Apply now
Master'sRobotics, Automation & Control Applications open

Master’s in OT Cybersecurity Engineering

Online master's programme of 1,900 hours in OT cybersecurity engineering, structured in 12 modules covering industrial threats, the IEC 62443 series, asset inventory and risk analysis, secure architectures, device security, detection and monitoring, patch management, OT incident response, NIS2 compliance and OT security testing, with an assigned technical tutor.

Duration1900 h
ModeOnline
LanguageEnglish
Start datesSet by the faculty
AwardSEIUM Institute diploma
Enrol now View syllabus Ask an advisor
Virtual lab · try it before you enrol

Take the controls.

Run a real engineering trade-off from this field. Move the sliders, watch the model react in real time and beat the challenge.

SIM · LIVE ●
Learning outcomes

What you will be able to do

01

Identify threats and attack vectors in industrial systems.

02

Apply the IEC 62443 series in industrial facilities.

03

Carry out OT inventories and risk analyses.

04

Design segmented, secure architectures.

05

Implement monitoring and detection in OT networks.

06

Manage incidents and patches in industrial environments.

07

Meet the requirements of NIS2 and associated regulations.

Profile

Who it's for

  • OT cybersecurity engineers protecting industrial control systems.
  • Industrial SOC analysts monitoring plant networks.
  • Industrial cybersecurity auditors assessing facilities against IEC 62443.
  • OT security architects designing segmented networks.
  • Plant security managers responsible for operational resilience.
  • NIS2 compliance consultants advising essential and important entities.
  • Engineering or science graduates seeking to enter the energy sector.
Standards & tools

What you'll work with

  • IEC 62443-3-3:2013 (system security requirements and security levels)
  • IEC 62443-3-2:2020 (security risk assessment for system design)
  • Directive (EU) 2022/2555 (NIS2) (cybersecurity across the Union)
  • IEC 62443-4-2:2019 (security requirements for IACS components)
  • NIST SP 800-82 Rev. 3 (guide to OT security)
  • ISO/IEC 27019:2017 (information security controls for the energy utility industry)
  • Regulation (EU) 2024/2847 (Cyber Resilience Act)
  • ISO/IEC 27001:2022 (information security management systems)
  • Wireshark
  • Zeek
  • Nozomi Guardian
  • Claroty
  • GRASSMARLIN
Syllabus

12 modules · 1900 h

  1. 1.1Components of control systems
  2. 1.2Security differences between IT and OT
  3. 1.3Historic attacks: Stuxnet and Triton
  4. 1.4Threat actors in industry
  5. 1.5The MITRE ATT&CK for ICS framework
  6. 1.6Common attack vectors
  7. 1.7Impact on safety and production
  8. 1.8OT threat intelligence
  9. 1.9Industrial ransomware trends
  10. 1.10Case study: analysis of a public incident
  1. 2.1Structure of the series
  2. 2.2Roles: asset owner, integrator and manufacturer
  3. 2.3Foundational requirements (FR)
  4. 2.4Security levels (SL)
  5. 2.5Zones and conduits
  6. 2.6Risk assessment 62443-3-2
  7. 2.7System requirements 62443-3-3
  8. 2.8Secure development 62443-4-1
  9. 2.9Product certification
  10. 2.10Practical exercise: defining zones and conduits
  1. 3.1OT asset inventory
  2. 3.2Passive asset discovery
  3. 3.3Network and flow diagrams
  4. 3.4Vulnerability analysis
  5. 3.5CVSS scoring in OT
  6. 3.6Consequence analysis
  7. 3.7Risk matrix
  8. 3.8Prioritising measures
  9. 3.9Documenting the analysis
  10. 3.10Lab: passive inventory with open-source tools
  1. 4.1The Purdue model and its evolution
  2. 4.2Designing industrial DMZs
  3. 4.3Firewalls and data diodes
  4. 4.4Segmentation with VLANs
  5. 4.5Microsegmentation of OT networks
  6. 4.6Secure remote access
  7. 4.7Jump servers and bastion hosts
  8. 4.8Protecting historians
  9. 4.9Secure cloud architectures
  10. 4.10Workshop: industrial DMZ design
  1. 5.1PLC hardening
  2. 5.2Security of HMIs and workstations
  3. 5.3Application whitelisting
  4. 5.4Account and password management
  5. 5.5USB port protection
  6. 5.6Firmware and its integrity
  7. 5.7Security of industrial protocols
  8. 5.8Secure OPC UA
  9. 5.9Protecting wireless networks
  10. 5.10Practical exercise: hardening an engineering workstation
  1. 6.1IDS systems for OT
  2. 6.2Deep protocol inspection
  3. 6.3Anomaly detection
  4. 6.4SIEM and OT correlation
  5. 6.5Security operations centres
  6. 6.6Indicators of compromise
  7. 6.7Industrial research honeypots
  8. 6.8Traffic analysis with Zeek
  9. 6.9Alert tuning
  10. 6.10Lab: detecting anomalous Modbus commands
  1. 7.1The patch management cycle
  2. 7.2Testing in pre-production environments
  3. 7.3Coordination with manufacturers
  4. 7.4Compensating controls without patching
  5. 7.5ICS-CERT and CISA advisories
  6. 7.6Obsolescence management
  7. 7.7Software bill of materials
  8. 7.8Maintenance windows
  9. 7.9Programme indicators
  10. 7.10Case study: patch plan for a plant
  1. 8.1Response plans in OT
  2. 8.2Teams and roles
  3. 8.3Containment without stopping the plant
  4. 8.4Forensics on control systems
  5. 8.5Configuration recovery
  6. 8.6Incident communication
  7. 8.7Notification under NIS2
  8. 8.8Simulation exercises
  9. 8.9Lessons-learned analysis
  10. 8.10Practical exercise: ransomware tabletop exercise
  1. 9.1Requirements of the NIS2 Directive
  2. 9.2The Cyber Resilience Act
  3. 9.3The Machinery Regulation and cybersecurity
  4. 9.4Critical infrastructure in Spain
  5. 9.5Spain's National Security Framework (ENS)
  6. 9.6ISO/IEC 27001 and 27019 standards
  7. 9.7NIST SP 800-82
  8. 9.8Compliance audits
  9. 9.9Cybersecurity governance
  10. 9.10Case study: NIS2 gap analysis
  1. 10.1Governance and responsibilities
  2. 10.2Policies and procedures
  3. 10.3Staff awareness
  4. 10.4Supplier management
  5. 10.5Indicators and maturity
  6. 10.6C2M2 maturity models
  7. 10.7Budget and return
  8. 10.8Integration with physical security
  9. 10.9Roadmap
  10. 10.10Workshop: cybersecurity roadmap
  1. 11.1Penetration testing in OT
  2. 11.2Precautions in production environments
  3. 11.3Test labs and twins
  4. 11.4Testing industrial protocols
  5. 11.5Device fuzzing
  6. 11.6Configuration assessment
  7. 11.7Ethical red teaming
  8. 11.8Reporting and remediation
  9. 11.9Legal and ethical aspects
  10. 11.10Case study: audit in a PLC lab
  1. 12.1Characterisation of the facility
  2. 12.2Inventory and risk analysis
  3. 12.3Proposed security architecture
  4. 12.4Technical and organisational measures
  5. 12.5Detection and response
  6. 12.6Regulatory compliance plan
  7. 12.7Maturity assessment
  8. 12.8Conclusions and roadmap
  9. 12.9Master's Thesis report
  10. 12.10Master's Thesis: defence before a panel
Methodology, software & labs

How you'll learn

Training is 100% online on the SEIUM campus, with downloadable material, recorded classes and an assigned technical tutor. There are no fixed timetables: you progress at your own pace within the intake, so it is compatible with full-time work.

Each module combines theory, guided reading of the original standard and applied exercises. The working software is Wireshark, Zeek, Nozomi Guardian, Claroty and GRASSMARLIN, in free, academic or evaluation versions. Exercises are based on real procedures for IEC 62443 risk analysis, industrial network monitoring and incident response exercises. Assessment is continuous by module, plus the final Master's Thesis.

Standards covered: IEC 62443-3-3:2013, IEC 62443-3-2:2020, Directive (EU) 2022/2555 (NIS2), IEC 62443-4-2:2019, NIST SP 800-82 Rev. 3, ISO/IEC 27019:2017, Regulation (EU) 2024/2847, ISO/IEC 27001:2022.

Assigned technical tutor:every module ends with a deliverable that your tutor marks individually.
Standards-based learning:guided reading of IEC 62443, NIS2 and NIST SP 800-82 applied to real cases, not as a theoretical annex.
Industry software:Wireshark, Zeek, Nozomi Guardian, Claroty and GRASSMARLIN, in free, academic or evaluation versions.
Master's Thesis with defence:A complete OT cybersecurity plan for an industrial facility, defended before a panel.
Flexible format:100% online, no fixed timetables, compatible with full-time work.
Capstone project

Build it end to end

Your final project follows the real engineering workflow, step by step, reviewed by your tutor.

Characterise the facility
Build the asset inventory and carry out an IEC 62443-3-2 risk analysis.
Design the security architecture
Define zones, conduits, DMZ and secure remote access for the plant.
Set up detection and response
Specify OT monitoring, alerting and an incident response plan.
Plan compliance and maturity
Prepare a NIS2 compliance plan, maturity assessment and roadmap.
Master's Thesis
A complete OT cybersecurity plan for an industrial facility, defended before a panel.
Career opportunities

Where this takes you

OT cybersecurity engineerIndustrial SOC analystIndustrial cybersecurity auditorOT security architectPlant security managerNIS2 compliance consultant
Admissions & scholarships

Requirements

  • A university degree in engineering, science or architecture, or equivalent demonstrable professional experience.
  • An internet connection and a computer capable of running the programme software.
  • English sufficient to read technical standards.

Ready to start?

Send your application today. Our admissions team replies within 72 hours with your study plan and funding options.

Apply now Scholarships
FAQ

Frequently asked questions

The programme totals 1,900 hours over 12–14 months. You set your own pace within each intake, and your tutor helps you plan the workload around your job.

You work with Wireshark, Zeek, Nozomi Guardian, Claroty and GRASSMARLIN, using free, academic or evaluation versions. Your tutor indicates the free alternative wherever one exists.

A SEIUM Institute diploma, awarded on passing the continuous assessment and the Master's Thesis. It is SEIUM's own qualification, not an official state degree; its recognition depends on the programme completed and the regulations of each country.

Yes. Modules passed in a course or postgraduate diploma in the same area are recognised in the higher programme. Ask about the recognition policy when you enrol.

A university degree in engineering, science or architecture (or equivalent professional experience), a computer able to run the programme software, and English sufficient to read technical standards.

Start dates are set by SEIUM's faculty for each intake. Our admissions team will confirm the next available date when you apply.

Keep exploring

Related programmes

See all in Robotics, Automation & Control
Master's9,970 $

Master’s in Vision, Metrology & Edge AI Engineering

Online master's programme of 1,900 hours in vision, metrology and edge AI engineering. 12 modules covering industrial machine vision, image processing, dimensional metrology, 3D vision, deep…

1900 hOnlineRobotics, Automation & Control
Master's8,850 $

Master’s in 3D Vision for Metrology Engineering

Online master's programme of 1,900 hours in 3D vision engineering for metrology, structured in 12 modules covering calibration, 3D acquisition, point cloud processing, CAD comparison, measurement…

1900 hOnlineRobotics, Automation & Control
Master's8,850 $

Master’s in Industrial Exoskeletons and Ergonomics Engineering

Online master's programme of 1,900 hours in industrial exoskeletons and ergonomics engineering. 12 modules covering industrial exoskeletons, human biomechanics, ergonomics and musculoskeletal disorders, mechanical design, actuation…

1900 hOnlineRobotics, Automation & Control
Master’s in OT Cybersecurity EngineeringEnrol
Related programmes

More in Robotics, Automation & Control

Master’s in Nonlinear and Fault-Tolerant Control EngineeringView programme →Master’s in Multi-Brand Robot Programming EngineeringView programme →Master’s in Human-Robot Interaction EngineeringView programme →Master’s in Lean Six Sigma for Automated Lines EngineeringView programme →Master’s in Robotic Cell Safety EngineeringView programme →Master’s in Pharma & Biotech Automation EngineeringView programme →

All Robotics, Automation & Control programmes → · How to apply · Fees & financing · Scholarships

Scroll to Top
SEIUM – Institute of Advanced Engineering
Powered by  GDPR Cookie Compliance
Privacy Overview

This website uses cookies so that we can provide you with the best user experience possible. Cookie information is stored in your browser and performs functions such as recognising you when you return to our website and helping our team to understand which sections of the website you find most interesting and useful.