1. Homepage
  2. Cyber Threat Intelligence Advanced
Register now for the course
See table of contents See table of contents

Cyber Threat Intelligence Advanced

Deepen your CTI expertise by analyzing adversaries, mastering intelligence reporting, and exploring advanced topics such as attribution, AI, and secure communication technologies.

Start your continuing education on 23 November 2026.

Factsheet

  • Degree/Certificate Short Advanced Studies (SAS) Cyber Threat Intelligence Advanced
  • Duration One week, 5 days
  • Schedule Week 48, 23.–27.11.2026
  • Application deadline Up to 1 month before the start of the course
  • ECTS credits 3 ECTS-Credits
  • Costs CHF 2’500
  • Teaching language English
  • Location Biel, Aarbergstrasse 46 / Onsite
  • School School of Engineering and Computer Science
  • Next session November 2026

Contact

Download

Structure + Content

Deepen your Cyber Threat Intelligence expertise.

Short Advanced Studies (SAS)

Short Advanced Studies (SAS) are courses that take 30 to 160 hours (1 to 9 ECTS – can be credited towards DAS or MAS). Participants acquire in-depth, industry-relevant insights and skills on current topics in a short space of time. Students who do not wish to take SAS competency assessments are awarded a course certificate (no ECTS in that case).

Do you have any questions?
FAQ: a short and handy guide to BFH’s Short Advanced Studies (SAS)​​​​​​​

Portrait

The CTI Advanced module expands on foundational knowledge by focusing on the behavior, capabilities, and structure of cyber adversaries, as well as advanced analytical practices.

Participants will examine different threat actor categories, including state-sponsored groups, cybercriminal organizations, and hacktivists. The module explores how to cluster and analyze these actors based on their tools, techniques, intent, and operational patterns.

A key component of the course is intelligence communication. Students learn how to structure, write, and disseminate high-quality intelligence reports, as well as how to share information effectively using established protocols.

The module also introduces the concept of attribution and its challenges, along with advanced topics such as anonymity in network traffic, cryptography, and the role of emerging technologies like artificial intelligence and machine learning in both offensive and defensive contexts.

By combining analytical rigor with practical communication skills, this module prepares participants to produce actionable intelligence and support decision-making at strategic and operational levels.

Career opportunities

The SAS CTI-Advanced program will prepare students for career opportunities in a variety of organizations:

  • Law enforcement (police intelligence) – Federal agencies, KAPOs
  • Military and government intelligence – CERTs, cyber-troops
  • Finance industry – cyber fraud intelligence teams
  • Large enterprises – IT/Cyber security and CTI teams
  • Consultancy firms with a focus on cyber security
  • IT/Cyber intelligence providers and product vendors
  • Private boutique (specialized) intelligence firms

Education Goals

This continuing education program has practical learning objectives. Students completing the SAS CTI Advanced understand the concepts of cyber threat intelligence and have knowledge of information gathering, analysis and dissemination. The program will focus on the use of industry-level capabilities, like threat intelligence analysis tools and platform for information sharing. Students will understand how to operationalize their work for a variety of customers and end-users.

Continuing education at a glance

Topics and Content

  • Adversaries: who’s who, capabilities, tooling, presence, intent, structure. From state-sponsored to semi-state sponsored, to cybercrime actors and hacktivists. Clustering groups and operations.
  • Threat intelligence sharing, dissemination: from protocols for sharing to how to write an analysis.
  • Attribution

Traffic anonymity, AI (ML, language models, prompt hacking), cryptography and cloud technologies.

Educational objectives

This module will look at several advanced aspects, like adversaries tooling, capabilities, intent and structure, but also to some advanced threat intelligence skills, like analysis and reporting, information sharing, and an introduction to the toolsets.

To receive 3 ECTS (European Credit Transfer and Accumulation System) academic credits, students must demonstrate their knowledge by successfully completing assignments, projects, and final exam as required by the lecturer. Students who attend all classes but do not complete the assessment work will receive a certificate of attendance equivalent to 40 CPE (Continuing Professional Education) hours.

Emilia Cebrat-Maslowski
Director of Threat Intelligence at Quad9,
Product Owner for Cyber Threat Intelligence at Switch
Lecturer BFH

Degree + Title

Short Advanced Studies (SAS) in Cyber Threat Intelligence Advanced

Requirements + Admission

Find out which professionals this course is designed for and what requirements you need to meet.

Requirements

Admission into the SAS CTI Advanced requires one of the following:

  • A university degree or equivalent professional education degree in computer science, computer engineering, cyber security, or related field
  • Professional experience in cyber security, threat intelligence, digital forensics or IT investigation, and a related industry certification

If applicant qualifications are unclear or inconclusive, further information (for example a CV) or an interview may be requested.

Target audience

The SAS CTI Advanced is designed for IT and Cybersecurity professionals wanting to specialize in cyber threat intelligence, working in the role of CTI analyst.

Infoevent + Course guidance

Do you have questions about continuing education? We will be happy to answer your questions.

Course guidance

Choosing a basic or continuing education programme is an important decision when planning your professional career. We will be happy to answer your questions and clarify your personal requirements for the desired continuing education during an individual consultation.

Mauro Vignati

  • Lehrbeauftragte/r

Miriam Patwa

  • Studienkoordinatorin Weiterbildung
  • +41 31 848 58 68

Location + Infrastructure

This course is held on site at Aarbergstrasse 46 in Biel/Bienne.

Switzerland Innovation Park Biel/Bienne (SIPBB)

A location with many advantages

  • Classrooms within two minutes walking distance from Biel/Bienne railway station
  • Ideal train connections from Bern’s main railway station (every 15 minutes) and from Bern Wankdorf (every 30 minutes)
  • State-of-the-art infrastructure in the new SIPBB building
  • Various catering options in the immediate vicinity
  • Innovation and networking events

And that’s not all! Biel/Bienne is…

  • an innovation hotspot,
  • a university city,
  • an industrial and service city with numerous major players in the watchmaking, mechanical engineering, precision engineering and medical technology industries and major representatives of the communications and telecommunications sectors,
  • bordered by Lake Biel and its wide range of sports and leisure facilities,
  • a city that embodies bilingualism,
  • a town with a vibrant cultural life.

Biel Aarbergstrasse 46 (Switzerland Innovation Park Biel/Bienne)

Biel, Aarbergstrasse 46

Bern University of Applied Sciences

Engineering and Computer Science
Switzerland Innovation Park Biel/Bienne
Aarbergstrasse 46
CH 2503 Biel

Bern University of Applied Sciences

Engineering and Computer Science
Switzerland Innovation Park Biel/Bienne
Aarbergstrasse 46
CH 2503 Biel