| |
Dec 05, 2025
|
|
|
|
|
2025-2026 Graduate Academic Calendar
Cybersecurity, PhD
|
|
 Return to: Programs (by degree)
|
General information
The Doctor of Philosophy (PhD) program in Cybersecurity is a multidisciplinary research-intensive program that covers a broad range of themes related to cybersecurity including technology, business, policy and governance, AI, and human behaviour. This program aims to prepare specialized socio-technical academics who can perform leading-edge research and teaching in academia or in industry, and help governments in policymaking in the area of cybersecurity. The objectives of the program are achieved through a combination of coursework, seminars and a research thesis. Students will gain comprehensive knowledge of theory and technologies of cybersecurity, legal and ethical issues around cybersecurity and privacy, and cybersecurity policies. Students will also become proficient in cybersecurity research methodology and state-of-the-art research topics. The PhD in Cybersecurity program is hosted at Ontario Tech University’s Faculty of Business and Information Technology and is affiliated with the Institute for Cybersecurity and Resilient Systems (ICSR), a multi-disciplinary global centre for cybersecurity research, innovation, teaching, and outreach at Ontario Tech. A current list of graduate faculty is available on the Faculty of Business and Information Technology’s website. Admission requirements
In addition to the general admission requirements for graduate studies , PhD in Cybersecurity applicants must meet the following program-specific requirements: - Students would normally be expected to have completed a four-year undergraduate degree and a thesis-based master’s degree in a relevant field from a Canadian university, or its equivalent from a recognized institution, with an overall academic standing of at least 3.5 on a 4.0/4.3 scale or its equivalent in their last two years of study.
- Master of IT Security (MITS) pathway: Graduates of Ontario Tech University’s MITS program can apply to the PhD program if they have completed the MITS program with an overall academic standing of at least 3.5/4.3.
- A minimum of two letters of reference from persons having direct knowledge of the applicant’s academic competence. Academic references are preferred; however professional references will be accepted. Letters of reference should come from individuals under whom the applicant has worked closely or studied. The quality of the letters will be assessed by the Graduate Committee to make sure relevant requirements have been met.
Proof of English proficiency is needed from those applicants whose first language is not English, as per the university’s regulations. Applicants must find a prospective faculty supervisor from among the list of graduate faculty members of the PhD in Cybersecurity program and receive formal acceptance of the faculty member to supervise their research. No applicant will be accepted to the program without having an approved prospective supervisor in advance. As part of the application form, students are required to provide a minimum 3000-word long personal research statement, outlining their area of interest in cybersecurity, their proposed academic research plan, and identify the faculty supervisor who has agreed to supervise their research. Students admitted to the program must demonstrate their broad proficiency in the area of cybersecurity through evidence of completing or having completed graduate-level coursework in the fields of theory, applications, legal and governance issues of cybersecurity. Students who do not demonstrate appropriate background in research methods and cybersecurity fundamentals and/or ethics will be required to complete the following additional/prerequisite courses within the first 18 months of the program: 1. Cybersecurity: The following courses are required for students who do not have prior background in IT security. 2. Research methods: The following prerequisite is required for students who have not completed a previous thesis-based master’s program in a relevant field. Note: Students who demonstrate sufficient proficiency through prior graduate-level coursework or extensive related work experience can request a waiver for the corresponding prerequisite course from the graduate program director. Waiver requests are not guaranteed and will be considered on a case-by-case basis. Part-time studies
The PhD in Cybersecurity program is intended to be a full-time program. Coursework component
The coursework component of the program may include prerequisite courses (if required as noted above), specialized courses, a seminar, a thesis proposal and a final thesis. Students in the PhD in Cybersecurity must take three specialized courses with the approval of their supervisory committee. These courses must be completed prior to the thesis candidacy proposal examination. The specialized courses for each year will be announced at the time of registration for that academic year, and may vary from year to year based on instructor availability. Some examples of specialized course topics are as following: Note:
Students may take up to two relevant MITS or CSCI 5xxx/6xxx-level courses as specialized courses (if not taken in a previous degree) with the approval of their supervisory committee and the graduate program director. Seminar, proposal and thesis courses
Students must register in the following zero-credit courses for their seminar, proposal and thesis work: Research component
Students who successfully complete their coursework will then enter the thesis phase of the program. At this stage, students must prepare a thesis proposal under the supervision of their supervising committee, and then defend their proposal in an oral candidacy exam. After successful defence of their proposal, they will be considered PhD candidates. It is strongly recommended that students complete their coursework and candidacy exam within 24 months after entering the program on a full-time basis. All PhD candidates must defend their final thesis in an oral session in front of a committee of internal and external examiners, as per university regulations. Upon successful defence of their thesis and subject to completion of all other requirements of the program, a degree of PhD in Cybersecurity will be conferred upon them. Seminars
All students in the PhD in Cybersecurity program must register in and participate in a zero-credit seminar course every semester. Each student must present at least two seminars throughout their program: one seminar before the candidacy exam, and one exit seminar before their thesis defence. Program learning outcomes
The following outcomes outline the knowledge and skills students will have achieved upon completion of the program. |
Return to: Programs (by degree)
|
|
