Every week below is mapped to a specific NESA Software Engineering 11–12 outcome. Nothing is improvised: this is the same scope and sequence used to write every teaching booklet, homework booklet and worked answer set.
13 Oct – 17 Dec 2026 · Weeks 1–10
28 Jan – 9 Apr 2027 · Weeks 11–22
26 Apr – 2 Jul 2027 · Weeks 23–30
Term dates follow the official NSW Department of Education 2026–2027 calendar (Eastern Division) and are confirmed each term. Secure Software Architecture is the most content-dense strand, so its final units occasionally run a little past the nominal Term 1 end date. See Pricing for how terms are billed.
The complete planning document behind this curriculum: every syllabus dot point mapped to its week, NESA course learning outcomes, term dates, and full acknowledgements. The same document used to write every booklet.
Download the Scope & Sequence (PDF)How the internet actually works: from data packets and protocols to front-end/back-end architecture, databases, and building a progressive web app.
| Week | Topic | Outcomes |
|---|---|---|
| 01 | Applications of Web Programming: interactive sites, e-commerce, progressive web apps | SE-12-01, 03, 06 |
| 02 | How Data Moves on the Internet: packets, IP addressing, DNS | SE-12-03 |
| 03 | Web Protocols, Ports & Secure Transport: HTTP/HTTPS, SSL/TLS, encryption, digital signatures | SE-12-03, 04, 07 |
| 04 | Big Data & Web Architectures: data mining, metadata, streaming | SE-12-03, 06 |
| 05 | The Role of the W3C & Web Standards: accessibility, internationalisation, privacy | SE-12-01, 05 |
| 06 | Modelling a Web Development System: client-side vs server-side, SQL/NoSQL | SE-12-02, 06 |
| 07 | Browser Influence, Dev Tools & CSS/UI-UX Principles | SE-12-01, 06 |
| 08 | Front-End Libraries/Frameworks, Version Control & Open-Source CMS | SE-12-01, 05, 06 |
| 09 | Back-End Request Flow & Databases: SQL scripting, joins, ORM | SE-12-02, 06, 07, 08 |
| 10 | Page-Load Performance & Designing a PWA: accessible UI/UX | SE-12-01, 03, 06 |
Security by design: from the business case for secure software through to cryptography, input validation, secure APIs, real vulnerability classes, and the ethics of security failures.
| Week | Topic | Outcomes |
|---|---|---|
| 11 | The Business Case for Security | SE-12-01, 05 |
| 12 | Integrating Security into the SDLC | SE-12-01, 02, 07 |
| 13 | User-Centred Security Design | SE-12-01, 05 |
| 14 | Security Fundamentals: CIA Triad & AAA | SE-12-04, 07 |
| 15 | Cryptography & Data Protection | SE-12-04, 07 |
| 16 | Input Validation & Sanitisation | SE-12-07, 08 |
| 17 | Privacy by Design | SE-12-04, 05 |
| 18 | Secure API Design | SE-12-02, 06, 07 |
| 19 | Secure Execution & Resource Management | SE-12-07, 08 |
| 20 | Security Testing & Web Vulnerabilities: XSS, CSRF, SAST/DAST, pen testing | SE-12-07, 08 |
| 21 | Security in Development Teams & Enterprise Benefits | SE-12-01, 05, 06 |
| 22 | Security Ethics, Legal Ramifications & Evaluating Security Programs | SE-12-01, 05, 06 |
AI, machine learning and automation: from RPA/BPA and training models through to building regression models and neural networks in Python, and the ethics of automation and bias.
| Week | Topic | Outcomes |
|---|---|---|
| 23 | AI vs ML: and where RPA/BPA fit | SE-12-03, 06 |
| 24 | ML Training Models: supervised, unsupervised, semi-supervised, reinforcement | SE-12-06 |
| 25 | Common ML Applications: forecasting, virtual assistants, image recognition | SE-12-03, 06 |
| 26 | Design Models: decision trees, neural networks, regression algorithms | SE-12-06 |
| 27 | RPA & BPA: practical, ethical & security considerations | SE-12-01, 05, 06 |
| 28 | Programming for Automation: regression models & neural networks in Python | SE-12-02, 06 |
| 29 | Significance & Impact of ML/AI on society, and human behaviour patterns | SE-12-05 |
| 30 | Bias in Datasets & Models, plus full course consolidation | SE-12-05 |
The fourth strand of the syllabus (the Major Project) is assessed separately from the three content strands above, so it's offered as an optional 1:1 add-on rather than folded into the weekly group class. Sessions cover the full project lifecycle:
Scoping a project that's achievable and marks well
Requirements, algorithms, and project management artefacts
Build support, debugging, and code review
Test plans, evidence, and self-assessment against the marking criteria
3 individual 1-hour sessions, booked around your schedule. Available to any enrolled student, any term.
See full pricingBeyond the weekly booklets, students work through end-of-strand topic tests and a full trial HSC exam, all built from the same syllabus mapping.
Programming for the Web · Weeks 1–10
46 marks
Secure Software Architecture · Weeks 11–22
64 marks
Software Automation · Weeks 23–30
47 marks
A comprehensive 79-mark, 2.5-hour trial exam spanning all three strands proportionally, including a final synthesis question that draws on all three at once, modelled on real HSC trial exam structure and conventions.
Download the free version