Degree, Bootcamp or Certification? UK Routes into Cyber Security
There is no single right route into cyber security in the UK. A full-time degree suits school leavers who want a broad foundation, an apprenticeship suits people who want to earn while they learn, distance learning suits those who need to keep working, and bootcamps and certifications suit people who already have a degree or work experience and need focused, job-relevant skills quickly.
The best choice depends on three things: how much time you can commit, who pays, and what you already have on your CV. This guide compares each route side by side, with the figures checked against official sources as of November 2026.
The routes at a glance
The table below summarises the main options. Figures are for England unless stated; fee rules in Scotland, Wales and Northern Ireland are different.
| Route | Typical duration | Cost basis | Entry requirements | Best for |
|---|---|---|---|---|
| Full-time university degree | Usually 3 years full-time (4 in Scotland) | Tuition fee of up to £9,790 a year in 2026/27, covered by a Tuition Fee Loan if eligible | Set by each university for each course; check the course page | School leavers and anyone wanting a broad academic foundation |
| Degree apprenticeship (level 6) | Typically 48 months, plus assessment | No cost to you for training or assessment (funding band up to £24,000); you earn a wage | Set by the employer, likely to include three A levels including maths | People who want a degree without tuition debt and can secure an employer |
| Higher apprenticeship (level 4) | Typically 24 months, plus assessment | No cost to you for training or assessment (funding band up to £18,000); you earn a wage | Varies by employer; English and maths completed in line with the funding rules | School or college leavers and career changers who want hands-on work from day one |
| Distance or part-time degree | Depends on pace; the Open University’s BSc (Hons) Cyber Security takes 3 to 6 years | Fees set by the provider; part-time Tuition Fee Loan available if eligible | Varies; some courses have no formal entry requirements | People working full-time or with caring responsibilities |
| Bootcamp | A matter of weeks; Skills Bootcamps last up to 16 weeks | Government-funded Skills Bootcamps, or a fee paid to a private provider | Varies; most Skills Bootcamps need no previous subject knowledge, and you must be 19 or over | Career changers who need structured, practical skills fast |
| Professional certification | Varies by certificate | Exam and training fees set by the certification body and trainers | From none (entry level) to several years of work experience | Proving specific skills to employers, at any career stage |
University degrees, and how to check NCSC certification
A bachelor’s degree in cyber security, or computer science with a security pathway, gives you depth: networking, programming, cryptography, law and ethics, usually with a final-year project. It is a big commitment of time and money, but it keeps the most doors open, including postgraduate study and graduate schemes that ask for a degree.
Fees. For 2026/27, the maximum tuition fee for a standard full-time undergraduate course in England is £9,790 a year, at providers with a Teaching Excellence Framework award and an access and participation plan. The government has announced it will rise to £10,050 in 2027/28. Eligible students can take out a Tuition Fee Loan to cover the full fee.
How to check an “accredited” cyber security degree. The quality mark to look for is NCSC certification from the National Cyber Security Centre. The NCSC publishes the full list of certified degrees on its website, split into degree apprenticeships, bachelor’s, integrated master’s and master’s degrees, with each certification’s expiry date. The page is blunt: “If a degree doesn’t appear here, it does NOT have NCSC Certification.” Three practical checks:
- Full or provisional? Some bachelor’s and master’s degrees are only provisionally certified. Both are listed, so note which applies.
- Check the exact pathway. For some courses, certification is awarded to a specific pathway through the degree, not every module combination.
- Check the expiry date against the years you would be studying.
If you are searching for a cyber security degree in London or any other city, start from the NCSC list and then check each university’s own course page for the campus location, because the list does not show where courses are taught.
Degree and higher apprenticeships: earn while you learn
To start an apprenticeship in England you need to be 16 or over, living in England and not in full-time education. As an apprentice you are an employee earning a wage and holiday pay, and you get at least 20% of your normal working hours for training and study related to your role. Under the 2026/27 apprenticeship funding rules, neither the training provider nor the employer can ask you to contribute to the cost of training or assessment. The catch is that you must win the job first, so applying for an apprenticeship is a job search, not a university application.
Two cyber security standards approved for delivery in England are especially relevant:
- Cyber security technologist (2021), level 4 (ST1021). Typically 24 months, with options in Cyber Security Engineer, Cyber Risk Analyst and Cyber Defend & Respond. Skills England notes the standard is being revised, with the revised version replacing the current one for new starts from 25 March 2027.
- Cyber security technical professional (integrated degree), level 6 (ST0409). Typically 48 months, leading to a BSc (Hons) Cyber Security Technical Professional degree. Employers set the selection criteria, which are likely to include three A levels including maths, or other relevant qualifications or experience.
Be careful with older search results: the original level 4 Cyber security technologist standard (ST0124) has been retired, and its latest start date was 31 July 2021. Always check the reference number on the Skills England site before you apply. In Scotland, look for Graduate Apprenticeships: the NCSC lists some of these among its certified degree apprenticeships.
You can search for vacancies through the government’s Find an apprenticeship service or through UCAS.
Distance learning and part-time study
If you cannot stop working, a distance learning or part-time degree lets you study around your job. The Open University’s BSc (Hons) Cyber Security (R60) is one example: it is fully certified by the NCSC, lists no formal entry requirements (though you need some basic computing knowledge and good written English), and can be completed in as little as three years at a full-time pace or six years part-time, with a maximum of 16 years.
The OU quotes a total of £24,528 for the honours degree in England, based on 60 credits a year over six years, for modules starting before 31 July 2027. Fees typically rise each year, so check the current figure before you enrol.
Part-time students in England can apply for a Tuition Fee Loan of up to £7,335 for 2026/27, provided the course has a “course intensity” of 25% or more.
The trade-off is discipline. Studying alongside a full-time job for six years takes sustained motivation, so look carefully at the support and tutor contact each provider offers. Some campus universities also offer part-time study; ask admissions directly.
Bootcamps: short, intensive and practical
Bootcamps compress foundational skills into weeks rather than years. They work best for career changers who already have transferable experience (IT support, audit, compliance, operations) and need structured, hands-on training plus help presenting themselves to employers. A bootcamp will not give you the depth of a degree, and a reputable one will not promise you a job.
There are two broad types:
- Government-funded Skills Bootcamps in England last up to 16 weeks, are open to adults aged 19 or over, and come with a guaranteed job interview with an employer at the end. If your employer puts you on one, the national rules say it pays 10% of the cost (1 to 249 employees) or 30% (250 or more employees). Funding rules for individuals are set out by the area that runs the bootcamp: for example, the East Midlands Combined County Authority’s rules for 2026/27 say courses are fully funded for independent learners and the self-employed, and that individuals must not be charged. Check which cyber courses are offered where you live.
- Private bootcamps charge a fee and vary widely. Before paying, ask what is actually included: live instructor time, lab access and for how long, whether the course is independently accredited, the refund policy, and what career support means in practice.
Professional certifications
Certifications prove a specific, testable skill to employers. They are not a complete route on their own for most beginners, but they combine well with every other route: a graduate adding a cloud or security certificate, an apprentice working towards one through their employer, or a bootcamp graduate using one to show the knowledge stuck.
Entry requirements vary enormously. ISC2’s entry-level Certified in Cybersecurity (CC), for example, requires no work experience, while ISC2’s CISSP requires five years of work experience. So check prerequisites before you build a plan around a particular certificate.
How to choose your route
Work through these questions in order:
- Can you stop earning? If not, rule out full-time study and look at apprenticeships, part-time or distance degrees, bootcamps and certifications.
- Do you already have a degree or relevant work experience? If yes, a second degree is rarely necessary; a bootcamp, a master’s or targeted certifications will usually get you further, faster.
- Do you want to avoid tuition debt? An apprenticeship lets you earn a wage while you train, and you cannot be asked to pay for the training, though you must win the job first.
- Which area interests you? Technical roles (security operations, testing, engineering) reward hands-on labs; governance, risk and compliance roles reward knowledge of frameworks, law and business process. Pick a route that teaches the side you want.
- Is it independently checked? NCSC certification for degrees, an approved Skills England standard for apprenticeships, and recognised accreditation for short courses.
New to the vocabulary? Our beginner’s glossary of key cybersecurity terms is a useful first read before you compare course content.
Where LSCS fits
The London School of Cybersecurity runs short, practical courses rather than degrees. Our CyberForce bootcamp is a 4-week, instructor-led course for beginners, career switchers and early-career professionals, BCS Tech 10 accredited, with hands-on labs and career development sessions; contact us for dates. You can compare all our options on the courses page.
Frequently asked questions
How do I know if a cyber security degree is accredited in the UK?
Check the NCSC’s published list of certified degrees. If a degree is not on that list, it does not have NCSC certification; also check whether it is fully or provisionally certified and the expiry date.
How much are university tuition fees in England for 2026/27?
The maximum for a standard full-time undergraduate course is £9,790 a year in 2026/27, at providers with a TEF award and an access and participation plan. At the same providers, part-time courses are capped at £7,335 a year.
Can I study cyber security by distance learning?
Yes. The Open University’s BSc (Hons) Cyber Security is fully NCSC-certified, has no formal entry requirements and can be completed in as little as three years, or six years part-time, and part-time students may qualify for a Tuition Fee Loan.
Do apprentices pay for a cyber security degree apprenticeship?
No. Degree apprentices do not pay for their tuition; they are employees earning a wage, with at least 20% of their normal working hours for training and study.
Is a bootcamp enough to get into cyber security?
A bootcamp can give you structured foundations and practical experience, and works best combined with transferable experience or a certification. No bootcamp can guarantee a job, so check what is included before you pay.
References
- National Cyber Security Centre (2026). NCSC-certified degrees. https://www.ncsc.gov.uk/information/ncsc-certified-degrees
- Department for Education (2025). Changes to tuition fees: 2026 to 2027 academic year and 2027 to 2028 academic year. GOV.UK. https://www.gov.uk/government/publications/tuition-fees-and-student-support-2026-to-2027-academic-year/changes-to-tuition-fees-2026-to-2027-academic-year-and-2027-to-2028-academic-year
- GOV.UK (2026). Student finance for undergraduates: new full-time students. https://www.gov.uk/student-finance/new-fulltime-students
- GOV.UK (2026). Student finance for undergraduates: part-time students. https://www.gov.uk/student-finance/parttime-students
- UCAS (2026). The UK degree system. https://www.ucas.com/international/international-advisers/supporting-international-students/the-uk-degree-system
- GOV.UK (2026). Become an apprentice. https://www.gov.uk/become-apprentice
- Department for Education (2026). Apprenticeship funding rules: August 2026 to July 2027 (version 3). https://assets.publishing.service.gov.uk/media/6a68cabe229c578debc1a78c/Funding_Rules_2627_Version_3_Final.pdf
- Department for Education (2024). Degree apprenticeships: how you could get a degree for free. The Education Hub. https://educationhub.blog.gov.uk/2024/02/degree-apprenticeships-how-you-could-get-a-degree-for-free/
- Skills England (2026). Cyber security technologist (2021), ST1021 v1.1. https://skillsengland.education.gov.uk/apprenticeships/st1021-v1-1
- Skills England (2026). Cyber security technical professional (integrated degree), ST0409 v1.1. https://skillsengland.education.gov.uk/apprenticeships/st0409-v1-1
- Skills England (2021). Cyber security technologist, ST0124 (retired). https://skillsengland.education.gov.uk/apprenticeship-standards/cyber-security-technologist
- The Open University (2026). BSc (Hons) Cyber Security (R60). https://www.open.ac.uk/courses/computing-it/degrees/bsc-cyber-security-r60
- Department for Education (2026). Skills Bootcamp. Skills for Careers. https://www.skillsforcareers.education.gov.uk/pages/training-choice/skills-bootcamp
- Department for Education (2026). Find training and employment schemes for your business: Skills Bootcamps. https://find-employer-schemes.education.gov.uk/schemes/skills-bootcamps
- East Midlands Combined County Authority (2026). Skills Bootcamps Funding Rules, Wave 7 (1 August 2026 to 31 July 2027). https://www.eastmidlands-cca.gov.uk/content/uploads/2026/08/Wave-7-Skills-Bootcamp-Funding-Rules-v4.pdf
- ISC2 (2026). CC: Certified in Cybersecurity. https://www.isc2.org/certifications/cc
- ISC2 (2026). CISSP. https://www.isc2.org/certifications/cissp
- London School of Cybersecurity (2026). CyberForce Cybersecurity Bootcamp. https://lscs.io/cyberforce-course-details/
Stay Ahead With LSCS
Get critical Cybersecurity updates, events invitations, and industry analysis. Our immersive, hands-on training is the most direct path to a high-growth cyber career.