Degree in Cybersecurity and AI at UMA 2026: what changes in the curriculum

Key data

Companies seeking specialized talent in cybersecurity and artificial intelligence have a concrete reference: the University of Málaga formalizes the modification of its Degree in Cybersecurity and AI through the Resolution of 30 September 2026 published in the BOE on 10 October 2026. The updated curriculum responds to the growing demand for professionals who master both offensive and defensive security as well as applied artificial intelligence techniques, two areas that organizations can no longer treat separately.

The favorable report from the Agency for Scientific and University Quality of Andalusia (ACUA) was issued on 28 July 2026, which opens the door for companies to consider this degree as a reference for accredited quality when evaluating candidates or designing scholarship and internship programs.

What does this regulation establish?

The resolution publishes the official modification of the curriculum for the Degree in Cybersecurity and Artificial Intelligence at UMA. The degree is structured in four modules:

• Basic training
• Common training
• Specific training
• Elective training

The total load is 240 ECTS credits. The elective module requires completing a minimum of 30 credits, with the possibility of substituting part of them with External Academic Internships valued at 18 ECTS credits. This internship pathway is especially relevant for companies: it allows incorporating students in training with a recognized academic framework.

The subjects identified in the updated curriculum include:

The curriculum explicitly combines the offensive aspect (identifying vulnerabilities, simulating attacks) with the defensive aspect (incident response, forensic analysis) and AI application, generating a hybrid professional profile highly demanded in sectors such as banking, critical infrastructure, defense and public administration.

Economic and operational impact

For companies, this modification has three direct practical consequences:

• New graduate profile available: Graduates from the updated curriculum will have accredited training in pentesting, forensic analysis and applied AI. Companies designing their selection profiles can now include this degree as a reference for specific competencies.
• Opportunity for paid internships: The External Academic Internships pathway of 18 ECTS allows organizations to incorporate students in real cybersecurity or AI projects with formal academic coverage. It is a talent acquisition lever at reduced cost.
• Market signal about talent demand: Accreditation by ACUA and publication in the BOE consolidate this profile as an official degree, facilitating its recognition in public procurement processes and tenders that require specific qualifications.

For university centers and faculty, the modification implies adapting academic programming to the new curriculum effective from the publication date.

Who does it affect?

• Enrolled or prospective students of the Degree in Cybersecurity and AI at UMA: must understand the new module structure and elective requirements.
• Faculty and researchers of the degree: must adapt their programming to the modified curriculum.
• HR departments and recruitment managers in technology companies, cybersecurity consultancies, banking, insurance, critical infrastructure and public administrations.
• Security officers (CISO) and technology directors (CTO) seeking profiles with dual training in cybersecurity and AI.
• Companies interested in internship agreements with UMA to recruit specialized talent.
• University centers in Andalusia that compete or collaborate in offering similar degrees.

Practical example

A cybersecurity company based in Málaga that needs to strengthen its red team can take advantage of the External Academic Internships pathway of the new curriculum. A student from the Degree in Cybersecurity and AI who has completed Pentesting and Ethical Hacking can join through an internship agreement for 18 ECTS credits, covering part of their mandatory elective module (minimum 30 ECTS). The company obtains a technical profile in training with accredited knowledge in offensive security and AI, and the student counts these internships as official degree credits. The framework is backed by the favorable ACUA report of 28 July 2026 and published in the BOE, providing legal certainty to the agreement.

What should companies do now?

1. Update selection profiles: Include the Degree in Cybersecurity and AI from UMA (2026 curriculum) as a reference qualification in job postings requiring competencies in pentesting, forensic analysis or applied AI.
2. Explore internship agreements with UMA: Contact the University of Málaga's internship service to formalize agreements allowing you to incorporate students under the External Academic Internships module (18 ECTS).
3. Review public tender requirements: If your company participates in public contracts requiring cybersecurity or AI qualifications, verify that this degree meets the required technical solvency criteria.
4. Plan talent acquisition in the medium term: Students completing this updated curriculum will be available in the labor market in the coming years. Establishing relationships with UMA now (sponsorships, talks, final degree projects) positions your company as a preferred employer.
5. Inform your HR team and CISO: Share internally the contents of the new curriculum so that technical managers can properly evaluate candidates with this qualification.

Official source

Consult complete regulation at official source

Disclaimer: This article is for informational purposes only and does not constitute legal advice. For specific decisions, consult a qualified professional. Source: https://www.boe.es/diario_boe/txt.php?id=BOE-A-2026-21164