BSc

Dual Award · Conferred with جامعة وارويك

BSc in Cyber Forensics & Information Security (Dual Award)

Dual Bachelor of Science (2 Diplomas) — Conferred jointly with Imperial University in Cairo (IUC) & University of Warwick (UK)

Joint Awarding Institution2 Diplomas

جامعة وارويك (المملكة المتحدة)

Credit Allocation65% ALU / 35% Warwick

Online & New Capital Campus

36 months120 creditsArabic / English

Begin your application Explore programme

BSc in Cyber Forensics & Information Security (Dual Award)

Overview

Undergraduate STEM track preparing digital investigators and cybersecurity analysts in digital evidence extraction, malware reverse engineering, and threat hunting. Students earn 2 independent accredited diplomas with a 65% / 35% international credit split. BSc in Cyber Forensics & Information Security (Dual Award) is taught as one award, not a list of unrelated modules. The published length is 36 months, and the credit total is 120. Students move from Threat modelling through Threat modelling; Defensive architecture; Incident response; Security project; Threat modelling (BSC-D202), and finish on Threat modelling (BSC-D202). Each course has a question, a method, and a submission. In this field, students map one named system, write a threat model, and specify the controls that would stop the most likely path. Reading is control catalogues, incident write-ups, and a short technical standard. The artefact a marker expects is a defensive design with a test plan and a statement of residual risk. The award is built so that a graduate can do the following in practice: Two official Bachelor of Science diplomas with specialized cybersecurity focus Virtual cyber forensics labs featuring industry-standard forensic toolkits Direct preparation for leading industry certifications (EnCE, CEH, Security+) Teaching assumes the student can read a source, attempt a problem before the seminar, and revise after feedback. Attendance at live seminars is part of the design. The capstone or final course must use the methods of the earlier courses; a project that ignores them does not pass. The pages for each course name the topics that are examined. Those topics are the syllabus. A brochure line is not a substitute for them.

How you can study

Digital only

Study online

100% tuition-free online

Online tuition is completely free. Study from anywhere in Egypt, the Arab region, and worldwide with full digital flexibility.

✦ Tuition: £0 / $0
✦ Examinations are free. There is no exam fee.
✦ Learn from anywhere · Live online seminars

Apply online →

What You Will Learn

Two official Bachelor of Science diplomas with specialized cybersecurity focus
Virtual cyber forensics labs featuring industry-standard forensic toolkits
Direct preparation for leading industry certifications (EnCE, CEH, Security+)
Zero upfront tuition barrier with modular pay-per-exam structure

Curriculum

Stage 1 — Core Host Modules (60 Credits)

Code	Course	Credits · hours
BSC-D101	Threat modelling Threat modelling (BSC-D101) is a 20-credit course on BSc in Cyber Forensics & Information Security (Dual Award), with 200 notional learning hours. By the end, students can map one named system, write a threat model, and specify the controls that would stop the most likely path, using Threat modelling as the working context rather than a generic management example. The course is taught in three movements. First, students establish the terms and the decision the course is about. Second, they apply the method to a case, dataset, text, or design and compare it with a weaker alternative. Third, they revise the work after feedback and state what the conclusion cannot support. Preparation uses control catalogues, incident write-ups, and a short technical standard. Seminar time is for the decision, not for reading the materials aloud. Assessment is a defensive design with a test plan and a statement of residual risk. A pass requires a clear method, evidence a marker can check, and an explicit limit. Credit is not awarded for summary alone. BSC-D101-M1 · Assets, trust boundaries, and the adversary model — Threat modelling BSC-D101-M2 · Threat modelling and attack paths — Threat modelling BSC-D101-M3 · Identity, logging, and segmentation — Threat modelling BSC-D101-M4 · Detection, containment, and evidence — Threat modelling BSC-D101-M5 · Residual risk and what a control does not stop — Threat modelling BSC-D101-M6 · Defensive design, test plan, and after-action review — Threat modelling	20 · 200 h
BSC-D102	Defensive architecture Defensive architecture (BSC-D102) is a 20-credit course on BSc in Cyber Forensics & Information Security (Dual Award), with 200 notional learning hours. By the end, students can map one named system, write a threat model, and specify the controls that would stop the most likely path, using Defensive architecture as the working context rather than a generic management example. The course is taught in three movements. First, students establish the terms and the decision the course is about. Second, they apply the method to a case, dataset, text, or design and compare it with a weaker alternative. Third, they revise the work after feedback and state what the conclusion cannot support. Preparation uses control catalogues, incident write-ups, and a short technical standard. Seminar time is for the decision, not for reading the materials aloud. Assessment is a defensive design with a test plan and a statement of residual risk. A pass requires a clear method, evidence a marker can check, and an explicit limit. Credit is not awarded for summary alone. BSC-D102-M1 · Assets, trust boundaries, and the adversary model — Defensive architecture BSC-D102-M2 · Threat modelling and attack paths — Defensive architecture BSC-D102-M3 · Identity, logging, and segmentation — Defensive architecture BSC-D102-M4 · Detection, containment, and evidence — Defensive architecture BSC-D102-M5 · Residual risk and what a control does not stop — Defensive architecture BSC-D102-M6 · Defensive design, test plan, and after-action review — Defensive architecture	20 · 200 h
BSC-D103	Incident response Incident response (BSC-D103) is a 20-credit course on BSc in Cyber Forensics & Information Security (Dual Award), with 200 notional learning hours. By the end, students can map one named system, write a threat model, and specify the controls that would stop the most likely path, using Incident response as the working context rather than a generic management example. The course is taught in three movements. First, students establish the terms and the decision the course is about. Second, they apply the method to a case, dataset, text, or design and compare it with a weaker alternative. Third, they revise the work after feedback and state what the conclusion cannot support. Preparation uses control catalogues, incident write-ups, and a short technical standard. Seminar time is for the decision, not for reading the materials aloud. Assessment is a defensive design with a test plan and a statement of residual risk. A pass requires a clear method, evidence a marker can check, and an explicit limit. Credit is not awarded for summary alone. BSC-D103-M1 · Assets, trust boundaries, and the adversary model — Incident response BSC-D103-M2 · Threat modelling and attack paths — Incident response BSC-D103-M3 · Identity, logging, and segmentation — Incident response BSC-D103-M4 · Detection, containment, and evidence — Incident response BSC-D103-M5 · Residual risk and what a control does not stop — Incident response BSC-D103-M6 · Defensive design, test plan, and after-action review — Incident response	20 · 200 h

Code

Course

Credits · hours

BSC-D101

Threat modelling

Threat modelling (BSC-D101) is a 20-credit course on BSc in Cyber Forensics & Information Security (Dual Award), with 200 notional learning hours. By the end, students can map one named system, write a threat model, and specify the controls that would stop the most likely path, using Threat modelling as the working context rather than a generic management example. The course is taught in three movements. First, students establish the terms and the decision the course is about. Second, they apply the method to a case, dataset, text, or design and compare it with a weaker alternative. Third, they revise the work after feedback and state what the conclusion cannot support. Preparation uses control catalogues, incident write-ups, and a short technical standard. Seminar time is for the decision, not for reading the materials aloud. Assessment is a defensive design with a test plan and a statement of residual risk. A pass requires a clear method, evidence a marker can check, and an explicit limit. Credit is not awarded for summary alone.

BSC-D101-M1 · Assets, trust boundaries, and the adversary model — Threat modelling
BSC-D101-M2 · Threat modelling and attack paths — Threat modelling
BSC-D101-M3 · Identity, logging, and segmentation — Threat modelling
BSC-D101-M4 · Detection, containment, and evidence — Threat modelling
BSC-D101-M5 · Residual risk and what a control does not stop — Threat modelling
BSC-D101-M6 · Defensive design, test plan, and after-action review — Threat modelling

20 · 200 h

BSC-D102

Defensive architecture

Defensive architecture (BSC-D102) is a 20-credit course on BSc in Cyber Forensics & Information Security (Dual Award), with 200 notional learning hours. By the end, students can map one named system, write a threat model, and specify the controls that would stop the most likely path, using Defensive architecture as the working context rather than a generic management example. The course is taught in three movements. First, students establish the terms and the decision the course is about. Second, they apply the method to a case, dataset, text, or design and compare it with a weaker alternative. Third, they revise the work after feedback and state what the conclusion cannot support. Preparation uses control catalogues, incident write-ups, and a short technical standard. Seminar time is for the decision, not for reading the materials aloud. Assessment is a defensive design with a test plan and a statement of residual risk. A pass requires a clear method, evidence a marker can check, and an explicit limit. Credit is not awarded for summary alone.

BSC-D102-M1 · Assets, trust boundaries, and the adversary model — Defensive architecture
BSC-D102-M2 · Threat modelling and attack paths — Defensive architecture
BSC-D102-M3 · Identity, logging, and segmentation — Defensive architecture
BSC-D102-M4 · Detection, containment, and evidence — Defensive architecture
BSC-D102-M5 · Residual risk and what a control does not stop — Defensive architecture
BSC-D102-M6 · Defensive design, test plan, and after-action review — Defensive architecture

20 · 200 h

BSC-D103

Incident response

Incident response (BSC-D103) is a 20-credit course on BSc in Cyber Forensics & Information Security (Dual Award), with 200 notional learning hours. By the end, students can map one named system, write a threat model, and specify the controls that would stop the most likely path, using Incident response as the working context rather than a generic management example. The course is taught in three movements. First, students establish the terms and the decision the course is about. Second, they apply the method to a case, dataset, text, or design and compare it with a weaker alternative. Third, they revise the work after feedback and state what the conclusion cannot support. Preparation uses control catalogues, incident write-ups, and a short technical standard. Seminar time is for the decision, not for reading the materials aloud. Assessment is a defensive design with a test plan and a statement of residual risk. A pass requires a clear method, evidence a marker can check, and an explicit limit. Credit is not awarded for summary alone.

BSC-D103-M1 · Assets, trust boundaries, and the adversary model — Incident response
BSC-D103-M2 · Threat modelling and attack paths — Incident response
BSC-D103-M3 · Identity, logging, and segmentation — Incident response
BSC-D103-M4 · Detection, containment, and evidence — Incident response
BSC-D103-M5 · Residual risk and what a control does not stop — Incident response
BSC-D103-M6 · Defensive design, test plan, and after-action review — Incident response

20 · 200 h

Stage 2 — Partner Moderated Advanced Specialisation (60 Credits)

Code	Course	Credits · hours
BSC-D201	Security project Security project (BSC-D201) is a 30-credit course on BSc in Cyber Forensics & Information Security (Dual Award), with 300 notional learning hours. By the end, students can map one named system, write a threat model, and specify the controls that would stop the most likely path, using Security project as the working context rather than a generic management example. The course is taught in three movements. First, students establish the terms and the decision the course is about. Second, they apply the method to a case, dataset, text, or design and compare it with a weaker alternative. Third, they revise the work after feedback and state what the conclusion cannot support. Preparation uses control catalogues, incident write-ups, and a short technical standard. Seminar time is for the decision, not for reading the materials aloud. Assessment is a defensive design with a test plan and a statement of residual risk. A pass requires a clear method, evidence a marker can check, and an explicit limit. Credit is not awarded for summary alone. BSC-D201-M1 · Assets, trust boundaries, and the adversary model — Security project BSC-D201-M2 · Threat modelling and attack paths — Security project BSC-D201-M3 · Identity, logging, and segmentation — Security project BSC-D201-M4 · Detection, containment, and evidence — Security project BSC-D201-M5 · Residual risk and what a control does not stop — Security project BSC-D201-M6 · Defensive design, test plan, and after-action review — Security project	30 · 300 h
BSC-D202	Threat modelling (BSC-D202) Threat modelling (BSC-D202) (BSC-D202) is a 30-credit course on BSc in Cyber Forensics & Information Security (Dual Award), with 300 notional learning hours. By the end, students can map one named system, write a threat model, and specify the controls that would stop the most likely path, using Threat modelling (BSC-D202) as the working context rather than a generic management example. The course is taught in three movements. First, students establish the terms and the decision the course is about. Second, they apply the method to a case, dataset, text, or design and compare it with a weaker alternative. Third, they revise the work after feedback and state what the conclusion cannot support. Preparation uses control catalogues, incident write-ups, and a short technical standard. Seminar time is for the decision, not for reading the materials aloud. Assessment is a defensive design with a test plan and a statement of residual risk. A pass requires a clear method, evidence a marker can check, and an explicit limit. Credit is not awarded for summary alone. BSC-D202-M1 · Assets, trust boundaries, and the adversary model — Threat modelling (BSC-D202) BSC-D202-M2 · Threat modelling and attack paths — Threat modelling (BSC-D202) BSC-D202-M3 · Identity, logging, and segmentation — Threat modelling (BSC-D202) BSC-D202-M4 · Detection, containment, and evidence — Threat modelling (BSC-D202) BSC-D202-M5 · Residual risk and what a control does not stop — Threat modelling (BSC-D202) BSC-D202-M6 · Defensive design, test plan, and after-action review — Threat modelling (BSC-D202)	30 · 300 h

Code

Course

Credits · hours

BSC-D201

Security project

Security project (BSC-D201) is a 30-credit course on BSc in Cyber Forensics & Information Security (Dual Award), with 300 notional learning hours. By the end, students can map one named system, write a threat model, and specify the controls that would stop the most likely path, using Security project as the working context rather than a generic management example. The course is taught in three movements. First, students establish the terms and the decision the course is about. Second, they apply the method to a case, dataset, text, or design and compare it with a weaker alternative. Third, they revise the work after feedback and state what the conclusion cannot support. Preparation uses control catalogues, incident write-ups, and a short technical standard. Seminar time is for the decision, not for reading the materials aloud. Assessment is a defensive design with a test plan and a statement of residual risk. A pass requires a clear method, evidence a marker can check, and an explicit limit. Credit is not awarded for summary alone.

BSC-D201-M1 · Assets, trust boundaries, and the adversary model — Security project
BSC-D201-M2 · Threat modelling and attack paths — Security project
BSC-D201-M3 · Identity, logging, and segmentation — Security project
BSC-D201-M4 · Detection, containment, and evidence — Security project
BSC-D201-M5 · Residual risk and what a control does not stop — Security project
BSC-D201-M6 · Defensive design, test plan, and after-action review — Security project

30 · 300 h

BSC-D202

Threat modelling (BSC-D202)

Threat modelling (BSC-D202) (BSC-D202) is a 30-credit course on BSc in Cyber Forensics & Information Security (Dual Award), with 300 notional learning hours. By the end, students can map one named system, write a threat model, and specify the controls that would stop the most likely path, using Threat modelling (BSC-D202) as the working context rather than a generic management example. The course is taught in three movements. First, students establish the terms and the decision the course is about. Second, they apply the method to a case, dataset, text, or design and compare it with a weaker alternative. Third, they revise the work after feedback and state what the conclusion cannot support. Preparation uses control catalogues, incident write-ups, and a short technical standard. Seminar time is for the decision, not for reading the materials aloud. Assessment is a defensive design with a test plan and a statement of residual risk. A pass requires a clear method, evidence a marker can check, and an explicit limit. Credit is not awarded for summary alone.

BSC-D202-M1 · Assets, trust boundaries, and the adversary model — Threat modelling (BSC-D202)
BSC-D202-M2 · Threat modelling and attack paths — Threat modelling (BSC-D202)
BSC-D202-M3 · Identity, logging, and segmentation — Threat modelling (BSC-D202)
BSC-D202-M4 · Detection, containment, and evidence — Threat modelling (BSC-D202)
BSC-D202-M5 · Residual risk and what a control does not stop — Threat modelling (BSC-D202)
BSC-D202-M6 · Defensive design, test plan, and after-action review — Threat modelling (BSC-D202)

30 · 300 h

Career Paths

Digital Forensics Incident Responder (DFIR)
SOC Security Operations Analyst
Malware Analysis Specialist
Information Security Auditor

Programme Highlights

2 Accredited Diplomas
65% / 35% International Credit Split
Awarded by: Imperial University in Cairo (IUC) & University of Warwick (UK)
Delivery: 100% Online

Assessment

Modules are assessed through a published mix of coursework, applied projects, and examinations. Exam windows are announced in advance so students in other time zones are not forced into overnight sittings. Alternative arrangements are available where documented.

Admission requirements

Academic entry

Bachelor's degree from an accredited institution (minimum 2:2 or GPA 2.5/4.0)

English language

English proficiency: IELTS 5.5, TOEFL 46, or equivalent (waived for prior English-medium study)

Documents

Statement of Purpose (500 words minimum) outlining your goals and fit for the programme
Two academic or professional references with contact details
CV or résumé documenting relevant education and professional experience

Programme questions

How long is the BSc in Cyber Forensics & Information Security (Dual Award)?

The published duration is 36 months. Teaching language: Arabic / English. Actual time-to-complete depends on mode and any recognised prior learning.

Can I study this from my country?

You may study this award fully online from your country, or — where published — on campus at IUC. Online study does not require a student visa. Campus study may.

What does it cost?

Degree tuition for this award is published as £0 / tuition-free on the online pathway. Examination or administrative fees may apply at checkout — never an annual tuition invoice. Check the Fees page for any extras.

What are the entry requirements?

Requirements are grouped on this page (academic, English, documents). Equivalent qualifications are considered. English may be waived after prior English-medium study.

How is the programme assessed?

Assessment is typically a mix of coursework, projects, and examinations. Doctoral awards include a thesis or dissertation and an oral examination. Details sit in the programme specification and module outlines.

Will this award be recognised where I live?

Recognition of the award for local employment, professional licence, or ministry attestation is decided by your employer or regulator. Imperial University in Cairo publishes verification pages for certificates. We do not claim automatic equivalence in every country.

How do I apply?

Start an application on this website. Progress is saved from the first step. Admissions: admissions@iucairo.co.uk.

Recognised & Accredited

Ready to begin?BSc in Cyber Forensics & Information Security (Dual Award)

Apply now