Overview
Cyber security masters UK. MSc Cyber Security at Durham University: 6 assessed courses, 180 credits and 1,800 notional learning hours, at 10 hours per credit. The hours on each course add up to that total. Seminars run online. A Durham collegiate campus route is published separately from this online award. This award is the university's own. It is not a vendor certificate.
MSc Cyber Security is taught as one award, not a list of unrelated modules. The published length is 18 months, and the credit total is 180. Students move from Threats, assets, and the record through Threats, assets, and the record; Identity, access, and logging; Defensive architecture; Incident handling; Privacy and the limit of the award; Capstone: security file, and finish on Capstone: security file.
Each course has a question, a method, and a submission. In this field, students map one named system, write a threat model, and specify the controls that would stop the most likely path. Reading is control catalogues, incident write-ups, and a short technical standard. The artefact a marker expects is a defensive design with a test plan and a statement of residual risk.
The award is built so that a graduate can do the following in practice: Produce a professional file in Cyber Security Choose a method and write what the evidence cannot support Keep a record a third party can review
Teaching assumes the student can read a source, attempt a problem before the seminar, and revise after feedback. Attendance at live seminars is part of the design. The capstone or final course must use the methods of the earlier courses; a project that ignores them does not pass.
The pages for each course name the topics that are examined. Those topics are the syllabus. A brochure line is not a substitute for them.
Each credit is 10 notional learning hours. The courses add up to 180 credits and 1,800 hours. This award is the university's own. It is not a vendor certificate.
Who This Programme Is For
- ✦People already working around Cyber Security
- ✦Career-changers who can study without leaving their city
- ✦Teams who need a file they can review, not a slogan
Faculty spotlight
Durham University supervises the courses and the final assessed file. Supervision is assigned from the school that owns the award.
Programme Structure & Delivery
Coursework
Interactive modules, weekly readings, recorded and live seminars, and collaborative discussions with peers worldwide.
Assessment
Module assignments, proctored examinations, and capstone projects designed to demonstrate mastery of the field.
Learning Outcomes
- ✦Produce a professional file in Cyber Security
- ✦Choose a method and write what the evidence cannot support
- ✦Keep a record a third party can review
- ✦State the limit of the award
- ✦Submit the final project inside the published hours
Career Pathways
- ✦Security analyst
- ✦Incident coordinator
- ✦Identity and access officer
- ✦Privacy operations lead
- ✦Security programme manager
Assessment
Modules are assessed through a published mix of coursework, applied projects, and examinations. Exam windows are announced in advance so students in other time zones are not forced into overnight sittings. Alternative arrangements are available where documented.
Curriculum
Stage 1 — 900 hours
SWE1F01Threats, assets, and the record- SWE1F01-M1 · Assets, trust boundaries, and the adversary model — Threats, assets, and the record
- SWE1F01-M2 · Threat modelling and attack paths — Threats, assets, and the record
- SWE1F01-M3 · Identity, logging, and segmentation — Threats, assets, and the record
- SWE1F01-M4 · Detection, containment, and evidence — Threats, assets, and the record
- SWE1F01-M5 · Residual risk and what a control does not stop — Threats, assets, and the record
- SWE1F01-M6 · Defensive design, test plan, and after-action review — Threats, assets, and the record
30 creditsSVK2M02Identity, access, and logging- SVK2M02-M1 · Assets, trust boundaries, and the adversary model — Identity, access, and logging
- SVK2M02-M2 · Threat modelling and attack paths — Identity, access, and logging
- SVK2M02-M3 · Identity, logging, and segmentation — Identity, access, and logging
- SVK2M02-M4 · Detection, containment, and evidence — Identity, access, and logging
- SVK2M02-M5 · Residual risk and what a control does not stop — Identity, access, and logging
- SVK2M02-M6 · Defensive design, test plan, and after-action review — Identity, access, and logging
30 creditsSVU2803Defensive architecture- SVU2803-M1 · Assets, trust boundaries, and the adversary model — Defensive architecture
- SVU2803-M2 · Threat modelling and attack paths — Defensive architecture
- SVU2803-M3 · Identity, logging, and segmentation — Defensive architecture
- SVU2803-M4 · Detection, containment, and evidence — Defensive architecture
- SVU2803-M5 · Residual risk and what a control does not stop — Defensive architecture
- SVU2803-M6 · Defensive design, test plan, and after-action review — Defensive architecture
30 creditsStage 2 — 900 hours
SX80904Incident handling- SX80904-M1 · Assets, trust boundaries, and the adversary model — Incident handling
- SX80904-M2 · Threat modelling and attack paths — Incident handling
- SX80904-M3 · Identity, logging, and segmentation — Incident handling
- SX80904-M4 · Detection, containment, and evidence — Incident handling
- SX80904-M5 · Residual risk and what a control does not stop — Incident handling
- SX80904-M6 · Defensive design, test plan, and after-action review — Incident handling
30 creditsSXHZU05Privacy and the limit of the award- SXHZU05-M1 · Assets, trust boundaries, and the adversary model — Privacy and the limit of the award
- SXHZU05-M2 · Threat modelling and attack paths — Privacy and the limit of the award
- SXHZU05-M3 · Identity, logging, and segmentation — Privacy and the limit of the award
- SXHZU05-M4 · Detection, containment, and evidence — Privacy and the limit of the award
- SXHZU05-M5 · Residual risk and what a control does not stop — Privacy and the limit of the award
- SXHZU05-M6 · Defensive design, test plan, and after-action review — Privacy and the limit of the award
30 creditsSWO1106Capstone: security file- SWO1106-M1 · Assets, trust boundaries, and the adversary model — Capstone: security file
- SWO1106-M2 · Threat modelling and attack paths — Capstone: security file
- SWO1106-M3 · Identity, logging, and segmentation — Capstone: security file
- SWO1106-M4 · Detection, containment, and evidence — Capstone: security file
- SWO1106-M5 · Residual risk and what a control does not stop — Capstone: security file
- SWO1106-M6 · Defensive design, test plan, and after-action review — Capstone: security file
30 creditsAdmission requirements
Academic entry
- A bachelor's degree from a recognised institution, or equivalent professional standing considered by admissions
Documents
- A statement of about 500 words on why this award fits your work
- Two references, academic or professional
- A CV
Programme questions
How long is the MSc Cyber Security?+
The published duration is 18 months. Teaching language: English. Actual time-to-complete depends on mode and any recognised prior learning.
Can I study this from my country?+
This is a fully online award. You study from your country. No student visa and no campus relocation are required.
What does it cost?+
Degree tuition for this award is published as £0 / tuition-free on the online pathway. Examination or administrative fees may apply at checkout — never an annual tuition invoice. Check the Fees page for any extras.
What are the entry requirements?+
Requirements are grouped on this page (academic, English, documents). Equivalent qualifications are considered. English may be waived after prior English-medium study.
How is the programme assessed?+
Assessment is typically a mix of coursework, projects, and examinations. Doctoral awards include a thesis or dissertation and an oral examination. Details sit in the programme specification and module outlines.
Will this award be recognised where I live?+
Recognition of the award for local employment, professional licence, or ministry attestation is decided by your employer or regulator. Durham University publishes verification pages for certificates. We do not claim automatic equivalence in every country.
How do I apply?+
Start an application on this website. Progress is saved from the first step. Admissions: admissions@durhm.co.uk.
