Loading…
Loading…
MSc Cybersecurity & Risk Governance — one admission, a shared core, two named specialisations.
Online or on campus
A double-path master's for security professionals who must both defend systems and answer to a board. Shared core in security fundamentals, then pathways in Technical Security (architecture, detection, response) and Risk Governance (frameworks, audit, regulation), closing with a capstone that produces a defensible security programme. No offensive-security coursework. The Haverton University teaches this award to one academic standard whether you study on campus in London or on the tuition-free online pathway. Assessment is identity-checked; the marking scheme does not change with your postcode. This is an academic Master's award; where a field has a licensing or registration route, that remains a matter for your professional body or regulator. You will work through the material as a practitioner-researcher: applied methods, real or anonymised cases, and a supervised capstone or dissertation as the final component. Faculty mark whether you noticed the constraints a slide deck usually hides. MSc Cybersecurity & Risk Governance (Dual Track) is taught as one award, not a list of unrelated modules. The published length is 24 months, and the credit total is 42. Students move from Security Foundations & Threat Landscape through Security Foundations & Threat Landscape; Identity, Cryptography & Access Control; Enterprise Risk & Control Frameworks; Research Methods & Identity-Checked Assessment; Defensive Architecture & Network Security; Detection Engineering & Security Operations, and finish on Dual-Track Capstone: Defensible Security Programme. Each course has a question, a method, and a submission. In this field, students map one named system, write a threat model, and specify the controls that would stop the most likely path. Reading is control catalogues, incident write-ups, and a short technical standard. The artefact a marker expects is a defensive design with a test plan and a statement of residual risk. The award is built so that a graduate can do the following in practice: Design proportionate security controls for a real organisation Run detection and incident response without heroics or blame Translate technical risk into board-level decisions and reporting Teaching assumes the student can read a source, attempt a problem before the seminar, and revise after feedback. Attendance at live seminars is part of the design. The capstone or final course must use the methods of the earlier courses; a project that ignores them does not pass. The pages for each course name the topics that are examined. Those topics are the syllabus. A brochure line is not a substitute for them.
The programme carries 42 credits across four assessed modules. Delivery is tuition-free (£0) on the online pathway. Transcripts use letter grades and a GPA scale consistent with Haverton University awards. No professional-body logo is used in marketing to imply endorsement.
Study online
Online tuition is free. Online examinations and certificates are 100% free and sponsored.
On-campus study
Prefer to learn at our London campus? Campus tuition is published on each programme page. All examinations are 100% free of charge.
| Code | Course | Credits · hours |
|---|---|---|
| CRG713 | Dual-Track Capstone: Defensible Security Programme Dual-Track Capstone: Defensible Security Programme (CRG713) is a course on MSc Cybersecurity & Risk Governance (Dual Track). It carries 15 credits and 150 notional learning hours, at 10 hours per credit. The course is taught at master's level. Students compare a weaker method, judge the evidence, and state what the result does not show. The chapters are the syllabus. Each chapter is a class of work this course assesses. Preparation is the reading, dataset, or case for that chapter. Seminar time is spent on the decision, the calculation, or the draft. The student revises after feedback. A pass requires the method named in the chapters, evidence a marker can check, and a stated limit on what the result does not show. Haverton University teaches this course on the published route for this degree.
| 15 · 150 h |
| Code | Course | Credits · hours |
|---|---|---|
| CRG701 | Security Foundations & Threat Landscape Security Foundations & Threat Landscape (CRG701) is a course on MSc Cybersecurity & Risk Governance (Dual Track). It carries 15 credits and 150 notional learning hours, at 10 hours per credit. The course is taught at master's level. Students compare a weaker method, judge the evidence, and state what the result does not show. The chapters are the syllabus. Each chapter is a class of work this course assesses. Preparation is the reading, dataset, or case for that chapter. Seminar time is spent on the decision, the calculation, or the draft. The student revises after feedback. A pass requires the method named in the chapters, evidence a marker can check, and a stated limit on what the result does not show. Haverton University teaches this course on the published route for this degree.
| 15 · 150 h |
| CRG702 | Identity, Cryptography & Access Control Identity, Cryptography & Access Control (CRG702) is a course on MSc Cybersecurity & Risk Governance (Dual Track). It carries 15 credits and 150 notional learning hours, at 10 hours per credit. The course is taught at master's level. Students compare a weaker method, judge the evidence, and state what the result does not show. The chapters are the syllabus. Each chapter is a class of work this course assesses. Preparation is the reading, dataset, or case for that chapter. Seminar time is spent on the decision, the calculation, or the draft. The student revises after feedback. A pass requires the method named in the chapters, evidence a marker can check, and a stated limit on what the result does not show. Haverton University teaches this course on the published route for this degree.
| 15 · 150 h |
| CRG703 | Enterprise Risk & Control Frameworks Enterprise Risk & Control Frameworks (CRG703) is a course on MSc Cybersecurity & Risk Governance (Dual Track). It carries 15 credits and 150 notional learning hours, at 10 hours per credit. The course is taught at master's level. Students compare a weaker method, judge the evidence, and state what the result does not show. The chapters are the syllabus. Each chapter is a class of work this course assesses. Preparation is the reading, dataset, or case for that chapter. Seminar time is spent on the decision, the calculation, or the draft. The student revises after feedback. A pass requires the method named in the chapters, evidence a marker can check, and a stated limit on what the result does not show. Haverton University teaches this course on the published route for this degree.
| 15 · 150 h |
| CRG704 | Research Methods & Identity-Checked Assessment Research Methods & Identity-Checked Assessment (CRG704) is a course on MSc Cybersecurity & Risk Governance (Dual Track). It carries 15 credits and 150 notional learning hours, at 10 hours per credit. The course is taught at master's level. Students compare a weaker method, judge the evidence, and state what the result does not show. The chapters are the syllabus. Each chapter is a class of work this course assesses. Preparation is the reading, dataset, or case for that chapter. Seminar time is spent on the decision, the calculation, or the draft. The student revises after feedback. A pass requires the method named in the chapters, evidence a marker can check, and a stated limit on what the result does not show. Haverton University teaches this course on the published route for this degree.
| 15 · 150 h |
| Code | Course | Credits · hours |
|---|---|---|
| CRG705 | Defensive Architecture & Network Security Defensive Architecture & Network Security (CRG705) is a course on MSc Cybersecurity & Risk Governance (Dual Track). It carries 15 credits and 150 notional learning hours, at 10 hours per credit. The course is taught at master's level. Students compare a weaker method, judge the evidence, and state what the result does not show. The chapters are the syllabus. Each chapter is a class of work this course assesses. Preparation is the reading, dataset, or case for that chapter. Seminar time is spent on the decision, the calculation, or the draft. The student revises after feedback. A pass requires the method named in the chapters, evidence a marker can check, and a stated limit on what the result does not show. Haverton University teaches this course on the published route for this degree.
| 15 · 150 h |
| CRG706 | Detection Engineering & Security Operations Detection Engineering & Security Operations (CRG706) is a course on MSc Cybersecurity & Risk Governance (Dual Track). It carries 15 credits and 150 notional learning hours, at 10 hours per credit. The course is taught at master's level. Students compare a weaker method, judge the evidence, and state what the result does not show. The chapters are the syllabus. Each chapter is a class of work this course assesses. Preparation is the reading, dataset, or case for that chapter. Seminar time is spent on the decision, the calculation, or the draft. The student revises after feedback. A pass requires the method named in the chapters, evidence a marker can check, and a stated limit on what the result does not show. Haverton University teaches this course on the published route for this degree.
| 15 · 150 h |
| CRG707 | Incident Response & Digital Forensics Incident Response & Digital Forensics (CRG707) is a course on MSc Cybersecurity & Risk Governance (Dual Track). It carries 15 credits and 150 notional learning hours, at 10 hours per credit. The course is taught at master's level. Students compare a weaker method, judge the evidence, and state what the result does not show. The chapters are the syllabus. Each chapter is a class of work this course assesses. Preparation is the reading, dataset, or case for that chapter. Seminar time is spent on the decision, the calculation, or the draft. The student revises after feedback. A pass requires the method named in the chapters, evidence a marker can check, and a stated limit on what the result does not show. Haverton University teaches this course on the published route for this degree.
| 15 · 150 h |
| CRG708 | Cloud & Application Security Cloud & Application Security (CRG708) is a course on MSc Cybersecurity & Risk Governance (Dual Track). It carries 15 credits and 150 notional learning hours, at 10 hours per credit. The course is taught at master's level. Students compare a weaker method, judge the evidence, and state what the result does not show. The chapters are the syllabus. Each chapter is a class of work this course assesses. Preparation is the reading, dataset, or case for that chapter. Seminar time is spent on the decision, the calculation, or the draft. The student revises after feedback. A pass requires the method named in the chapters, evidence a marker can check, and a stated limit on what the result does not show. Haverton University teaches this course on the published route for this degree.
| 15 · 150 h |
| Code | Course | Credits · hours |
|---|---|---|
| CRG709 | Security Governance, Policy & Board Reporting Security Governance, Policy & Board Reporting (CRG709) is a course on MSc Cybersecurity & Risk Governance (Dual Track). It carries 15 credits and 150 notional learning hours, at 10 hours per credit. The course is taught at master's level. Students compare a weaker method, judge the evidence, and state what the result does not show. The chapters are the syllabus. Each chapter is a class of work this course assesses. Preparation is the reading, dataset, or case for that chapter. Seminar time is spent on the decision, the calculation, or the draft. The student revises after feedback. A pass requires the method named in the chapters, evidence a marker can check, and a stated limit on what the result does not show. Haverton University teaches this course on the published route for this degree.
| 15 · 150 h |
| CRG710 | Audit, Assurance & Third-Party Risk Audit, Assurance & Third-Party Risk (CRG710) is a course on MSc Cybersecurity & Risk Governance (Dual Track). It carries 15 credits and 150 notional learning hours, at 10 hours per credit. The course is taught at master's level. Students compare a weaker method, judge the evidence, and state what the result does not show. The chapters are the syllabus. Each chapter is a class of work this course assesses. Preparation is the reading, dataset, or case for that chapter. Seminar time is spent on the decision, the calculation, or the draft. The student revises after feedback. A pass requires the method named in the chapters, evidence a marker can check, and a stated limit on what the result does not show. Haverton University teaches this course on the published route for this degree.
| 15 · 150 h |
| CRG711 | Regulation, Privacy & Breach Notification Regulation, Privacy & Breach Notification (CRG711) is a course on MSc Cybersecurity & Risk Governance (Dual Track). It carries 15 credits and 150 notional learning hours, at 10 hours per credit. The course is taught at master's level. Students compare a weaker method, judge the evidence, and state what the result does not show. The chapters are the syllabus. Each chapter is a class of work this course assesses. Preparation is the reading, dataset, or case for that chapter. Seminar time is spent on the decision, the calculation, or the draft. The student revises after feedback. A pass requires the method named in the chapters, evidence a marker can check, and a stated limit on what the result does not show. Haverton University teaches this course on the published route for this degree.
| 15 · 150 h |
Modules are assessed through a published mix of coursework, applied projects, and examinations. Exam windows are announced in advance so students in other time zones are not forced into overnight sittings. Alternative arrangements are available where documented.
The published duration is 24 months. Teaching language: English (dual pathway: London campus or tuition-free online; one academic standard). Actual time-to-complete depends on mode and any recognised prior learning.
You may study this award fully online from your country, or — where published — on campus at Haverton. Online study does not require a student visa. Campus study may.
Degree tuition for this award is published as £0 / tuition-free on the online pathway. All online degree examinations and certificates are 100% free and sponsored — the only cost for online study is the application fee. Campus tuition and campus examinations are charged separately. Check the Fees page for details.
Requirements are grouped on this page (academic, English, documents). Equivalent qualifications are considered. English may be waived after prior English-medium study.
Assessment is typically a mix of coursework, projects, and examinations. Doctoral awards include a thesis or dissertation and an oral examination. Details sit in the programme specification and module outlines.
Recognition of the award for local employment, professional licence, or ministry attestation is decided by your employer or regulator. Haverton University publishes verification pages for certificates. We do not claim automatic equivalence in every country.
Start an application on this website. Progress is saved from the first step. Admissions: admissions@haverton.org.
Recognised & Accredited
