HSC

NSW · NESA2026

HSC Software Engineering: complete 2026 guide to the four Year 12 modules and the exam

A complete 2026 guide to the new HSC Software Engineering course. The four Year 12 modules (Secure Software Architecture, Programming for the Web, Software Automation, Software Engineering Project), exam structure, scaling, study strategy, and links to every dot point answer we have.

HSC Software Engineering is the new NESA course that replaced Software Design and Development from 2024. It is the most contemporary HSC technology course on offer, with a syllabus that explicitly covers cyber security, machine learning, and modern software engineering practice.

This page is the index. Below: topic breakdown, exam structure, scaling, study strategy, and links to every dot point answer we have for HSC Software Engineering in 2026.

The four HSC Software Engineering modules

Module 1: Secure Software Architecture
Designing software with the CIA triad (confidentiality, integrity, availability) baked in. Authentication and authorisation. Encryption (symmetric, asymmetric, hashing). The OWASP Top 10 web application vulnerabilities. Input validation and sanitisation. The secure development lifecycle.
Module 2: Programming for the Web
The client-server model and the request-response cycle. HTTP and HTTPS. Front-end fundamentals (HTML, CSS, JavaScript). Server-side languages. Relational databases and SQL. APIs and REST. JSON. Web vulnerabilities (XSS, CSRF, SQL injection).
Module 3: Software Automation
What machine learning is and how it differs from classical programming. Supervised, unsupervised and reinforcement learning. Neural networks at a conceptual level. Training data, overfitting, and algorithmic bias. Applications in industry. Ethical considerations.
Module 4: Software Engineering Project
Software development methodologies (waterfall, agile, scrum). Version control with Git. Project management tools. Testing strategies (unit, integration, system, acceptance). Documentation. Continuous integration and deployment. Code review practices.

Exam structure

HSC Software Engineering is sat as a single 3-hour paper plus 5 minutes reading time.

  • Section I: Objective response (20 multiple choice questions for 20 marks)
  • Section II: Short answer (about 10 questions for 60 marks across all four modules)
  • Section III: Extended response (one or two questions for 20 marks, often requiring integration across modules)

Expect short code snippets in every section. You will be asked to predict output, identify bugs, and write small functions. SQL queries appear in the database part of Module 2. Conceptual questions on machine learning and ethics dominate Module 3.

How Software Engineering scales (2026)

Scaling data is still firming up because the course is new (first examined in 2024). Provisional estimates place Software Engineering at a mean scaled mark per unit of around 28-31 out of 50. For comparison:

  • Physics: 33-34
  • Maths Advanced: 32-33
  • Software Engineering: 28-31 (provisional)
  • Engineering Studies: 27-29

A raw HSC mark of 90 in Software Engineering currently scales to approximately 38-40 per unit. Treat these figures as provisional until two or three more cohorts have completed the course.

Use our HSC ATAR calculator to test how Software Engineering fits your subject mix.

Our 2026 HSC Software Engineering guides

Syllabus, dot point by dot point

For NESA dot-point-level coverage, every Module 1-4 dot point we have shipped has its own focused answer page with worked past exam questions and cross-links to related points.

Browse the full set at /hsc/software-engineering/syllabus.

Study strategy

Software Engineering rewards a combination of conceptual fluency and hands-on coding practice. The recipe:

  1. Code every week. Open a Python interpreter and write something every week. Five lines of code a day beats five hours on the weekend. Practical fluency is what separates Band 6 students from Band 4 students.
  2. Build one full-stack project. A small web app (HTML front-end, Python or Node back-end, SQLite database) covers most of Module 2 in one project. Push it to GitHub to also cover Module 4.
  3. Memorise the OWASP Top 10. This is the most reliably-examined list in Module 1. Be able to define each, give an example, and state a mitigation.
  4. Practise SQL on a real database. Use a free service like SQLite or PostgreSQL. Write SELECT, INSERT, UPDATE, DELETE, JOIN and aggregate queries until they are automatic.
  5. Read the ethics literature. Module 3 ethics questions reward students who can cite real cases (Amazon's hiring algorithm, COMPAS recidivism, Apple Card credit limits). Read at least three case studies.
  6. Practise past papers from Term 3 onwards. The course is new, so past paper supply is limited (2024, 2025). Supplement with sample papers from NESA and other published resources.

System context

HSC Software Engineering sits inside the wider HSC system. Related explainers:

For the official syllabus

NESA publishes the full syllabus and sample papers at educationstandards.nsw.edu.au. The Software Engineering Stage 6 syllabus was published in 2022, taught from 2023, and first examined in 2024.

The HSC system, explained

See all →

Common questions about Software Engineering

What is HSC Software Engineering and when did it start?
HSC Software Engineering is a 2-unit NESA course that replaced Software Design and Development from 2024. The Year 12 syllabus has four modules. Module 1 (Secure Software Architecture) covers security principles, OWASP, encryption and authentication. Module 2 (Programming for the Web) covers front-end, back-end, databases and APIs. Module 3 (Software Automation) covers machine learning, AI and neural networks. Module 4 (Software Engineering Project) covers project management, version control, testing and deployment. The exam is 3 hours and 100 marks.
How is HSC Software Engineering examined?
The exam is a single 3-hour paper plus 5 minutes reading time, worth 100 marks. The paper has three sections. Section I is 20 multiple choice questions for 20 marks. Section II is short answer for 60 marks across roughly 10 questions covering all four modules. Section III is one or two extended response questions for 20 marks, typically requiring integration across modules. There are no calculators required, but you should be comfortable reading and writing short code snippets in pseudocode or a familiar language.
How does HSC Software Engineering scale for ATAR?
Scaling data is limited because the course is new. Early indications place Software Engineering close to the old Software Design and Development scaling, in the mid 20s to low 30s mean scaled mark per unit out of 50. A raw 90 likely scales to around 38-40. Scaling will firm up as several cohorts complete the course. The cohort is generally mathematically capable but smaller than the major sciences, which compresses the top bands.
Do I need to know how to code for this course?
Yes. You need to read and write code confidently in at least one general-purpose language (Python is the most common choice in NSW schools). The exam asks you to read code snippets, predict output, identify bugs, and write short functions. For the Software Engineering Project module you also need to use version control (Git) and follow a development methodology. Strong programmers find the course straightforward, weak programmers struggle even with strong content knowledge.
Is Software Engineering required for a Computer Science degree?
No university in Australia currently lists HSC Software Engineering as a prerequisite for Computer Science or Software Engineering degrees. Mathematics Advanced (and ideally Extension 1) are the typical recommendations. However, HSC Software Engineering does give you a strong head start in first-year courses on data structures, web development, and software engineering practice, and is excellent preparation for the practical side of a CS degree.
What programming language should I use in HSC Software Engineering?
NESA is language-agnostic. Most NSW schools teach Python, and most exam code examples are written in Python or pseudocode. JavaScript appears in the Programming for the Web module (because of the browser). SQL appears for databases. You will see all three in the exam. Pick one general-purpose language to master (Python is the easiest choice for the Software Automation module because of its ML libraries) and treat the others as read-only.