Apply now
CourseEnergy and Networks Applications open

NIS2 Compliance Course for the Energy Sector

Online 300-hour course in NIS2 compliance for the energy sector. 6 modules covering Directive (EU) 2022/2555 (NIS2), Implementing Regulation (EU) 2024/2690 and Eramba. Assigned tutor and open enrolment.

Duration300 h
ModeOnline
Start datesSet by the faculty
AwardSEIUM Institute certificate
Enrol now View syllabus Ask an advisor
Virtual lab · try it before you enrol

Take the controls.

Run a real engineering trade-off from this field. Move the sliders, watch the model react in real time and beat the challenge.

SIM · LIVE ●
Learning outcomes

What you will be able to do

01

Interpret the scope and obligations of the NIS2 Directive in the energy sector.

02

Determine whether an entity is essential or important.

03

Apply the risk management measures required by Article 21.

04

Design governance models with management body accountability.

05

Establish incident reporting procedures within the required deadlines.

06

Relate NIS2 to ISO/IEC 27001, IEC 62443 and the cybersecurity network code.

07

Draft a NIS2 compliance plan for an energy company.

Profile

Who it's for

  • Regulatory compliance manager who wants to specialise in NIS2 Compliance in the energy sector.
  • CISO of an energy company who wants to specialise in NIS2 Compliance in the energy sector.
  • Regulatory cybersecurity consultant who wants to specialise in NIS2 Compliance in the energy sector.
  • Information security auditor who wants to specialise in NIS2 Compliance in the energy sector.
  • GRC analyst who wants to specialise in NIS2 Compliance in the energy sector.
  • Legal adviser in cybersecurity who wants to specialise in NIS2 Compliance in the energy sector.
  • Engineering or science graduates seeking to enter electricity and gas utilities.
Standards & tools

What you'll work with

  • Directive (EU) 2022/2555 (NIS2)
  • Implementing Regulation (EU) 2024/2690
  • Delegated Regulation (EU) 2024/1366 (cybersecurity network code)
  • Directive (EU) 2022/2557 (CER)
  • ISO/IEC 27001
  • ISO/IEC 27019
  • IEC 62443
  • Royal Decree 311/2022 (Esquema Nacional de Seguridad)
Syllabus

6 modules · 300 h

  1. 1.1Background: from NIS to NIS2
  2. 1.2Scope of application and size criterion
  3. 1.3Essential and important entities
  4. 1.4Energy subsectors included
  5. 1.5Transposition in Member States
  6. 1.6Relationship with the CER Directive on resilience
  7. 1.7Relationship with the electricity cybersecurity network code
  8. 1.8Competent authorities and CSIRTs
  9. 1.9European cooperation and ENISA
  10. 1.10Workshop: determining the category of an energy company
  1. 2.1Risk analysis and security policies
  2. 2.2Incident handling
  3. 2.3Business continuity and crisis management
  4. 2.4Supply chain security
  5. 2.5Security in acquisition, development and maintenance
  6. 2.6Assessment of measure effectiveness
  7. 2.7Cyber hygiene and training
  8. 2.8Cryptography and encryption
  9. 2.9Access control, asset management and multi-factor authentication
  10. 2.10Practice: gap analysis against Article 21
  1. 3.1Accountability of management bodies
  2. 3.2Mandatory training for management
  3. 3.3Roles of the CISO and the security committee
  4. 3.4Integration into enterprise risk management
  5. 3.5Documented policies and procedures
  6. 3.6Third-party management and contracts
  7. 3.7Reporting to the board of directors
  8. 3.8Penalty and fine regime
  9. 3.9Ex ante and ex post supervision
  10. 3.10Case study: governance model for a distribution company
  1. 4.1Definition of significant incident
  2. 4.2Early warning within 24 hours
  3. 4.3Notification within 72 hours
  4. 4.4Final report within one month
  5. 4.5Impact criteria for energy supply
  6. 4.6Coordination with the relevant CSIRT
  7. 4.7Communication to affected users
  8. 4.8Incident records and evidence
  9. 4.9Voluntary reporting of near misses
  10. 4.10Case study: incident notification at a retailer
  1. 5.1Mapping to ISO/IEC 27001
  2. 5.2National Security Scheme (Esquema Nacional de Seguridad)
  3. 5.3IEC 62443 series for control systems
  4. 5.4NIST CSF 2.0 framework
  5. 5.5Assessment of critical suppliers
  6. 5.6Compliance and maturity indicators
  7. 5.7Internal and external audits
  8. 5.8GRC tools for compliance management
  9. 5.9Staff awareness plan
  10. 5.10Laboratory: NIS2 control matrix mapped to ISO 27001
  1. 6.1Entity characterisation
  2. 6.2Determination of scope and category
  3. 6.3Gap analysis
  4. 6.4Risk treatment plan
  5. 6.5Governance model
  6. 6.6Incident reporting procedure
  7. 6.7Implementation plan and budget
  8. 6.8Compliance dashboard
  9. 6.9Report and presentation
  10. 6.10Final review with the tutor
Methodology, software & labs

How you'll learn

100 % online training on the SEIUM Institute campus, with downloadable material, recorded classes and an assigned technical tutor. There are no fixed timetables: students progress at their own pace within the intake, making it possible to combine study with work.

Each module combines theory, guided reading of the original standard and applied exercises. The working software is Eramba, GLPI, Microsoft Purview Compliance Manager, PILAR, Archer, in free, academic or evaluation versions. Case studies cover real gap analysis procedures for an energy company against NIS2, drafting an incident notification procedure, and designing a cybersecurity governance model. Assessment is continuous per module, plus the final integrative project.

Accredited laboratories(EN ISO/IEC 17025) with a rotor test rig, EMC/Lightning pre-compliance, HIL/SIL, vibration/acoustics.
Evidence-oriented Master's Thesis:safety case, test plan, compliance dossier and operational limits.
Industry mentoring:lecturers with experience in training, , eVTOL/UAM and flight test.
Flexible format(hybrid/online), international cohorts and support from SEIUM Career Services.
Ethics and safety:safety-by-design approach, OT cyber, DIH and compliance as pillars.
Capstone project

Build it end to end

Your final project follows the real engineering workflow, step by step, reviewed by your tutor.

Entity characterisation

Interpret the scope and obligations of the NIS2 Directive in the energy sector.

Determination of scope and category

Determine whether an entity is essential or important.

Gap analysis

Apply the risk management measures required by Article 21.

Risk treatment plan

Design governance models with management body accountability.

Governance model

Establish incident reporting procedures within the required deadlines.

Career opportunities

Where this takes you

Regulatory compliance managerCISO of an energy companyRegulatory cybersecurity consultantInformation security auditorGRC analystLegal adviser in cybersecurity
Admissions & scholarships

Requirements

  • No prior degree required.
  • Internet connection and a computer capable of running the programme's software.
  • Spanish language level sufficient to follow technical regulatory texts.

Ready to start?

Send your application today. Our admissions team replies within 72 hours with your study plan and funding options.

Apply now Scholarships
FAQ

Frequently asked questions

The programme totals 300 hours, spread over 3 to 5 months. That is an average of 10 to 15 hours per week, compatible with a full-time job.

The course uses Eramba, GLPI, Microsoft Purview Compliance Manager, PILAR, Archer. Free, academic or evaluation versions are used, and the tutor indicates the free alternative where one exists.

A SEIUM Institute own diploma upon passing the continuous assessment and the integrative project. It is in-house training, not an official Ministry qualification.

Yes. Modules passed in a course or postgraduate diploma in the same area are recognised towards the advanced programme. Please check the recognition policy when you enrol.

Keep exploring

Related programmes

See all in Energy and Networks
Course890 $

Airport Electrification Course

Online 300-hour course in airport electrification. 6 modules covering Regulation (EU) 2023/1804 (AFIR), ICAO Annex 14 and ETAP. Assigned tutor and open enrolment.

300 hOnlineEnergy and Networks
Course890 $

EMS Course in Hybrid Renewable Plants

Online 300-hour course in EMS for hybrid renewable plants. 6 modules covering Regulation (EU) No 1227/2011 (wholesale energy market integrity and transparency, REMIT), Regulation (EU) 2017/2195…

300 hOnlineEnergy and Networks
Course830 $

Dynamic Electricity Pricing Course

Online 300-hour course in dynamic electricity pricing. 6 modules covering Directive (EU) 2019/944, CNMC Circular 3/2020 and Python (pandas). Assigned tutor and open enrolment.

300 hOnlineEnergy and Networks
NIS2 Compliance Course for the Energy SectorEnrol
Related programmes

More in Energy and Networks

Port Electrification (Cold-Ironing) CourseView programme →Course in Digital Substations with IEC 61850View programme →HVDC Transmission Fundamentals CourseView programme →Smart Metering and AMI Data Analytics CourseView programme →Course on PEM and Alkaline ElectrolysersView programme →Course in Converter Control for Renewable EnergiesView programme →

All Energy and Networks programmes → · How to apply · Fees & financing · Scholarships

Scroll to Top
SEIUM – Institute of Advanced Engineering
Powered by  GDPR Cookie Compliance
Privacy Overview

This website uses cookies so that we can provide you with the best user experience possible. Cookie information is stored in your browser and performs functions such as recognising you when you return to our website and helping our team to understand which sections of the website you find most interesting and useful.