1. Homepage
  2. Cyber Threat Intelligence Fundamentals
Register now for the course
See table of contents See table of contents

Cyber Threat Intelligence Fundamentals

Build the essential foundations of Cyber Threat Intelligence. Learn how to understand threats, structure intelligence processes, and translate complex cyber risks into actionable insights for organizations.

Start your continuing education on 19 October 2026.

Factsheet

  • Degree/Certificate Short Advanced Studies (SAS) Cyber Threat Intelligence Fundamentals
  • Duration One week, 5 days
  • Schedule Week 43, 19.–23.10.2026
  • Application deadline Up to 1 month before the start of the course
  • ECTS credits 3 ECTS-Credits
  • Costs CHF 2’500
  • Teaching language English
  • Location Biel, Aarbergstrasse 46 / Onsite
  • School School of Engineering and Computer Science
  • Next session October 2026

Contact

Download

Structure + Content

Build the essential foundations of Cyber Threat Intelligence.

Short Advanced Studies (SAS)

Short Advanced Studies (SAS) are courses that take 30 to 160 hours (1 to 9 ECTS – can be credited towards DAS or MAS). Participants acquire in-depth, industry-relevant insights and skills on current topics in a short space of time. Students who do not wish to take SAS competency assessments are awarded a course certificate (no ECTS in that case).

Do you have any questions?
FAQ: a short and handy guide to BFH’s Short Advanced Studies (SAS)​​​​​​​

Portrait

The CTI Fundamentals module introduces the core principles of Cyber Threat Intelligence and provides a structured understanding of how intelligence supports cybersecurity operations.

Participants explore key concepts such as intelligence terminology, the intelligence cycle, and analytical techniques used to assess threats and risks. The course also covers threat modelling approaches and widely used frameworks, enabling students to better understand adversaries and their potential impact.

A strong emphasis is placed on distinguishing between data-driven and concept-driven analysis, as well as defining intelligence requirements and priorities. Students will also gain insight into how CTI functions within different organizational contexts—from corporate security operations to government use cases.

In addition, the module introduces the technical and organizational environment in which CTI operates. This includes an overview of SecOps concepts such as SIEM and SOAR, as well as the structure of modern IT ecosystems (cloud, on-premises, and supply chains).

By the end of this module, participants will have a solid foundation to understand, contextualize, and communicate cyber threats effectively.

Career opportunities

The SAS CTI-Fundamentals program will prepare students for career opportunities in a variety of organizations:

  • Law enforcement (police intelligence) – Federal agencies, KAPOs
  • Military and government intelligence – CERTs, cyber-troops
  • Finance industry – cyber fraud intelligence teams
  • Large enterprises – IT/Cyber security and CTI teams
  • Consultancy firms with a focus on cyber security
  • IT/Cyber intelligence providers and product vendors
  • Private boutique (specialized) intelligence firms

Education Goals

This continuing education program has practical learning objectives. Students completing the SAS CTI Fundamentals understand the concepts of cyber threat intelligence and have knowledge of information gathering, analysis and dissemination. Students recognize how they can operationalize their work for a variety of clients and end users.

Continuing education at a glance

Topics and Content

  • Understanding intelligence and cyber threat intelligence: lexicon, terminology, intelligence cycle, analytical techniques. Defining threats and understanding risks
  • Threat modelling and threat frameworks
  • Data-driven vs. conceptually driven analysis, intelligence gathering vs. consumption, CTI requirements and priority intelligence requirements
  • The CTI business, defining scope and purposes: CTI for cyber security, CTI as information advantage, CTI as core business, CTI for government. Building a threat intel team.
  • Company environment: introduction to SecOps (SIEM, SOAR, etc.), understanding corporate network and environment. Understanding a standard technology stack, weakness and strengths (supply chain security, SaaS vs on.prem, etc.).

Educational objectives

This SAS teaches the fundamentals of Cyber Threat Intelligence.

To receive 3 ECTS (European Credit Transfer and Accumulation System) academic credits, students must demonstrate their knowledge by successfully completing assignments, projects, and final exam as required by the lecturer. Students who attend all classes but do not complete the assessment work will receive a certificate of attendance equivalent to 40 CPE (Continuing Professional Education) hours.

Degree + Title

Short Advanced Studies (SAS) in Cyber Threat Intelligence Fundamentals

Requirements + admission

Find out which professionals this course is designed for and what requirements you need to meet.

Requirements

Admission into the SAS CTI-Fundamentals requires one of the following:

  • A university degree or equivalent professional education degree in computer science, computer engineering, cyber security, or related field
  • Professional experience in cyber security, threat intelligence, digital forensics or IT investigation, and a related industry certification

If applicant qualifications are unclear or inconclusive, further information (for example a CV) or an interview may be requested.

Target audience

The SAS CTI-Fundamentals is designed for IT and Cybersecurity professionals wanting to specialize in cyber threat intelligence, working in the role of CTI analyst.

Infoevent + Course guidance

Do you have questions about continuing education? We will be happy to answer your questions.

Course guidance

Choosing a basic or continuing education programme is an important decision when planning your professional career. We will be happy to answer your questions and clarify your personal requirements for the desired continuing education during an individual consultation.

Mauro Vignati

  • Lehrbeauftragte/r

Miriam Patwa

  • Studienkoordinatorin Weiterbildung
  • +41 31 848 58 68

Location + Infrastructure

This course is held on site at Aarbergstrasse 46 in Biel/Bienne.

Switzerland Innovation Park Biel/Bienne (SIPBB)

A location with many advantages

  • Classrooms within two minutes walking distance from Biel/Bienne railway station
  • Ideal train connections from Bern’s main railway station (every 15 minutes) and from Bern Wankdorf (every 30 minutes)
  • State-of-the-art infrastructure in the new SIPBB building
  • Various catering options in the immediate vicinity
  • Innovation and networking events

And that’s not all! Biel/Bienne is…

  • an innovation hotspot,
  • a university city,
  • an industrial and service city with numerous major players in the watchmaking, mechanical engineering, precision engineering and medical technology industries and major representatives of the communications and telecommunications sectors,
  • bordered by Lake Biel and its wide range of sports and leisure facilities,
  • a city that embodies bilingualism,
  • a town with a vibrant cultural life.

Biel Aarbergstrasse 46 (Switzerland Innovation Park Biel/Bienne)

Biel, Aarbergstrasse 46

Bern University of Applied Sciences

Engineering and Computer Science
Switzerland Innovation Park Biel/Bienne
Aarbergstrasse 46
CH 2503 Biel

Bern University of Applied Sciences

Engineering and Computer Science
Switzerland Innovation Park Biel/Bienne
Aarbergstrasse 46
CH 2503 Biel