What Are the NUC CCMAS Benchmark Guidelines for Cybersecurity Degree Ethical Hacking Simulation Labs?

The National Universities Commission (NUC) Core Curriculum and Minimum Academic Standards (CCMAS) in collaboration with the Computer Professionals Registration Council of Nigeria (CPN) mandate that Nigerian universities offering undergraduate Cybersecurity degree programmes (B.Sc. or B.Tech.) establish specialized, isolated cyber range simulation laboratories equipped with dedicated virtualized penetration testing environments, software-defined networking (SDN) firewalls, malware analysis sandboxes, digital forensics workstations, and network packet analyzers, supported by a minimum staff-to-student ratio of 1:15, certified cybersecurity professionals (such as CEH, CISSP, or OSCP holders), and strict physical and logical air-gapping to prevent simulation traffic from escaping into public internet infrastructure. Practical cyber range training bridges theoretical computing concepts with operational cybersecurity defence, enabling undergraduates to master vulnerability assessment, penetration testing, reverse engineering, and incident response safely.

Faculties of Computing and Information Technology must satisfy comprehensive physical facility inspections and cyber infrastructure audits to achieve full accreditation status.

1. The Department of Cybersecurity aligns cyber range laboratory architecture with guidelines published on the National Universities Commission (NUC) Portal.
2. The university constructs an isolated, secure computing laboratory featuring enterprise virtualization hypervisors (such as Proxmox, VMware ESXi, or OpenStack) hosting configurable target virtual machines.
3. The institution sets up dedicated hardware firewalls, intrusion detection/prevention systems (IDS/IPS), and managed switch infrastructures with strict VLAN segmentation.
4. The department installs digital forensics hardware, including write-blockers, forensic disk imagers, and licensed software suites (such as Autopsy, EnCase, or FTK).
5. The academic staff profile must satisfy NUC standards, comprising professors, senior lecturers, and cybersecurity practitioners possessing higher degrees and active CPN registration.
6. The institution enforces a strict ethical hacking code of conduct, requiring students to sign non-disclosure agreements (NDAs) and acceptable use policies prior to gaining lab access.
7. The university hosts statutory joint NUC and CPN accreditation visitation teams to inspect laboratory air-gapping, computing capacity, and student penetration testing portfolios.
8. The accreditation panel conducts spot technical assessments of student vulnerability assessments and forensic analysis reports before granting full accreditation status.

Fulfilling cybersecurity simulation laboratory benchmarks guarantees that graduates possess the practical operational competencies required to protect critical national information infrastructure.

• Approved NUC CCMAS document specifying core curriculum and course specifications for Cybersecurity.
• Comprehensive inventory of server virtualization hardware and networking appliances signed by the Chief Systems Engineer.
• Institutional cyber laboratory security policy and student ethical hacking agreements.
• Professional registration and industry certification credentials of teaching staff registered with CPN.
• Standardized student laboratory manuals and penetration testing portfolios.

Students considering cybersecurity studies should confirm that their chosen institution holds valid NUC and CPN accreditation to ensure their computing degree is recognized nationally.

Programmes lacking accredited cyber range simulation laboratories cannot graduate students with recognized cybersecurity degrees, rendering their diplomates ineligible for professional CPN registration or high-security national cyber defence roles.

Upholding these regulatory benchmarks ensures the training of competent cybersecurity professionals capable of defending Nigerian cyber borders against sophisticated global threats.