Information security personal statement example

Why do you want to study this course or subject?

The thing that pulled me towards information security was noticing how often systems fail for reasons that have nothing to do with clever mathematics. At the supermarket where I work on Saturdays, the stockroom door code has not changed since I started, and people say it out loud to each other across the aisle. The lock is fine; the process around it is not. Reading Ross Anderson's Security Engineering in my college library confirmed that this is a serious theme rather than my own pet theory: he keeps returning to incentives, usability and who actually bears the cost when something goes wrong, not only to ciphers. That combination of technical detail and human behaviour is what I want to study properly. I am drawn to the parts of the subject that sit between the two: authentication that people will actually use, logs that someone will actually read, risk decisions made with incomplete information. I also enjoy the adversarial habit of mind it demands. In Maths I am used to proving that something works; security asks me to assume someone is trying to make it not work, and to think about what they would try first and how cheaply. I would like a degree that gives me the underlying computer science, networks, operating systems and cryptography, so that my instincts are built on something firmer than curiosity, and that treats law, ethics and organisational reality as part of the subject rather than an afterthought.

How have your qualifications and studies helped you to prepare?

My A-levels in Mathematics, Computer Science and Physics have each contributed something I expect to use. Maths has been the most demanding and the most useful: proof by contradiction and modular arithmetic made my first attempt at understanding RSA far less mysterious, and probability work has helped me think about why long random passwords resist guessing while memorable substitutions do not. In Computer Science I have worked in Python and studied networking, hashing and file structures. For my programming coursework I built a small library loan tracker with user accounts, and marking my own work honestly meant admitting that I had stored passwords in plain text; rewriting it to use a salted hash taught me more than the original build did. Physics has trained me to estimate, to question whether a number is even the right order of magnitude, and to write up what I did clearly enough for someone else to repeat it. Alongside lessons I completed a free online introduction to cyber security and worked through beginner and easy challenges on a capture-the-flag practice site, mostly web and forensics categories, keeping a notebook of techniques so I am not solving the same problem twice. My college does not have a computing society, so I asked my Computer Science teacher whether I could use a lunchtime slot to show two other students how simple packet inspection works on a home network. Three of us now meet most weeks and take turns choosing a topic.

What else have you done to prepare outside of education, and why are these experiences useful?

My practical experience is homemade rather than professional. I was given a laptop that was too slow for schoolwork, installed Linux on it and used it to build a small test setup: a basic web server on the laptop and a second machine to poke at it from. I deliberately configured a weak login page, tried common attacks against it, then fixed them one at a time and wrote down what changed. It was cheap and limited, but it turned reading into something I could see. I also rented the smallest virtual server I could afford for two months and left it running with logging enabled, which showed me a steady stream of automated login attempts against the default administrative username within hours of it going online. Reading those logs taught me that most hostile traffic is indiscriminate and automatic, not targeted.

At home I set up a password manager for my parents and my aunt, and enabled two-factor authentication on their email. The interesting part was negotiation rather than configuration: my aunt only agreed once I explained recovery codes and wrote the process down in Bengali and English. I have similar patience from helping neighbours read council and utility letters, where the skill is explaining something accurately without making the other person feel foolish.

My supermarket job has given me eighteen months of working to a rota, handling till discrepancies calmly and following procedures that exist for good reasons even when queues are long. Badminton twice a week keeps me sociable and stops me spending every evening at a screen. Together these have taught me to organise my own time, which I know a degree will require.

This example has 4,554 characters across the three answers. Use it for ideas and structure. Your own UCAS answers must fit within 4,000 characters in total, including spaces.

Review this personal statement

Latest reviews