in computer science, IT, or related disciplines from a recognised university.

Graduates pursue careers as digital forensics examiners, cyber security analysts, incident response specialists, malware analysts, security consultants, and lecturers in cyber security and forensics across law enforcement, financial institutions, government agencies, security firms, technology companies, and universities.

Skills Required

Cyber Security Fundamentals and Threat Defence
Digital Forensics and Evidence Analysis
Network Security and Intrusion Detection
Malware Analysis and Reverse Engineering
Incident Response and Recovery
Cryptography and Cryptanalysis
Secure System Design and Architecture
Cyber Threat Intelligence and Analysis
Research Methods in Cyber Security
Academic Writing and Project Research

Key Subjects

Cyber Security Fundamentals and Threat Defence
Digital Forensics and Evidence Analysis
Network Security and Intrusion Detection
Malware Analysis and Reverse Engineering
Incident Response and Recovery
Cryptography and Cryptanalysis
Secure System Design and Architecture
Cyber Threat Intelligence and Analysis
Research Methods in Cyber Security
Project Research

Certifications

Certified Forensic Computer Examiner (CFCE)
Certified Ethical Hacker (CEH)

Specializations

Digital Forensics

Focuses on digital forensics, covering evidence collection, analysis, chain of custody, forensic tools, legal procedures, and managing digital forensics.

Incident Response

Examines incident response, covering incident handling, threat hunting, malware analysis, recovery, and managing security incidents.

Malware Analysis

Covers malware analysis, covering reverse engineering, static analysis, dynamic analysis, malware detection, and managing malware analysis.

Network Security

Focuses on network security, covering firewalls, IDS/IPS, network defence, secure architecture, and managing network security.

Cyber Threat Intelligence

Examines cyber threat intelligence, covering threat analysis, IOCs, threat hunting, attribution, and managing threat intelligence.

Secure System Design

Covers secure system design, covering security architecture, defence in depth, secure SDLC, vulnerability assessment, and managing secure systems.

Duration: 2 years
Public, up to: Ksh 254,100
Private, up to: Ksh 704,250
Job market: Very high

The programme

What you study, how long it takes, and how it is delivered.

Practicalities

Study mode: Full-time, Part-time, Online
Attachment: 0 months
Average class: 25 students
Award: Masters

What you study

10 subjects

Cyber Security Fundamentals and Threat Defence
Digital Forensics and Evidence Analysis
Network Security and Intrusion Detection
Malware Analysis and Reverse Engineering
Incident Response and Recovery
Cryptography and Cryptanalysis
Secure System Design and Architecture
Cyber Threat Intelligence and Analysis
Research Methods in Cyber Security
Project Research

Modules

12 in the programme

Cyber Security Fundamentals and Threat Landscape
Year 1Semester 13 creditsCore
Examines security fundamentals, CIA triad, threats, vulnerabilities, risk, security models, and managing cyber security.
Digital Forensics Foundations and Evidence Handling
Year 1Semester 13 creditsCore
Covers evidence collection, analysis, chain of custody, forensic tools, legal procedures, and managing digital forensics.
Research Methods in Cyber Security
Year 1Semester 13 creditsCore
Covers research design, data collection, analysis, security research methods, and conducting cyber security research, preparing students for their project.
Network Security and Intrusion Detection
Year 1Semester 23 creditsCore
Examines firewalls, IDS/IPS, network defence, secure architecture, VPNs, and managing network security.
Malware Analysis and Reverse Engineering
Year 1Semester 23 creditsCore
Covers reverse engineering, static analysis, dynamic analysis, malware detection, and managing malware analysis.
Incident Response and Recovery
Year 1Semester 23 creditsCore
Examines incident handling, threat hunting, containment, eradication, recovery, and managing security incidents.
Cryptography and Cryptanalysis
Year 1Semester 23 creditsCore
Covers encryption, decryption, protocols, PKI, key management, cryptanalysis, and managing cryptographic systems.
Secure System Design and Architecture
Year 2Semester 13 creditsCore
Examines security architecture, defence in depth, secure SDLC, vulnerability assessment, and managing secure systems.
Cyber Threat Intelligence and Analysis
Year 2Semester 13 creditsCore
Covers threat analysis, IOCs, threat hunting, attribution, threat feeds, and managing threat intelligence.
Digital Privacy and Data Protection
Year 2Semester 13 creditsCore
Examines data protection, privacy regulations, GDPR, Kenya Data Protection Act, and managing digital privacy.
Legal and Ethical Aspects of Cyber Security
Year 2Semester 13 creditsCore
Covers cyber law, evidence law, computer misuse, ethics, professional conduct, and managing legal and ethical aspects.
Research Project
Year 2Semester 26 creditsCore
Original supervised research project on a cyber security and digital forensics topic, demonstrating mastery of research methods and security knowledge, assessed through written submission and oral defence.

Specialisations

Digital Forensics
Focuses on digital forensics, covering evidence collection, analysis, chain of custody, forensic tools, legal procedures, and managing digital forensics.
Incident Response
Examines incident response, covering incident handling, threat hunting, malware analysis, recovery, and managing security incidents.
Malware Analysis
Covers malware analysis, covering reverse engineering, static analysis, dynamic analysis, malware detection, and managing malware analysis.
Network Security
Focuses on network security, covering firewalls, IDS/IPS, network defence, secure architecture, and managing network security.
Cyber Threat Intelligence
Examines cyber threat intelligence, covering threat analysis, IOCs, threat hunting, attribution, and managing threat intelligence.
Secure System Design
Covers secure system design, covering security architecture, defence in depth, secure SDLC, vulnerability assessment, and managing secure systems.

A day as a student

A typical day during the MSc in Cybersecurity and Digital Forensics programme combines lectures, laboratory sessions, practical workshops, seminars, and independent study. Sessions cover cyber security, digital forensics, network security, and malware analysis. Cyber security sessions examine security fundamentals, threats, vulnerabilities, risk, security models, and managing cyber security. Digital forensics sessions cover evidence collection, analysis, chain of custody, forensic tools, legal procedures, and managing digital forensics. Network security sessions cover firewalls, IDS/IPS, network defence, secure architecture, VPNs, and managing network security. Malware analysis sessions cover reverse engineering, static analysis, dynamic analysis, malware detection, and managing malware analysis. Incident response sessions cover incident handling, threat hunting, containment, eradication, recovery, and managing security incidents. Cryptography sessions cover encryption, decryption, protocols, PKI, key management, and managing cryptographic systems. Secure system design sessions cover security architecture, defence in depth, secure SDLC, vulnerability assessment, and managing secure systems. Cyber threat intelligence sessions cover threat analysis, IOCs, threat hunting, attribution, and managing threat intelligence. Digital privacy sessions cover data protection, privacy regulations, GDPR, Kenya Data Protection Act, and managing digital privacy. Legal and ethical sessions cover cyber law, evidence law, ethics, professional conduct, and managing legal and ethical aspects. Research methods sessions prepare students for their project, covering research design, data collection, and analysis. Laboratory sessions provide hands-on experience with forensic tools, security tools, malware analysis environments, and network security appliances. Practical workshops provide hands-on experience with EnCase, FTK, Kali Linux, Wireshark, IDA Pro, and forensic analysis tools. Seminars and discussion groups provide opportunities for debating current issues in cyber security and digital forensics. Guest lectures from experienced forensics examiners, security professionals, and law enforcement officers provide practical insights. The programme culminates in a supervised research project on a cyber security and digital forensics topic.

The trade offs

In its favour

Very high demand for cyber security and forensics professionals with escalating cyber threats, digital transformation, and regulatory requirements in Kenya.
Open University of Kenya offers highly competitive fees at KES 93,750/year (KES 187,500 total) with flexible learning.
Programme offered by three universities (2 public, 1 private), providing institutional choice.
Graduates are eligible for CFCE and CEH professional certifications, enhancing global career prospects.

Against it

Strathmore (private) charges KES 1,408,500 total, which is significantly higher than public universities.
JKUAT cyber security specific fees not independently verified from official website.
Programme requires computer science, IT, or related background, which may limit access for non-related graduates.
Rapidly evolving threat landscape requires continuous self-learning and certification beyond the curriculum.

What it costs

Tuition at both ends of the market, and how to pay for it.

What it costs, and where

Against 191 technology courses

Public94k to 254k

94k at Open University of Kenya254k at Jomo Kenyatta University of Agriculture and Technology

Private704k to 704k

704k at Strathmore University704k at Strathmore University

Annual tuition in Kenyan shillings, rounded. The upright tick is the median for this field, so a bar sitting entirely to its right is an expensive programme by the standards of its own subject.

The fine print

OUK ~94K/yr (ouk.ac.ke). JKUAT ~254K/yr (jkuat.ac.ke). Strathmore MSc ISS 704K/yr (kenyaeducationguide).

HELB postgraduate loans are available for Kenyan students. Strathmore University offers financial aid for eligible students. JKUAT may offer postgraduate bursaries. Some security firms and government agencies may sponsor staff for postgraduate study.

Funding options

HELB Postgraduate Loan
Strathmore University Financial Aid
JKUAT Postgraduate Bursary

Scholarships

3 recorded

HELB Postgraduate Loan
LoanKsh 200,000Kenyan
Kenyan students pursuing postgraduate studies at recognised universities.
Strathmore University Financial Aid
ScholarshipKsh 300,000Kenyan
Strathmore University offers financial aid for eligible postgraduate students.
JKUAT Postgraduate Bursary
ScholarshipKsh 100,000Kenyan
JKUAT offers postgraduate bursaries for eligible students.

Getting in

The grades, the alternatives, and who accredits the award.

What you need

KCSE mean grade: N/A (Postgraduate)
Alternative entry: Open University of Kenya accepts a degree with relevant diploma. JKUAT requires relevant undergraduate degree with minimum Upper Second Class Honours. Strathmore requires First Class (GPA 3.45-4.0) or Upper Second Class (GPA 2.85-3.44) in Computer Science or IT with minimum KCSE C+. Contact respective universities for specific admission requirements.

How you are assessed

4 components

Coursework and Continuous Assessment
Coursework30% of the mark
Continuous assessment through coursework assignments, laboratory reports, forensic exercises, seminar presentations, and class participation.
Written Examinations
Examination70% of the mark
Written examinations covering cyber security, digital forensics, network security, and malware analysis.
Practical and Laboratory Assessment
Practical30% of the mark
Practical assessment through forensic analysis exercises, penetration testing, malware analysis, incident response scenarios, and demonstrating cyber security skills.
Research Project
Research100% of the mark
Original supervised research project on a cyber security and digital forensics topic, demonstrating mastery of research methods and security knowledge, assessed through written submission and oral defence.

Accreditation

The programme is accredited by the Commission for University Education (CUE). Open University of Kenya and JKUAT (public) offer MSc in Cyber Security and Digital Forensics or Cyber Security. Strathmore University (private) offers MSc in Information Systems Security with digital forensics specialisation. All programmes meet CUE standards for postgraduate training in cyber security and digital forensics. Graduates are eligible for CFCE and CEH professional certifications.

Accredited by

Commission for University Education (CUE)
Academic accreditationRequired
Programme accredited by CUE. Open University of Kenya and JKUAT (public) offer MSc in Cyber Security and Digital Forensics or Cyber Security. Strathmore University (private) offers MSc in Information Systems Security with digital forensics specialisation. All programmes meet CUE standards for postgraduate training in cyber security and digital forensics. Graduates are eligible for CFCE and CEH professional certifications.

Where it leads

The roles it opens, and what you leave with.

Where graduates go

6 roles

Digital Forensics Examiner
High demandKsh 150,000 to Ksh 650,000
Conducts digital forensics investigations, overseeing evidence collection, analysis, reporting, testimony, and managing digital forensics.
Cyber Security Analyst
Very high demandKsh 150,000 to Ksh 700,000
Monitors and analyses security, overseeing threats, vulnerabilities, incidents, response, and managing cyber security operations.
Incident Response Specialist
High demandKsh 160,000 to Ksh 700,000
Manages incident response, overseeing detection, containment, eradication, recovery, and managing security incidents.
Malware Analyst
Moderate demandKsh 160,000 to Ksh 700,000
Analyses malware, overseeing reverse engineering, static analysis, dynamic analysis, detection, and managing malware analysis.
Security Consultant
High demandKsh 170,000 to Ksh 750,000
Provides security consulting, overseeing advisory, assessment, strategy, implementation, and managing security consulting.
Cyber Security Lecturer
Moderate demandKsh 120,000 to Ksh 500,000
Teaches cyber security and forensics at university or college level, overseeing instruction, research, and academic supervision.

Graduate outcomes

Where these fields lead

8 careers

Tools you will learn

EnCase Forensic
SoftwarePrimary
EnCase for digital forensics, covering evidence collection, analysis, reporting, chain of custody, and managing digital forensics investigations.
Kali Linux
Software
Kali Linux for penetration testing and security, covering ethical hacking, vulnerability assessment, and managing security testing.
IDA Pro
Software
IDA Pro for malware analysis, covering reverse engineering, disassembly, static analysis, and managing malware analysis.
Wireshark
Software
Wireshark for network analysis, covering packet capture, protocol analysis, intrusion detection, and managing network security analysis.

Industry links

Common misconceptions

Digital forensics is just about recovering deleted files.
Digital forensics covers comprehensive evidence collection, analysis, chain of custody, forensic tools, legal procedures, expert testimony, and incident investigation.
Cybersecurity and forensics is only for law enforcement.
Cyber security and forensics skills are valuable for corporate security, consulting, incident response, compliance, and academia beyond just law enforcement.
Malware analysis is just about running antivirus scans.
Malware analysis covers comprehensive reverse engineering, static and dynamic analysis, behaviour analysis, and detection technique development.
Incident response is just about fixing problems after an attack.
Incident response covers comprehensive preparation, detection, containment, eradication, recovery, and post-incident analysis.
Cyber threat intelligence is just about reading security news.
Cyber threat intelligence covers comprehensive threat analysis, IOC development, attribution, threat hunting, and strategic intelligence.
Secure system design is just about adding passwords.
Secure system design covers comprehensive security architecture, defence in depth, secure SDLC, vulnerability assessment, and zero trust principles.