Cyber Security MSc — 2027 entry

Build cyber expertise for a changing threat landscape with an NCSC-certified MSc designed for tomorrow’s careers. On this established masters programme, you’ll learn in a world-leading research environment and focus on developing skills to succeed in multiple cyber professions.

Key course information

Typical offer
2:2 minimum
Start date
February 2027
Attendance
Full-time
Duration
1 year
Scholarships
Funding available
UK fees
£12,900
Overseas fees
£25,900
Subject area
Computer science

Why choose this course?

Study at the Surrey Centre for Cyber Security, one of the UK’s only Academic Centres of Excellence in both Cyber Security Education (Gold award) and Research. On this masters programme, you’ll build on your existing knowledge, exploring different approaches to protect networks and systems, then have opportunities to apply your knowledge in practice.

  • Benefit from a well-established programme that is constantly updated to reflect rapid technology change. Alongside covering foundational cyber security such as cryptography, you can choose to study topics from secure architectures to digital forensics, ethical hacking and cybercrime.
  • Design and test secure systems and try to break insecure ones in our computer science labs, implementing algorithms, programming secure applications and applying penetration testing techniques on systems.
  • Get closer to the latest research being undertaken in the Surrey Centre for Cyber Security, as you are taught by lecturers at the forefront of protecting payment systems, space software security, advising on online safety and defending against AI-powered attacks.
  • Explore security from both a business and technical perspective - cover topics such as governance, regulation and user behaviour to develop vital insights into how security architectures support organisational objectives and how polices can be applied and managed effectively within an organisation.
  • Connect with experts from leading cyber security businesses, based locally in Surrey or in nearby London. Get involved in team and individual programming challenges and hackathons both locally and nationally.
  • Get the perfect launchpad for a wide range of career paths – there is a high demand for cyber security professionals, not only in large organisations, but also in consultancy, research, software development and cybercrime investigation.
  • Study on a full or part-time basis: ideal if you’re balancing it with work or other commitments. You can start the full-time programme in either September or February, and there’s also the option of a year in industry as part of your masters.
  • We’re preparing you for the future by integrating AI into every course, building digital skills, confidence and creativity that employers value in tomorrow’s workplace.
Find out more information

Certified

National Cyber Security Centre certified degree logo

Course details

Open Close

What you will study

Protecting digital information from unauthorised access and use and ensuring the resilience of supporting network infrastructure and systems are significant challenges for the continued technological development of our society.

The science behind our Cyber Security masters connects various disciplines, from computer science, mathematics and business to design and critical analysis of concepts, mechanisms and technologies used in the depth and breadth of cyber security.

You’ll learn the foundations of systems and information security such as cryptography, and you’ll also be educated on advanced and state-of-the-art concepts linked to electronic payments or distributed ledgers. You will apply your knowledge in practice, for example through interacting with and programming secure applications using trusted platform modules (TPMs), which are mounted on Raspberry Pi computers in our labs.

The MSc Cyber Security with a placement year will allow you to get experience of cyber security applied in research and development in the real world.

The University has strong, established links with many national and international businesses and institutions. These include:

  • Airbus
  • BAE Systems
  • CGI Group
  • DSTL
  • IBM
  • Infineon
  • Microsoft
  • Sophos
  • Sky TV.

Professional recognition

MSc - National Cyber Security Centre (NCSC)
Our course has received Full Certification from NCSC, is taught by experts, and equips you with the theoretical grounding and hands-on experience demanded by the cyber security sector.

Facilities

Our key facilities include:

  • £1.7m multi-purpose Computer Science Laboratory with state-of-the-art audio-visual equipment
  • Six open access PC labs and four dedicated specialist labs
  • Specialist desktop solutions, including development software, research packages and dedicated printing.

Course structure

Open Close

The structure of our programmes follows clear educational aims that are tailored to each programme. These are all outlined in the programme specifications which include further details such as the learning outcomes:

Modules

Modules listed are indicative, reflecting the information available at the time of publication. Modules are subject to teaching availability, student demand, and/or class size caps.

The University operates a credit framework for all taught courses based on a 15-credit tariff, meaning all modules are comprised of multiples of 15 credits.

Please note that modules are listed by the academic calendar and are reflective of a September start date. For students that start a programme in February, please note that the modules listed as semester two will take place in the spring term and modules listed as semester one will take place in the autumn term.

Course options

Year 1

Semester 1

Compulsory

SECURE SYSTEMS AND APPLICATIONS

More info Close

The module covers concepts and technologies for building secure and usable systems. The different lectures of the module focus on access control mechanisms, software and operating systems security, malware, threats and countermeasures for Web applications and databases, web and user authentication protocols, security of cyber-physical systems, human-centred security aspects such as social engineering and usability, security economics, privacy protection and trusted computing technologies.

View full module details

CRYPTOGRAPHY

More info Close

The module introduces general cryptographic concepts, challenges and goals and then focuses on foundational cryptographic primitives and algorithms in the fields of symmetric (a.k.a. private-key) and asymmetric (a.k.a. public-key) cryptography. The module will introduce mathematical foundations that are essential for the functionality and security of cryptographic algorithms and then focus on the security definitions and constructions of concrete algorithms for authentication, confidentiality and integrity. In labs students will develop and test their understanding of the material and learn how to implement and use existing algorithms from symmetric and asymmetric cryptography.

View full module details
Optional

ARCHITECTURAL THINKING FOR SECURITY

More info Close

Integrating security components into an information system to identify, protect, detect, respond and recover from an increasingly diverse set of threats has become more complex with new computing concepts such as cloud infrastructure, cloud native applications and edge computing. Organisations need a systematic approach to defining security for information systems that integrate processes, people and technology. The Architectural Thinking for Security module is designed to teach concepts and practice techniques that Security Architects can apply to delivering consistent and effective security solutions. The architectural thinking process can be applied either acting as an adviser to a project or a primary security solution architect. The course will introduce an architectural thinking process that a Security Architect would use to protect the data at the centre of a business. As part of this process the security architect needs to think about the integration of security controls to protect the confidentiality, integrity and availability of business data. This module provides insights into both the theory and the practical aspects of this process allowing students to critically evaluate the cyber security posture of an organisation and define a solution that can be described to key decision makers within an organisation.

View full module details

PRIVACY ENHANCING TECHNOLOGIES

More info Close

This module introduces general concepts of privacy enhancing technologies and aligns with key concepts recommended by the CyBoK. It will motivate the need for privacy in the modern world and touch on legal considerations, introduce concepts of transparency, control and confidentiality for privacy, and look at privacy preserving and democratic values. This module will also explore how these are realised in a range of applications.

View full module details

DIGITAL FORENSICS

More info Close

The module teaches digital forensics models and techniques used by analysts and law enforcement officers in practice. It also teaches the theory and application of real-world digital forensics tools and puts an emphasis on data recovery and the analysis of multimedia artifacts. Relationships and links between multimedia security, digital forensics and broader cyber security topics are also covered.

View full module details

Semester 2

Compulsory

NETWORK SECURITY

More info Close

The module introduces general information and network security principles, challenges and goals and then focuses on main security mechanisms and protocols for protecting network communication across different layers of the Internet protocol stack. This will include discussion on various attacks on the networks, penetration testing tools and possible countermeasures to ensure protection of authentication, confidentiality and end-to-end security of communications. In labs students will be able to practice experience with various network security protocols and tools.

View full module details

CYBER SECURITY MANAGEMENT AND GOVERNANCE

More info Close

Cyber security is one of the major challenges for computer and information systems. Many users have lost data due to viruses, both on home and business computers. Most of us have seen a range of email messages attempting different kinds of fraud. Vulnerabilities are everywhere. Some are obvious or well-known; others are obscure and harder to spot. Security is not limited to secrecy and confidentiality, but also involves problems like integrity, availability, and effectiveness of information. Moreover, security issues can potentially affect all of us, from innocent home users to companies and even governments. Cyber security is not just a technical problem but needs to be embedded throughout an organisation to be effective. As such good security solutions build on a complete understanding of the values at stake, and the supporting business processes and requirements. This includes people as well as information systems and physical resources. Consequently, raising security awareness and embedding security within roles and policies is as important, if not more, as secure software. In short, secure solutions can only be implemented with both key technical skills and a solid understanding of cultures and people skills. The module looks broadly at the implications of regulations on the cyber crime landscape. It also brings together the issues of cyber from a high-level perspective. It will also equip students with an awareness of what is very current out there in terms of leading-edge applications of cyber security. The module uniquely accesses leading international speakers in their field, draws on the significant expertise of leading industrialists and through shaping the module into distinct learning blocks we are also able to ensure that our students will be directed to key industry reports, regulations and best practice guidance that shapes current industry thinking in cyber security for business and government.

View full module details
Optional

CLOUD SECURITY

More info Close

This module teaches cloud computing concepts and the security of the cloud platform to enable students to understand how to secure workloads on cloud. The topics including basic concepts and the core security services needed to secure workloads and the processing of sensitive data. To re-enforce learning, the module will require students to work in teams to configure the cloud platform using infrastructure automation.

View full module details

CYBERCRIME AND CYBERSECURITY

More info Close

The study of cybercrime and cybersecurity not only represents one of the key emerging areas of research within contemporary criminology but is also a crucial problem of national policy and crime control. Recent (2016) data from the Crime Survey for England and Wales suggest that cybercrime may now be the most prevalent form of criminality in the UK and repeated breaches to key infrastructures across most jurisdictions have emphasized why it is has also become one of the main threats to international peace and security.  This module will introduce students to the key themes within the study of cybercrime and cybersecurity – including, offence types and their prevalence; typical victims and perpetrators; policing and control measures; varieties of cybersecurity responses and the ‘human’ problem in making these resilient. 

View full module details

SYSTEMS VERIFICATION

More info Close

The course is an introduction in formal methods for system specification and verification. It will focus on logic-based formalisms and techniques, and specifically on model checking. The main logics taught will be temporal logics, which are mainstream  in verification, especially analysis of hardware systems. Other logics and verification techniques (such as theorem proving) will be included to a smaller extended. Model checkers will be used in the labs, on different system-verification problems. Elements of building model checking tools will be presented and explored. Some elements of advanced verification techniques (e.g., abstraction) will be mentioned.

View full module details

ETHICAL HACKING AND SOFTWARE SECURITY

More info Close

This module introduces students to the techniques and tools to discover known vulnerabilities in systems and applications, and use appropriate techniques to carry out attacks. A practical project-based assessment allows students to demonstrate their ability to successfully exploit vulnerable systems to exfiltrate data and circumvent access controls. The module will introduce students to the legal and ethical considerations of ethical hacking, as well as the processes by which vulnerabilities are reported, classified, documented, and mitigated by security practitioners.

View full module details

Across academic years

Compulsory

MSC CYBER SECURITY DISSERTATION

More info Close

The dissertation consists of a substantial written report. This report is based on a major piece of work that involves applying material encountered in the taught component of the degree, and extending that knowledge with the student's contribution, under the guidance of a supervisor. The dissertation usually involves a substantial literature survey on a specific topic, followed by the identification of a problem to tackle, and thereafter the development of a technical solution, and experimental or theoretical evaluation of the achievement.

View full module details

Module selection for Year 1 (full-time) - FHEQ Level 7

Students must choose 2 optional modules in semester 1 and 2 optional module in semester 2. Over the two semesters at most two COM3xxx (level 6) modules can be chosen.

General course information

Contact hours

Contact hours can vary across our modules. Full details of the contact hours for each module are available from the University of Surrey's module catalogue. See the modules section for more information.

Timetable

New students will receive their personalised timetable during Welcome Week. In later semesters, at least one week before the start of the semester.

Scheduled teaching can take place on any day of the week (Monday – Friday), with part-time classes normally scheduled for one or two days. Wednesday afternoons tend to be for sports and cultural activities.

View our code of practice for the scheduling of teaching and assessment (PDF) for more information.

Location

This course is based at Stag Hill campus. Stag Hill is the University's main campus and where the majority of our courses are taught. 

Career opportunities

Open Close

We offer careers information, advice and guidance to all students whilst studying with us, which is extended to our alumni for three years after leaving the University.

Our MSC in Cyber Security leads to a huge range of career opportunities across the cyber security and IT sectors. Recent graduates have secured jobs at:

  • Bosch
  • Ernst and Young
  • Hewlett Packard Enterprise
  • IBM UK
  • RGA Consulting.

Our facilities, expertise, research and employability outcomes place Surrey among the best universities in the UK for a cyber security masters.

Hear from our students

Open Close

Entry requirements

Open Close

UK qualifications

A minimum of a 2:2 UK honours degree in either computer science, electrical or electronic engineering, mathematics, physics, related disciplines with demonstrable exposure to programming and mathematics, or other alternative subjects related to data analysis, data science or informatics, or a recognised equivalent international qualification.

We'll also consider relevant work experience if you don't meet these requirements.

Country-specific qualifications

International students in the United Kingdom

Loading...

English language requirements

IELTS Academic: 6.5 overall with 6.0 in writing and 5.5 in each other element.

These are the English language qualifications and levels that we can accept.

If you do not currently meet the level required for your programme, we offer intensive pre-sessional English language courses, designed to take you to the level of English ability and skill required for your studies here.


Credit Transfer and Recognition of Prior Learning

We recognise that many students enter their course with valuable knowledge and skills developed through a range of ways.

If this applies to you, the recognition of prior learning process may mean you can join a course without the formal entry requirements, or at a point appropriate to your previous learning and experience.

There are restrictions on some courses, and fees may be payable for certain claims. Please contact the Admissions team with any queries.

Placements

Open Close

Placements

The two-year with placement pathway offers you the opportunity to apply your learning in a professional setting through an optional placement year.

After a year of full-time study at Surrey, you can undertake a placement of up to 12 months. You'll be responsible for securing your own placement, but we'll support you throughout the process with employability workshops, individual coaching, and practical guidance to help you prepare for applications and interviews.

We work closely with potential employers to help facilitate your successful placement. In addition to this, our award-winning Employability and Careers team are always ready to help, and they can provide you with a range of specialist resources and advice.

Our Employability and Careers team provides a range of specialist resources and advice to help you explore placement opportunities and develop the skills and confidence needed to make the most of them.

Fees and funding

Open Close

Fees per year

Explore UKCISA’s website for more information if you are unsure whether you are a UK or overseas student. View the list of fees for all postgraduate courses.

Fee options

UK
£12,900
Overseas
£25,900
UK
£13,400
Overseas
£26,900
UK
£14,700
Overseas
£28,200
UK
£6,700
Overseas
£13,500
  • If you are on the three-year part-time masters programme, the annual fee is payable in Year 1 and Year 2 of the programme
  • The fee for the placement pathway will be charged in Year 1 of the programme and a fee of £1,850 is payable in Year 2 of the programme
  • Once enrolled, students who decide to change from the two-year with placement course to the one-year full time course will not be entitled to a refund of the difference in course fees between the one-year full time course and the first year of the two-year with placement course
  • Fees for part-time routes are applicable in each year of the course
  • These fees apply to the academic year 2027-28 only. Fees are reviewed annually, and tuition fees may increase for courses running over more than one year.

Read our tuition fees guidance to find out more about payment schedules and how to pay.

Additional costs

Costs may be incurred associated with the purchase of writing paper and associated stationery.

Find out more about additional costs that may be incurred during your time at Surrey.

Funding

You may be able to borrow money to help pay your tuition fees and support you with your living costs. Find out more about postgraduate student finance.

Register your interest

Open Close

Apply

Open Close

Apply online

To apply online first select the course you'd like to apply for then log in.

  1. Select your course

    Choose the course option you wish to apply for.

  2. Sign in

    Create an account and sign into our application portal.

Apply options

UK applications

Cyber Security MSc

Full-time, 12 months, February 2027

UK status

UK applications:
open
Closing date:
Saturday 23 January 2027
Select

Please note that we may have to close applications before the stated deadline if we receive a high volume of suitable applications. We advise you to submit your application as soon as it is ready.

Apply
Overseas applications

Cyber Security MSc

Full-time, 12 months, February 2027

UK status

Overseas applications:
open
Closing date:
Friday 11 December 2026
Select

Please note that we may have to close applications before the stated deadline if we receive a high volume of suitable applications. We advise you to submit your application as soon as it is ready.

Apply
UK applications

Cyber Security MSc

Full-time, 12 months, September 2027

UK status

UK applications:
open
Closing date:
Tuesday 31 August 2027
Select

Please note that we may have to close applications before the stated deadline if we receive a high volume of suitable applications. We advise you to submit your application as soon as it is ready.

Apply
Overseas applications

Cyber Security MSc

Full-time, 12 months, September 2027

UK status

Overseas applications:
open
Closing date:
Friday 23 July 2027
Select

Please note that we may have to close applications before the stated deadline if we receive a high volume of suitable applications. We advise you to submit your application as soon as it is ready.

Apply
UK applications

Cyber Security MSc

Full-time (with placement), 24 months, September 2027

UK status

UK applications:
open
Closing date:
Tuesday 31 August 2027
Select

Please note that we may have to close applications before the stated deadline if we receive a high volume of suitable applications. We advise you to submit your application as soon as it is ready.

Apply
Overseas applications

Cyber Security MSc

Full-time (with placement), 24 months, September 2027

UK status

Overseas applications:
open
Closing date:
Friday 23 July 2027
Select

Please note that we may have to close applications before the stated deadline if we receive a high volume of suitable applications. We advise you to submit your application as soon as it is ready.

Apply
UK applications

Cyber Security MSc

Part-time, 24 months, September 2027

UK status

UK applications:
open
Closing date:
Tuesday 31 August 2027
Select

Please note that we may have to close applications before the stated deadline if we receive a high volume of suitable applications. We advise you to submit your application as soon as it is ready.

Apply
Overseas applications

Cyber Security MSc

Part-time, 24 months, September 2027

UK status

Overseas applications:
open
Closing date:
Friday 23 July 2027
Select

Please note that we may have to close applications before the stated deadline if we receive a high volume of suitable applications. We advise you to submit your application as soon as it is ready.

Apply

Admissions information

Once you apply, you can expect to hear back from us within 14 days. This might be with a decision on your application or with a request for further information.

Our code of practice for postgraduate taught admissions explains how the Admissions team considers applications and admits students. Read our postgraduate applicant guidance for more information on applying.

Terms and conditions

When you accept an offer to study at the University of Surrey, you will be agreeing to follow our policies and procedures, student regulations, and terms and conditions.

We provide these terms and conditions at the offer stage. You will be asked to accept these when you accept the offer made to you. You will be provided with these terms and conditions again at registration by way of reminder.

Disclaimer

This online prospectus has been published in advance of the academic year to which it applies.

Whilst we have done everything possible to ensure this information is accurate; some changes may happen between publishing and the start of the course.