Università degli Studi di Perugia Department of Law
4th edition · 2025/2026

First-level university Master’s Degree in Data Protection, Cybersecurity and Digital Forensics

Applications are open for the 4th edition of the first-level university Master’s Degree in Data Protection, Cybersecurity and Digital Forensics at the University of Perugia. The Master offers two curricula, Legal and IT, while retaining the interdisciplinary approach that has integrated law and technology since its first edition in 2019. Application deadline: 10 October 2026 at 1 pm.

Apply now
Academic year
2025/2026
Credits
60 CFU
Total workload
1500 hours
Duration
1 academic year
Minimum attendance
70%
Qualification
First-level Master’s degree in ‘Data Protection, Cybersecurity and Digital Forensics’
TWO CURRICULA

Choose your pathway

Legal Curriculum (cv-IUS)

By the end of the course, students will have developed the ability to analyse, plan, coordinate and monitor the cybersecurity of data, systems and infrastructure, whilst assessing the risks to the confidentiality, integrity and availability of information. These skills will enable them to contribute to the definition and implementation of appropriate technical and organisational measures, as well as to the strategic coordination of information systems, including in relation to the digitisation and digital transformation processes of the public administration and complex organisations.

The Master’s programme will also enable participants to acquire specific skills to understand and manage the various stages of the evidential process concerning digital evidence. Participants will be able to assess the methods for acquiring, preserving and analysing digital evidence, to safeguard its integrity and authenticity, and to correctly interpret the technical findings in light of current legislation and the most recent case-law interpretations in criminal, civil and administrative contexts.

Courses

  • Privacy and data protection (shared)
  • Cybercrime and digital forensics (shared)
  • Fundamental Rights and Comparative Constitutional Systems
  • Cybersecurity: theory and advanced principles (shared)
  • Administrative Law (shared)
  • European law on privacy and cybersecurity

60 CFU

Technology Curriculum (cv-INF)

Upon completion of the Master’s programme, students on the technology track will have acquired advanced technical and methodological skills in the fields of cybersecurity and digital forensics, with particular emphasis on the security analysis of networks, systems and applications; the identification and assessment of vulnerabilities; and the collection, correlation and interpretation of technical evidence from information systems and network infrastructure. The skills acquired will enable students to understand the main techniques used to compromise IT systems and to assess the technical risk to the confidentiality, integrity and availability of data and services, whilst consciously integrating the technical-operational perspective with the legal and organisational ones.

The training programme will also enable participants to develop operational skills in the technical management of security incidents (incident handling and DFIR), including log analysis, the reconstruction of event timelines, and support for containment and recovery activities. Finally, participants will be able to document the activities carried out and the results achieved in a clear, structured and rigorous manner, drafting technical reports and executive summaries to support audit activities, security assessments, organisational decision-making processes and any administrative or legal proceedings.

Courses

  • Privacy and data protection (shared)
  • Cybercrime and digital forensics (shared)
  • Cybersecurity: theory and advanced principles (shared)
  • Administrative Law (shared)
  • Security Monitoring and Incident Handling
  • Network Traffic Analysis and Threat Detection
  • Cybersecurity Architecture and Operations Management
  • Threat Intelligence and Digital Forensics for Incident Response

60 CFU

CALENDAR

Deadlines and activities

Applications open
July 13, 2026
Deadline
Activities start
November 16, 2026
Activities end
April 30, 2028
PROGRAMME

Courses

Shared by both curricula Legal Curriculum (cv-IUS) Technology Curriculum (cv-INF)
05

Administrative Law

Shared by both curricula
SSD
IUS/10
Hours
40
CFU
5
  • Right of access, transparency obligations and the GDPR;
  • The national (Data Protection Authority) and European (EDPS) data protection authorities and the European Data Protection Board (EDPB), and their roles under the GDPR;
  • The Digital Administration Code and the General Data Protection Regulation

Lecturers: Benedetto Ponti, Enrico Carloni, Stefano Rossa, Simone Franca, Maria Chiara Pollicino, Daniele Marongiu

06

European law on privacy and cybersecurity

Legal Curriculum (cv-IUS)
SSD
IUS/14
Hours
40
CFU
5
  • Right of access, transparency obligations and the GDPR;
  • The national (Data Protection Authority) and European (EDPS) data protection authorities and the European Data Protection Board (EDPB), and their roles under the GDPR;
  • The Digital Administration Code and the General Data Protection Regulation

Lecturers: Simone Vezzani, Maurizio Reale, Paolo Reale, Alberto Miglio, Giuseppe Serafini, Filippo Bianchini, Monica Parodi, Ester di Napoli

07

Security Monitoring and Incident Handling

Technology Curriculum (cv-INF)
SSD
INF/01
Hours
30
CFU
4
  • preparation;
  • detection and identification;
  • containment;
  • eradication;
  • recovery;
  • lesson learned

Lecturers: Alessio Faticoni

08

Network Traffic Analysis and Threat Detection

Technology Curriculum (cv-INF)
SSD
INF/01
Hours
30
CFU
6

Lecturers: Luca Calzolari

09

Cybersecurity Architecture and Operations Management

Technology Curriculum (cv-INF)
SSD
INF/01
Hours
20
CFU
3
  • security architecture design;
  • operations management;
  • risk management and governance

Lecturers: Pier Luigi Rotondo

10

Threat Intelligence and Digital Forensics for Incident Response

Technology Curriculum (cv-INF)
Hours
30
CFU
4
  • Cyber Threat Intelligence
  • Incident Response
  • Digital Forensics
  • Network e Malware Forensics

Lecturers: Paolo Giardini

DIRECTION

Director and Deputy Director of the Master

Stefania Stefanelli

Stefania Stefanelli

Full Professor of Private Law

Università degli Studi di Perugia

Department of Law

Director of the Master

Stefano Bistarelli

Stefano Bistarelli

Full Professor of Computer Science

Università degli Studi di Perugia

Department of Mathematics and Computer Science

Deputy Director of the Master

FACULTY

Faculty

Enrico Carloni

Enrico Carloni

Full Professor of Administrative and Public Law

Director of the Department of Political Science

Università degli Studi di Perugia

Department of Political Science

  • Legal Curriculum (cv-IUS)
  • Technology Curriculum (cv-INF)

Courses: Administrative Law

Cristina Costantini

Cristina Costantini

Full Professor of Comparative Private Law

Università degli Studi di Perugia

Department of Law

  • Legal Curriculum (cv-IUS)
  • Technology Curriculum (cv-INF)

Courses: Privacy and data protection

Simone Franca

Simone Franca

Adjunct Professor

Fixed-term Researcher (RTD-A)

Università di Trento

Faculty of Law

  • Legal Curriculum (cv-IUS)
  • Technology Curriculum (cv-INF)

Courses: Administrative Law

Daniele Marongiu

Daniele Marongiu

Adjunct Professor

Researcher in Legal Studies

Università degli Studi di Cagliari

Department of Legal Studies

  • Legal Curriculum (cv-IUS)
  • Technology Curriculum (cv-INF)

Courses: Administrative Law

Mariangela Montagna

Mariangela Montagna

Full Professor of Criminal Procedure

Director of the Department of Law

Università degli Studi di Perugia

Department of Law

  • Legal Curriculum (cv-IUS)
  • Technology Curriculum (cv-INF)

Courses: Cybercrime and digital forensics

Benedetto Ponti

Benedetto Ponti

Associate Professor of Administrative and Public Law

Università degli Studi di Perugia

Department of Political Science

  • Legal Curriculum (cv-IUS)
  • Technology Curriculum (cv-INF)

Courses: Administrative Law

Stefano Rossa

Stefano Rossa

Adjunct Professor

Fixed-term Researcher

Università del Piemonte Orientale

Department for Sustainable Development and Ecological Transition

  • Legal Curriculum (cv-IUS)
  • Technology Curriculum (cv-INF)

Courses: Administrative Law

Stefania Stefanelli

Stefania Stefanelli

Full Professor of Private Law

Università degli Studi di Perugia

Department of Law

Director of the Master

  • Legal Curriculum (cv-IUS)
  • Technology Curriculum (cv-INF)

Courses: Privacy and data protection

TEACHING

Delivery and assessment

Lectures and practical sessions are delivered exclusively online, synchronously, on Fridays and Saturdays.

The intermediate assessments for individual courses and the final examination are held in person.

Compulsory for at least 70 per cent of the hours of distance-learning lectures and practical sessions, work placements and/or project work

The final examination is held in person. At the end of the course, students who have fulfilled all formal and substantive requirements (payment of fees, ongoing assessments, attendance, etc.) must, within the deadlines set by the Academic Board, submit their dissertation (in both digital and hard copy formats) to the course coordinator and must defend their dissertation before an Examination Board; this final examination consists of a presentation of the content and answers to any questions put by the Board.

ADMISSION

Requirements, fees and application

Legal Curriculum (cv-IUS)

Admission to the cv-IUS curriculum is open to graduates holding any first-cycle degree. The application form attached to the call also provides for applicants to document a degree awarded under the former Italian system or a specialist/master’s degree. Holders of qualifications obtained abroad that are recognised as equivalent under current legislation may also apply.

Technology Curriculum (cv-INF)

Admission to the cv-INF curriculum requires a first-cycle degree in class L-31 (Computer Science and Technology) or L-08 (Information Engineering), or in the corresponding former Ministerial Decree 509/99 classes 26 (Computer Science and Technology) or 9 (Information Engineering), or a qualification obtained abroad that is recognised as equivalent under current legislation. Graduates holding a first-cycle degree in another class may be admitted if they have earned at least:

  • 45 CFU in the scientific-disciplinary sectors ING-INF/05 or INF/01
  • 24 CFU in the sectors MAT/01–MAT/09

The signed application, completed using Annex A, must be submitted exclusively online through SOL/Esse3 by 1 pm on 10 October 2026, together with an identity document and a curriculum vitae completed using Annex B. A non-refundable application fee of €60.00 must be paid through pagoPA at the end of the procedure. Auditors are not admitted and enrolment in individual courses is not available.

Enrolment in individual courses and enrolment as an auditor are not available.

Selection: The Academic Board will appoint a Selection Committee if applications in either category (regular applicants and PA110elode applicants) exceed the stated limits. Selection will be based on qualifications, for a maximum of 60 points; in the event of a tie, priority will be given to the younger applicant.

Fees and concessions

Regular tuition fee

€3,200.00 + €16.00

Single all-inclusive fee, payable in one instalment.

PA 110 e lode

€1,600.00 + €16.00

Single all-inclusive fee, payable in one instalment.

Over-quota UniPG technical, administrative and library staff (TAB)

€640.00 + €16.00

Single all-inclusive fee for over-quota enrolment by technical, administrative and library staff of the University of Perugia, payable in one instalment.

Full fee exemption for applicants with a recognised disability or invalidity of at least 66%, subject to the documentation required by the call.

Full exemption

Applicants with a disability, recognised disability status under Article 3 of Law 104/1992, or invalidity of at least 66% who wish to claim the full exemption must declare this in their application and attach, by the application deadline, suitable original or certified-copy documentation issued by the competent authorities. Failure to provide the documentation by the deadline will result in the full tuition-fee exemption not being granted.

Apply now

DOCUMENTS

Call for applications and documents

Call for applications

Original document in Italian.

Call for applicationsStatus: officialD.R. n. 1716 del 10.7.2026
SCIENTIFIC AND INSTITUTIONAL COLLABORATIONS

Scientific networks and specialist teaching

INTERNATIONALISATION

Double-degree agreements

Double-degree agreement

“Mestrado em Ciência Jurídica” at Universidade do Vale do Itajaí (UNIVALI)

Double-degree agreement

“Mestrado em Ciência Jurídica” at ATITUS Educação (ATITUS)

Mobility period: 60 days