Cyber Security Syllabus

The exact syllabus differs by qualification. The following areas represent a strong networking curriculum.

Computer fundamentals

Students learn computer components, number systems, software types, storage, peripherals and basic troubleshooting. Diploma programmes may include assembly, maintenance and operating-system installation.

Mathematics and discrete structures

Engineering programmes include calculus, matrices, probability, statistics and discrete Mathematics. Networking uses binary arithmetic, logic, graphs, probability, queueing and performance analysis.

Programming

C, Python, Java or another language may be taught. Programming builds logical ability and later supports socket applications, monitoring scripts, log analysis and automation.

Python is particularly useful for interacting with APIs, processing configuration data and automating repeated tasks. Students should first learn clean programming before using networking libraries.

Data structures and algorithms

Networks depend on efficient tables, queues, graphs and search methods. Routing can be understood using graph concepts, while packet processing uses data structures and algorithms under performance constraints.

Digital electronics and computer organisation

These subjects explain gates, processors, memory, buses and input-output. Hardware knowledge helps students understand network interfaces, appliances, servers and embedded network devices.

Operating systems

Operating Systems covers processes, memory, file systems, permissions, input-output and concurrency. Linux laboratory work is especially valuable because many servers, network tools and appliances use Linux-based environments.

Students should practise users and groups, services, logs, files, permissions, shell commands and basic scripting. System changes must be documented and tested.

Data communication

Data Communication introduces signals, bandwidth, transmission media, encoding, multiplexing, errors and flow control. It connects physical transmission with higher network layers.

Wired media may include copper and optical fibre. Wireless transmission introduces radio propagation, interference and shared spectrum. Students learn that real link performance depends on more than the advertised speed.

Network models

Layered models divide communication into manageable functions. Students study the OSI reference model and the practical internet protocol suite. They learn encapsulation and how a user message becomes transport data, an IP packet, a link-layer frame and transmitted bits.

The models are troubleshooting tools. If a device has physical connectivity but cannot reach another network, the engineer can examine addressing and routing rather than replacing the cable randomly.

Ethernet and switching

Ethernet covers frames, addresses, switching behaviour and link operation. Switching subjects include virtual local area networks, trunking, loop prevention, link aggregation and redundancy.

Segmentation improves organisation, performance and security. Students should understand why a VLAN exists and how traffic crosses network boundaries rather than memorising configuration lines.

IP addressing and subnetting

Students learn IPv4 addresses, masks, subnets, private ranges and route selection. Subnetting allows an organisation to divide address space according to size and security requirements.

IPv6 introduces a much larger address space and different operational concepts. It should be taught as a current protocol rather than an optional distant topic.

Routing

Routing determines how packets reach remote networks. Students study static routes and dynamic routing concepts. Advanced work may introduce interior and exterior routing protocols, metrics, convergence, summarisation and policy.

A routing table is the result of configuration and learned information. Troubleshooting requires checking the source, destination, return path and filtering in both directions.

Transport and application protocols

TCP provides reliable ordered delivery, while UDP offers a simpler service suitable for applications with different requirements. Students examine ports, sessions, flow control and congestion.

Application protocols include DNS, DHCP, HTTP, email, file transfer, remote administration and time services. Secure versions and authentication should be emphasised.

Wireless networking

Wireless subjects cover radio basics, Wi-Fi standards, channels, access points, roaming, authentication and design. Laboratory exercises can include site observation, channel planning and secure configuration.

Coverage and capacity are different. A device may detect a strong signal while the network is overloaded or affected by interference. Good wireless design measures the environment and user demand.

Network security

Security topics include threat models, segmentation, firewalls, access control, virtual private networks, secure management, cryptography basics, monitoring and incident handling.

Students should follow least privilege, change control and authorised testing. An open laboratory exercise does not give permission to scan public or campus systems.

Network services

Server and network administration may cover directory services, name resolution, address assignment, web services, file services, email concepts, authentication, logging and backups.

A service is not complete merely because it starts. It must be secured, monitored, documented, updated and recoverable.

Network management

Network management involves inventory, configuration, performance, faults, logs, alerts and capacity. Students learn to establish normal behaviour and identify deviations.

Important measurements include latency, packet loss, throughput, utilisation, errors and availability. A dashboard without meaningful thresholds can generate noise rather than useful information.

Virtualisation

Virtualisation allows multiple logical systems to share physical resources. Networking students learn virtual switches, virtual interfaces, overlays and the relationship between virtual machines or containers and physical connectivity.

Cloud networking

Cloud curricula may include virtual private networks, subnets, route tables, internet and private gateways, security controls, load balancers, name services and hybrid connectivity.

Cloud consoles make configuration convenient, but the same fundamentals still apply. Poor address planning, excessive permissions or missing monitoring can cause serious failures.

Software-defined networking

Software-defined networking separates control decisions from packet forwarding to make networks programmable. Students may learn controller concepts, APIs, policy and virtual network functions.

The subject should connect software design with operational reliability. Central automation can distribute a correct change quickly, but it can also distribute an error quickly.

Network automation

Automation topics include Python, structured data, templates, APIs, version control, configuration validation and orchestration. Students should build small safe workflows before attempting large changes.

A sound automation process includes source control, peer review, testing, limited rollout, observability and rollback.

Network troubleshooting

Troubleshooting is a core subject rather than a collection of emergency commands. A disciplined method includes defining the symptom, establishing scope, gathering evidence, forming a hypothesis, testing one change and documenting the result.

Common tools examine interface state, addressing, routes, name resolution, packet paths, ports, logs and captured traffic. Students must protect sensitive data when collecting packets.

Network performance and quality of service

Performance study covers bandwidth, throughput, latency, jitter, packet loss, congestion and queueing. Quality-of-service methods prioritise traffic according to business requirements.

An engineer should measure before changing. A slow application may be caused by a server, database, name service or client rather than the network.

Optical and wide-area networking

Students may study fibre properties, service-provider links, wide-area technologies and enterprise connectivity. Advanced programmes can include multiprotocol label switching, carrier networks and traffic engineering.

IoT networking

IoT networking connects sensors, gateways and services using wired, wireless or low-power protocols. Design must consider power, range, interference, security, updates and device identity.

Cryptography and key management

Cryptography subjects introduce symmetric and asymmetric encryption, hashes, message authentication, digital signatures, certificates and key exchange. Students should understand the security objective, assumptions and operational challenge of protecting keys. Creating a personal encryption method without expert review is unsafe.

Secure software development

Secure development covers requirements, threat modelling, input validation, authentication, authorisation, session handling, dependency management, code review and security testing. Security should be integrated into design and delivery instead of added just before release.

Identity and access management

IAM subjects examine digital identity, multi-factor authentication, single sign-on, roles, privileges, federation and account lifecycle. Students learn least privilege and periodic access review. Identity systems are security-critical because compromised credentials are a common route into organisations.

Digital forensics

Digital forensics introduces evidence identification, acquisition, preservation, analysis and reporting. Work must follow legal authority and chain-of-custody procedures. Laboratory exercises use prepared datasets or authorised devices; students must not collect another person’s data without permission.

Security operations and incident response

Students learn log collection, alert triage, event correlation, incident classification, containment, eradication, recovery and post-incident learning. A good response plan defines roles, communication, evidence handling and escalation before a crisis occurs.

Governance, risk and compliance

GRC connects technology with policy, risk assessment, audits, third-party management, privacy and legal obligations. Students learn that compliance is evidence of meeting particular requirements, not proof that every security risk has been removed.

Cloud and application security

Cloud security covers shared responsibility, identity, configuration, logging, encryption and workload protection. Application security examines web, mobile and API risks. Practical work should remain inside a deliberately isolated or explicitly authorised environment.

Typical laboratory activities

Postgraduate syllabus

Advanced programmes may cover high-speed networks, wireless and mobile networks, network security, distributed systems, cloud computing, advanced routing, protocol engineering, network performance, software-defined networking, research methods and dissertation.

Project themes

• redundant multi-site network design;
• automated device inventory and configuration backup;
• secure campus segmentation plan;
• IPv6 migration laboratory;
• wireless coverage and interference analysis;
• network monitoring and alerting platform;
• cloud network with public and private application tiers;
• packet-flow visualisation;
• controlled network anomaly classification;
• disaster-recovery connectivity demonstration.

Projects should use isolated or authorised environments. Credentials and private packet data must never be published in a student portfolio.