Master of Science in Enterprise and IT Security (ENITS)

Overview This three-semester Master of Science programme teaches both the technical and organisational sides of enterprise and IT security. You will gain hands-on experience in labs and team projects while also developing scientific and academic skills. Small-group discussions and lab work let you apply and evaluate current security problems directly. The course places equal emphasis on protecting IT systems and understanding the organisational and legal contexts in which security solutions must operate. Graduates are highly sought after, and demand for experts in this field is expected to far outstrip supply in the coming years.

Program focus

• Technical IT security: Study software and mobile security, applied cryptanalysis, data mining, and security for ubiquitous systems. You will learn contemporary cryptanalytic methods and selected anonymisation techniques, assess the vulnerabilities of modern mobile devices and system architectures, and understand attacker perspectives (e.g., pentesting and cryptographic breaking) that inform secure system design. An advanced practical project gives you the chance to work in teams on research-based, professional-level problems.
• Organisational enterprise security: Address national and international risk and security topics, compliance and business ethics, and quantitative methods for enterprise, risk and security management. The programme includes work with analysis software, optimisation and simulation models to support decision-making.
• Ethics and law: Develop the ability to identify, analyse and debate ethical issues related to information technology, make informed decisions and defend positions. You will also learn to interpret relevant laws and regulations and evaluate their implications for organisations, including legal mechanisms for reviewing IT security.

Key facts / requirements

• Degree awarded: Master of Science
• Duration: 3 semesters (full-time)
• Language of instruction: English
• Field: Computer Science with specialisation in enterprise and IT security
• Teaching approach: combination of practical lab work, team-based advanced project, and academic coursework covering technical, organisational, ethical and legal aspects

This program trains students in a practice-driven, interdisciplinary way to address enterprise security from technical, organisational and legal angles, with particular focus on IT security. You will gain hands-on skills and a cross-disciplinary understanding that enable you to evaluate and implement security measures across an organisation, while also understanding the legal and ethical frameworks that shape those measures.

The curriculum is structured across three semesters. In the first semester students take core, assessed modules (lectures, seminars and exams) such as Applied Cryptanalysis, Data Mining, Ethics, and a choice between EU Law or Anonymity and Surveillance. The second semester centers on collaborative work and applied courses: a group project plus classes like Data Analysis for Risk and Security Management, Global Risk and Security Management, and Mobile Security. The final semester is devoted to preparing and writing the Master’s thesis. Throughout the degree, theoretical foundations and practical applications are taught in parallel and explicitly linked to one another.

By completing the program you should be able to apply cryptographic and data-analysis techniques to security problems, assess organisational and global risk, design protections for mobile and enterprise systems, and navigate legal and ethical issues (for example EU law or questions around anonymity and surveillance). Team-based project work builds collaborative and project-management skills, while the Master’s thesis demonstrates independent research and the ability to integrate theory with practical solutions.

Program requirements (example modules and assessments)

• Semester 1 (required, lectures/seminars/exams): Applied Cryptanalysis; Data Mining; Ethics; EU Law OR Anonymity and Surveillance
• Semester 2: Group project plus courses such as Data Analysis for Risk and Security Management; Global Risk and Security Management; Mobile Security
• Semester 3: Preparation and submission of the Master’s thesis
• Teaching approach: continuous integration of theoretical and practical content throughout the program

Graduates are prepared for specialist roles in IT security and enterprise risk management across private industry and public authorities. Typical positions include IT security specialist, penetration tester/ethical hacker, security analyst, risk and compliance manager, and consultant for secure system design. Given the programme's combination of technical, organisational and legal training, alumni are competitive for roles that require both hands-on security expertise and an understanding of regulatory/compliance issues. Demand for such experts is described as outstripping supply, offering strong employability and opportunities in research, industry, and government security teams.