The school subject choice that determines whether a cyber security career stays open is not Information Technology. It is Mathematics. Almost every degree route into the field requires it, and Mathematical Literacy closes most of those doors at the point it is chosen in Grade 9.
That is the single most useful thing a learner interested in this field can know, because the decision is made years before anyone applies to university and is difficult to reverse afterwards.
Entry Requirements at a Glance
For the degree route into cyber security, plan on the following.
- A National Senior Certificate with admission to bachelor’s degree study requires at least 40% in your home language, at least 50% in four subjects from the designated subject list, and at least 30% in two further subjects.
- Mathematics — not Mathematical Literacy, which most computer science and information systems degrees do not accept
- English at the level the institution requires
- Information Technology or Computer Applications Technology where the school offers them — useful, but not usually compulsory
- Physical Sciences where the target degree is engineering-based
- An APS meeting the programme minimum at your chosen institution
Academic and Minimum Admission Requirements
Mathematics versus Mathematical Literacy. Computer science, information systems and computer engineering degrees at South African universities generally require Mathematics. A learner taking Mathematical Literacy is usually limited to diplomas, certificates and industry certifications — which are real routes into the field, but they close off the degree path.
If a learner is interested in this area at all, taking Mathematics keeps every option open. Dropping it closes options that cannot easily be reopened later.
Information Technology versus Computer Applications Technology. These are different subjects. IT teaches programming and problem-solving; CAT teaches applications and end-user computing. IT is the more relevant preparation, but neither is usually a formal admission requirement, and a school that offers neither does not disqualify a learner.
The degrees that lead into cyber security. There is no single “cyber security” matric route. Graduates come from computer science, information systems, information technology, computer engineering and electrical engineering, with specialisation happening at honours level or through industry certification afterwards.
Subjects, APS and Qualification Requirements
Most South African universities calculate an Admission Point Score (APS) from your best six 20-credit NSC subjects on a seven-point scale, giving a maximum of 42. Life Orientation is excluded at most institutions, and level 1 subjects generally do not count. Each university publishes its own APS table and programme minimums, and these are revised annually, so confirm the figure for your intake year with the institution itself.
Programme minimums differ substantially. Computer science at a research university typically requires a considerably higher APS and Mathematics level than an IT diploma at a university of technology, and both lead into the industry.
Routes that do not require a degree. Cyber security is one of the fields where industry certifications carry genuine weight. TVET college programmes, vendor certifications and structured learnerships are real entry points, and employers in the field do hire on demonstrated skill. Confirm current requirements with the certifying body or provider, since certification frameworks change frequently.
What matters most in the field is demonstrable ability. Learners can start now: learn to program, set up a home lab, work through legal practice platforms, and take part in capture-the-flag competitions. That portfolio counts with employers in a way it does not in most other fields.
A word of caution worth stating plainly: practising on systems you do not own or have written permission to test is a criminal offence under the Cybercrimes Act 19 of 2020. Learn on your own equipment or on platforms that explicitly authorise testing.
Documents and Application Requirements
For university applications the documents are the standard ones.
- Certified copy of your South African ID, or passport for international applicants
- Grade 11 final results and Grade 12 mid-year results when applying
- Final National Senior Certificate once available
- Proof of payment of the application fee where one is charged
- For certification or college programmes: whatever the provider specifies, which is usually less
Selection, Intake and Eligibility Considerations
Places on computer science and information systems programmes are in high demand, and APS cut-offs have risen at many institutions. Apply early and to more than one.
Employers in the field recruit on skill as much as on qualification, so the practical portfolio built during school and study is a genuine differentiator rather than a nice extra.
- Take Mathematics, not Mathematical Literacy — this is the decisive choice
- Take Information Technology if the school offers it, but do not worry if it does not
- Start programming now; the language matters less than the practice
- Build a home lab and use legal, authorised practice platforms only
- Never test systems you do not own or have written permission to test
- Apply to several institutions and consider diplomas alongside degrees
- Look into learnerships and industry certifications as parallel routes
Frequently Asked Questions
Do I need Information Technology as a school subject?
It helps but is usually not a formal requirement. Mathematics is the subject that determines whether the degree route stays open.
Can I get into cyber security with Mathematical Literacy?
The degree route is largely closed, but diplomas, TVET programmes, learnerships and industry certifications are genuine entry points and the field does hire on demonstrated skill.
Is there a cyber security degree in South Africa?
Specialisation usually happens at postgraduate level or through certification. Undergraduate entry is normally via computer science, information systems, IT or computer engineering.
Can I practise hacking to learn?
Only on your own systems or on platforms that explicitly authorise testing. Accessing systems without permission is a criminal offence under the Cybercrimes Act 19 of 2020.
APS minimums, subject requirements and certification frameworks differ by institution and provider and change. Confirm current requirements directly with the universities, colleges or certifying bodies you are considering.