MSc

Dual Award · Conferred with جامعة وارويك

MSc Cybersecurity & Sovereign Cloud Defense (Dual Award)

Dual Master of Science (2 Degrees) — Conferred jointly with Imperial University in Cairo (IUC) & University of Warwick (UK)

Joint Awarding Institution2 Diplomas

جامعة وارويك (المملكة المتحدة)

Credit Allocation60% ALU / 40% Warwick

Online & New Capital Campus

4 Semesters (2 Years)36 creditsArabic / English

Begin your application Explore programme

MSc Cybersecurity & Sovereign Cloud Defense (Dual Award)

Overview

Specialized dual Master of Science addressing critical national infrastructure security, zero-trust cloud perimeters, sovereign encryption, and incident containment. Students earn 2 independent accredited diplomas with a 60% / 40% international credit split. MSc Cybersecurity & Sovereign Cloud Defense (Dual Award) is taught as one award, not a list of unrelated modules. The published length is 4 Semesters (2 Years), and the credit total is 36. Students move from Threat modelling through Threat modelling; Defensive architecture; Incident response; Security project; Threat modelling (MSC-605); Defensive architecture (MSC-606), and finish on Defensive architecture (MSC-606). Each course has a question, a method, and a submission. In this field, students map one named system, write a threat model, and specify the controls that would stop the most likely path. Reading is control catalogues, incident write-ups, and a short technical standard. The artefact a marker expects is a defensive design with a test plan and a statement of residual risk. The award is built so that a graduate can do the following in practice: Two independent Master of Science diplomas upon completion Hands-on cyber range simulations tailored to regional threat landscape Full alignment with British and Arab cybersecurity authorities Teaching assumes the student can read a source, attempt a problem before the seminar, and revise after feedback. Attendance at live seminars is part of the design. The capstone or final course must use the methods of the earlier courses; a project that ignores them does not pass. The pages for each course name the topics that are examined. Those topics are the syllabus. A brochure line is not a substitute for them.

How you can study

Digital only

Study online

100% tuition-free online

Online tuition is completely free. Study from anywhere in Egypt, the Arab region, and worldwide with full digital flexibility.

✦ Tuition: £0 / $0
✦ Examinations are free. There is no exam fee.
✦ Learn from anywhere · Live online seminars

Apply online →

What You Will Learn

Two independent Master of Science diplomas upon completion
Hands-on cyber range simulations tailored to regional threat landscape
Full alignment with British and Arab cybersecurity authorities
Zero upfront tuition barrier with rolling online admissions

Curriculum

Stage 1 — Core Host Foundations (18 Credits)

Code	Course	Credits · hours
MSC-601	Threat modelling Threat modelling (MSC-601) is a 6-credit course on MSc Cybersecurity & Sovereign Cloud Defense (Dual Award), with 60 notional learning hours. By the end, students can map one named system, write a threat model, and specify the controls that would stop the most likely path, using Threat modelling as the working context rather than a generic management example. The course is taught in three movements. First, students establish the terms and the decision the course is about. Second, they apply the method to a case, dataset, text, or design and compare it with a weaker alternative. Third, they revise the work after feedback and state what the conclusion cannot support. Preparation uses control catalogues, incident write-ups, and a short technical standard. Seminar time is for the decision, not for reading the materials aloud. Assessment is a defensive design with a test plan and a statement of residual risk. A pass requires a clear method, evidence a marker can check, and an explicit limit. Credit is not awarded for summary alone. MSC-601-M1 · Assets, trust boundaries, and the adversary model — Threat modelling MSC-601-M2 · Threat modelling and attack paths — Threat modelling MSC-601-M3 · Identity, logging, and segmentation — Threat modelling MSC-601-M4 · Detection, containment, and evidence — Threat modelling MSC-601-M5 · Residual risk and what a control does not stop — Threat modelling MSC-601-M6 · Defensive design, test plan, and after-action review — Threat modelling	6 · 60 h
MSC-602	Defensive architecture Defensive architecture (MSC-602) is a 6-credit course on MSc Cybersecurity & Sovereign Cloud Defense (Dual Award), with 60 notional learning hours. By the end, students can map one named system, write a threat model, and specify the controls that would stop the most likely path, using Defensive architecture as the working context rather than a generic management example. The course is taught in three movements. First, students establish the terms and the decision the course is about. Second, they apply the method to a case, dataset, text, or design and compare it with a weaker alternative. Third, they revise the work after feedback and state what the conclusion cannot support. Preparation uses control catalogues, incident write-ups, and a short technical standard. Seminar time is for the decision, not for reading the materials aloud. Assessment is a defensive design with a test plan and a statement of residual risk. A pass requires a clear method, evidence a marker can check, and an explicit limit. Credit is not awarded for summary alone. MSC-602-M1 · Assets, trust boundaries, and the adversary model — Defensive architecture MSC-602-M2 · Threat modelling and attack paths — Defensive architecture MSC-602-M3 · Identity, logging, and segmentation — Defensive architecture MSC-602-M4 · Detection, containment, and evidence — Defensive architecture MSC-602-M5 · Residual risk and what a control does not stop — Defensive architecture MSC-602-M6 · Defensive design, test plan, and after-action review — Defensive architecture	6 · 60 h
MSC-603	Incident response Incident response (MSC-603) is a 6-credit course on MSc Cybersecurity & Sovereign Cloud Defense (Dual Award), with 60 notional learning hours. By the end, students can map one named system, write a threat model, and specify the controls that would stop the most likely path, using Incident response as the working context rather than a generic management example. The course is taught in three movements. First, students establish the terms and the decision the course is about. Second, they apply the method to a case, dataset, text, or design and compare it with a weaker alternative. Third, they revise the work after feedback and state what the conclusion cannot support. Preparation uses control catalogues, incident write-ups, and a short technical standard. Seminar time is for the decision, not for reading the materials aloud. Assessment is a defensive design with a test plan and a statement of residual risk. A pass requires a clear method, evidence a marker can check, and an explicit limit. Credit is not awarded for summary alone. MSC-603-M1 · Assets, trust boundaries, and the adversary model — Incident response MSC-603-M2 · Threat modelling and attack paths — Incident response MSC-603-M3 · Identity, logging, and segmentation — Incident response MSC-603-M4 · Detection, containment, and evidence — Incident response MSC-603-M5 · Residual risk and what a control does not stop — Incident response MSC-603-M6 · Defensive design, test plan, and after-action review — Incident response	6 · 60 h

Code

Course

Credits · hours

MSC-601

Threat modelling

Threat modelling (MSC-601) is a 6-credit course on MSc Cybersecurity & Sovereign Cloud Defense (Dual Award), with 60 notional learning hours. By the end, students can map one named system, write a threat model, and specify the controls that would stop the most likely path, using Threat modelling as the working context rather than a generic management example. The course is taught in three movements. First, students establish the terms and the decision the course is about. Second, they apply the method to a case, dataset, text, or design and compare it with a weaker alternative. Third, they revise the work after feedback and state what the conclusion cannot support. Preparation uses control catalogues, incident write-ups, and a short technical standard. Seminar time is for the decision, not for reading the materials aloud. Assessment is a defensive design with a test plan and a statement of residual risk. A pass requires a clear method, evidence a marker can check, and an explicit limit. Credit is not awarded for summary alone.

MSC-601-M1 · Assets, trust boundaries, and the adversary model — Threat modelling
MSC-601-M2 · Threat modelling and attack paths — Threat modelling
MSC-601-M3 · Identity, logging, and segmentation — Threat modelling
MSC-601-M4 · Detection, containment, and evidence — Threat modelling
MSC-601-M5 · Residual risk and what a control does not stop — Threat modelling
MSC-601-M6 · Defensive design, test plan, and after-action review — Threat modelling

6 · 60 h

MSC-602

Defensive architecture

Defensive architecture (MSC-602) is a 6-credit course on MSc Cybersecurity & Sovereign Cloud Defense (Dual Award), with 60 notional learning hours. By the end, students can map one named system, write a threat model, and specify the controls that would stop the most likely path, using Defensive architecture as the working context rather than a generic management example. The course is taught in three movements. First, students establish the terms and the decision the course is about. Second, they apply the method to a case, dataset, text, or design and compare it with a weaker alternative. Third, they revise the work after feedback and state what the conclusion cannot support. Preparation uses control catalogues, incident write-ups, and a short technical standard. Seminar time is for the decision, not for reading the materials aloud. Assessment is a defensive design with a test plan and a statement of residual risk. A pass requires a clear method, evidence a marker can check, and an explicit limit. Credit is not awarded for summary alone.

MSC-602-M1 · Assets, trust boundaries, and the adversary model — Defensive architecture
MSC-602-M2 · Threat modelling and attack paths — Defensive architecture
MSC-602-M3 · Identity, logging, and segmentation — Defensive architecture
MSC-602-M4 · Detection, containment, and evidence — Defensive architecture
MSC-602-M5 · Residual risk and what a control does not stop — Defensive architecture
MSC-602-M6 · Defensive design, test plan, and after-action review — Defensive architecture

6 · 60 h

MSC-603

Incident response

Incident response (MSC-603) is a 6-credit course on MSc Cybersecurity & Sovereign Cloud Defense (Dual Award), with 60 notional learning hours. By the end, students can map one named system, write a threat model, and specify the controls that would stop the most likely path, using Incident response as the working context rather than a generic management example. The course is taught in three movements. First, students establish the terms and the decision the course is about. Second, they apply the method to a case, dataset, text, or design and compare it with a weaker alternative. Third, they revise the work after feedback and state what the conclusion cannot support. Preparation uses control catalogues, incident write-ups, and a short technical standard. Seminar time is for the decision, not for reading the materials aloud. Assessment is a defensive design with a test plan and a statement of residual risk. A pass requires a clear method, evidence a marker can check, and an explicit limit. Credit is not awarded for summary alone.

MSC-603-M1 · Assets, trust boundaries, and the adversary model — Incident response
MSC-603-M2 · Threat modelling and attack paths — Incident response
MSC-603-M3 · Identity, logging, and segmentation — Incident response
MSC-603-M4 · Detection, containment, and evidence — Incident response
MSC-603-M5 · Residual risk and what a control does not stop — Incident response
MSC-603-M6 · Defensive design, test plan, and after-action review — Incident response

6 · 60 h

Stage 2 — Partner Moderated Advanced Specialisation (12 Credits)

Code	Course	Credits · hours
MSC-604	Security project Security project (MSC-604) is a 6-credit course on MSc Cybersecurity & Sovereign Cloud Defense (Dual Award), with 60 notional learning hours. By the end, students can map one named system, write a threat model, and specify the controls that would stop the most likely path, using Security project as the working context rather than a generic management example. The course is taught in three movements. First, students establish the terms and the decision the course is about. Second, they apply the method to a case, dataset, text, or design and compare it with a weaker alternative. Third, they revise the work after feedback and state what the conclusion cannot support. Preparation uses control catalogues, incident write-ups, and a short technical standard. Seminar time is for the decision, not for reading the materials aloud. Assessment is a defensive design with a test plan and a statement of residual risk. A pass requires a clear method, evidence a marker can check, and an explicit limit. Credit is not awarded for summary alone. MSC-604-M1 · Assets, trust boundaries, and the adversary model — Security project MSC-604-M2 · Threat modelling and attack paths — Security project MSC-604-M3 · Identity, logging, and segmentation — Security project MSC-604-M4 · Detection, containment, and evidence — Security project MSC-604-M5 · Residual risk and what a control does not stop — Security project MSC-604-M6 · Defensive design, test plan, and after-action review — Security project	6 · 60 h
MSC-605	Threat modelling (MSC-605) Threat modelling (MSC-605) (MSC-605) is a 6-credit course on MSc Cybersecurity & Sovereign Cloud Defense (Dual Award), with 60 notional learning hours. By the end, students can map one named system, write a threat model, and specify the controls that would stop the most likely path, using Threat modelling (MSC-605) as the working context rather than a generic management example. The course is taught in three movements. First, students establish the terms and the decision the course is about. Second, they apply the method to a case, dataset, text, or design and compare it with a weaker alternative. Third, they revise the work after feedback and state what the conclusion cannot support. Preparation uses control catalogues, incident write-ups, and a short technical standard. Seminar time is for the decision, not for reading the materials aloud. Assessment is a defensive design with a test plan and a statement of residual risk. A pass requires a clear method, evidence a marker can check, and an explicit limit. Credit is not awarded for summary alone. MSC-605-M1 · Assets, trust boundaries, and the adversary model — Threat modelling (MSC-605) MSC-605-M2 · Threat modelling and attack paths — Threat modelling (MSC-605) MSC-605-M3 · Identity, logging, and segmentation — Threat modelling (MSC-605) MSC-605-M4 · Detection, containment, and evidence — Threat modelling (MSC-605) MSC-605-M5 · Residual risk and what a control does not stop — Threat modelling (MSC-605) MSC-605-M6 · Defensive design, test plan, and after-action review — Threat modelling (MSC-605)	6 · 60 h

Code

Course

Credits · hours

MSC-604

Security project

Security project (MSC-604) is a 6-credit course on MSc Cybersecurity & Sovereign Cloud Defense (Dual Award), with 60 notional learning hours. By the end, students can map one named system, write a threat model, and specify the controls that would stop the most likely path, using Security project as the working context rather than a generic management example. The course is taught in three movements. First, students establish the terms and the decision the course is about. Second, they apply the method to a case, dataset, text, or design and compare it with a weaker alternative. Third, they revise the work after feedback and state what the conclusion cannot support. Preparation uses control catalogues, incident write-ups, and a short technical standard. Seminar time is for the decision, not for reading the materials aloud. Assessment is a defensive design with a test plan and a statement of residual risk. A pass requires a clear method, evidence a marker can check, and an explicit limit. Credit is not awarded for summary alone.

MSC-604-M1 · Assets, trust boundaries, and the adversary model — Security project
MSC-604-M2 · Threat modelling and attack paths — Security project
MSC-604-M3 · Identity, logging, and segmentation — Security project
MSC-604-M4 · Detection, containment, and evidence — Security project
MSC-604-M5 · Residual risk and what a control does not stop — Security project
MSC-604-M6 · Defensive design, test plan, and after-action review — Security project

6 · 60 h

MSC-605

Threat modelling (MSC-605)

Threat modelling (MSC-605) (MSC-605) is a 6-credit course on MSc Cybersecurity & Sovereign Cloud Defense (Dual Award), with 60 notional learning hours. By the end, students can map one named system, write a threat model, and specify the controls that would stop the most likely path, using Threat modelling (MSC-605) as the working context rather than a generic management example. The course is taught in three movements. First, students establish the terms and the decision the course is about. Second, they apply the method to a case, dataset, text, or design and compare it with a weaker alternative. Third, they revise the work after feedback and state what the conclusion cannot support. Preparation uses control catalogues, incident write-ups, and a short technical standard. Seminar time is for the decision, not for reading the materials aloud. Assessment is a defensive design with a test plan and a statement of residual risk. A pass requires a clear method, evidence a marker can check, and an explicit limit. Credit is not awarded for summary alone.

MSC-605-M1 · Assets, trust boundaries, and the adversary model — Threat modelling (MSC-605)
MSC-605-M2 · Threat modelling and attack paths — Threat modelling (MSC-605)
MSC-605-M3 · Identity, logging, and segmentation — Threat modelling (MSC-605)
MSC-605-M4 · Detection, containment, and evidence — Threat modelling (MSC-605)
MSC-605-M5 · Residual risk and what a control does not stop — Threat modelling (MSC-605)
MSC-605-M6 · Defensive design, test plan, and after-action review — Threat modelling (MSC-605)

6 · 60 h

Stage 3 — Applied Research Capstone (6 Credits)

Code	Course	Credits · hours
MSC-606	Defensive architecture (MSC-606) Defensive architecture (MSC-606) (MSC-606) is a 6-credit course on MSc Cybersecurity & Sovereign Cloud Defense (Dual Award), with 60 notional learning hours. By the end, students can map one named system, write a threat model, and specify the controls that would stop the most likely path, using Defensive architecture (MSC-606) as the working context rather than a generic management example. The course is taught in three movements. First, students establish the terms and the decision the course is about. Second, they apply the method to a case, dataset, text, or design and compare it with a weaker alternative. Third, they revise the work after feedback and state what the conclusion cannot support. Preparation uses control catalogues, incident write-ups, and a short technical standard. Seminar time is for the decision, not for reading the materials aloud. Assessment is a defensive design with a test plan and a statement of residual risk. A pass requires a clear method, evidence a marker can check, and an explicit limit. Credit is not awarded for summary alone. MSC-606-M1 · Assets, trust boundaries, and the adversary model — Defensive architecture (MSC-606) MSC-606-M2 · Threat modelling and attack paths — Defensive architecture (MSC-606) MSC-606-M3 · Identity, logging, and segmentation — Defensive architecture (MSC-606) MSC-606-M4 · Detection, containment, and evidence — Defensive architecture (MSC-606) MSC-606-M5 · Residual risk and what a control does not stop — Defensive architecture (MSC-606) MSC-606-M6 · Defensive design, test plan, and after-action review — Defensive architecture (MSC-606)	6 · 60 h

Code

Course

Credits · hours

MSC-606

Defensive architecture (MSC-606)

Defensive architecture (MSC-606) (MSC-606) is a 6-credit course on MSc Cybersecurity & Sovereign Cloud Defense (Dual Award), with 60 notional learning hours. By the end, students can map one named system, write a threat model, and specify the controls that would stop the most likely path, using Defensive architecture (MSC-606) as the working context rather than a generic management example. The course is taught in three movements. First, students establish the terms and the decision the course is about. Second, they apply the method to a case, dataset, text, or design and compare it with a weaker alternative. Third, they revise the work after feedback and state what the conclusion cannot support. Preparation uses control catalogues, incident write-ups, and a short technical standard. Seminar time is for the decision, not for reading the materials aloud. Assessment is a defensive design with a test plan and a statement of residual risk. A pass requires a clear method, evidence a marker can check, and an explicit limit. Credit is not awarded for summary alone.

MSC-606-M1 · Assets, trust boundaries, and the adversary model — Defensive architecture (MSC-606)
MSC-606-M2 · Threat modelling and attack paths — Defensive architecture (MSC-606)
MSC-606-M3 · Identity, logging, and segmentation — Defensive architecture (MSC-606)
MSC-606-M4 · Detection, containment, and evidence — Defensive architecture (MSC-606)
MSC-606-M5 · Residual risk and what a control does not stop — Defensive architecture (MSC-606)
MSC-606-M6 · Defensive design, test plan, and after-action review — Defensive architecture (MSC-606)

6 · 60 h

Career Paths

Chief Information Security Officer (CISO)
Sovereign Cloud Security Lead
Threat Intelligence Director
Critical Infrastructure Security Specialist

Programme Highlights

2 Accredited Diplomas
60% / 40% International Credit Split
Awarded by: Imperial University in Cairo (IUC) & University of Warwick (UK)
Delivery: 100% Online

Assessment

Modules are assessed through a published mix of coursework, applied projects, and examinations. Exam windows are announced in advance so students in other time zones are not forced into overnight sittings. Alternative arrangements are available where documented.

Admission requirements

Academic entry

Bachelor's degree from an accredited institution (minimum 2:2 or GPA 2.5/4.0)

English language

English proficiency: IELTS 5.5, TOEFL 46, or equivalent (waived for prior English-medium study)

Documents

Statement of Purpose (500 words minimum) outlining your goals and fit for the programme
Two academic or professional references with contact details
CV or résumé documenting relevant education and professional experience

Programme questions

How long is the MSc Cybersecurity & Sovereign Cloud Defense (Dual Award)?

The published duration is 4 Semesters (2 Years). Teaching language: Arabic / English. Actual time-to-complete depends on mode and any recognised prior learning.

Can I study this from my country?

You may study this award fully online from your country, or — where published — on campus at IUC. Online study does not require a student visa. Campus study may.

What does it cost?

Degree tuition for this award is published as £0 / tuition-free on the online pathway. Examination or administrative fees may apply at checkout — never an annual tuition invoice. Check the Fees page for any extras.

What are the entry requirements?

Requirements are grouped on this page (academic, English, documents). Equivalent qualifications are considered. English may be waived after prior English-medium study.

How is the programme assessed?

Assessment is typically a mix of coursework, projects, and examinations. Doctoral awards include a thesis or dissertation and an oral examination. Details sit in the programme specification and module outlines.

Will this award be recognised where I live?

Recognition of the award for local employment, professional licence, or ministry attestation is decided by your employer or regulator. Imperial University in Cairo publishes verification pages for certificates. We do not claim automatic equivalence in every country.

How do I apply?

Start an application on this website. Progress is saved from the first step. Admissions: admissions@iucairo.co.uk.

Recognised & Accredited

Ready to begin?MSc Cybersecurity & Sovereign Cloud Defense (Dual Award)

Apply now