Course in Insurance Policies for Digital Infrastructure Failures
Online 300-hour course in insurance policies for digital infrastructure failures. 6 modules covering Regulation (EU) 2022/2554 (DORA), Directive (EU) 2022/2555 (NIS2) and CyberCube. Assigned tutor and open enrolment.
Take the controls.
Run a real engineering trade-off from this field. Move the sliders, watch the model react in real time and beat the challenge.
What you will be able to do
Explain digital dependency and the risk of systemic failures.
Draft coverage and exclusions for digital infrastructure interruptions.
Assess cyber risk in underwriting.
Model cyber catastrophe scenarios and their accumulation.
Design reinsurance and alternative risk transfer solutions.
Manage claims for digital service interruptions.
Develop an insurance programme against digital infrastructure failures.
Who it's for
- Cyber risk underwriter who wants to specialise in Insurance Policies for Digital Infrastructure Failures.
- Cyber catastrophe actuary who wants to specialise in Insurance Policies for Digital Infrastructure Failures.
- Accumulation analyst who wants to specialise in Insurance Policies for Digital Infrastructure Failures.
- Cyber claims manager who wants to specialise in Insurance Policies for Digital Infrastructure Failures.
- Broker specialising in cyber insurance who wants to specialise in Insurance Policies for Digital Infrastructure Failures.
- Business continuity manager who wants to specialise in Insurance Policies for Digital Infrastructure Failures.
- Engineering or science graduates looking to enter insurance companies.
What you'll work with
- Regulation (EU) 2022/2554 (DORA)
- Directive (EU) 2022/2555 (NIS2)
- Directive (EU) 2022/2557 (resilience of critical entities)
- Lloyd’s Market Bulletin Y5381 (state-backed cyberattacks)
- ISO 22301 (business continuity)
- NIST Cybersecurity Framework 2.0
6 modules · 300 h
1.1Taxonomy of failures: outages, cyberattacks and human errors1.2Critical digital infrastructure and the NIS2 Directive1.3Interdependencies between cloud, networks and essential services1.4Systemic risk and cascade effects across providers1.5Reference incidents: CrowdStrike 2024, NotPetya, AWS us-east-11.6Accumulated exposure and aggregation scenarios1.7Silent cyber and exclusions in traditional policies1.8DORA framework for financial entities and ICT third parties1.9Risk appetite and transfer versus retention1.10Case study: dependency map of a logistics operator
2.1Structure of a cyber policy: first and third party2.2Loss of profits from business interruption2.3Contingent business interruption: providers and cloud2.4System failure versus malicious event2.5Waiting periods, deductibles and sublimits2.6War and state-backed attack exclusions (LMA 5564–5567)2.7Infrastructure clauses and power grid failure2.8Incident response and forensic costs2.9Data liability and GDPR penalties2.10Workshop: comparative analysis of two market wordings
3.1Underwriting questionnaires and minimum controls3.2External scanning and security ratings3.3MFA, immutable backups and segmentation as requirements3.4Assessment of ISO 22301 continuity plans3.5Maturity under NIST CSF 2.0 and ISO/IEC 270013.6Risk concentration by cloud provider3.7Pricing by sector, size and revenue3.8Warning signs and risk declination3.9Dialogue between underwriter, broker and insured3.10Practice: full underwriting of an industrial SME
4.1Frequency and severity: loss distributions4.2Claims data and its limitations4.3Cloud catastrophe scenario models4.4Exceedance curves and return periods4.5Correlation and copulas in cyber portfolios4.6Commercial tools: CyberCube, RMS, Guidewire4.7Solvency capital and Solvency II requirements4.8Regulatory stress tests and EIOPA scenarios4.9Validation and sensitivity of assumptions4.10Laboratory: Monte Carlo simulation of a cloud outage
5.1Notification and activation of the response panel5.2Quantification of business interruption loss5.3Forensic assessment and proof of causation5.4Coverage disputes: Merck v. Ace5.5Quota share and excess of loss reinsurance5.6Catastrophe bonds and cyber ILS5.7Public-private schemes and state backstops5.8Subrogation against technology providers5.9Communication with insureds and regulators5.10Case study: settlement of a ransomware claim
6.1Selection of the organisation and scope6.2Inventory of digital assets and dependencies6.3Failure scenarios and impact quantification6.4Design of limits, deductibles and sublimits6.5Selection of acceptable coverages and exclusions6.6Control requirements prior to binding6.7Placement and reinsurance strategy6.8Claims management plan6.9Report and presentation6.10Final review with the tutor
How you'll learn
100% online training on the SEIUM Institute campus, with downloadable material, recorded classes and an assigned technical tutor. There are no fixed timetables: students progress at their own pace within the intake, which makes it possible to combine the programme with work.
Each module combines theory, guided reading of the original standard and applied exercises. The working software is CyberCube, Guidewire Cyence, Kovrr, BitSight, Python (NumPy), in free, academic or evaluation versions. Case studies are based on real procedures: cloud provider outage scenarios, cyber accumulation modelling and policy wording review. Assessment is continuous, module by module, plus the final integrative project.
Build it end to end
Your final project follows the real engineering workflow, step by step, reviewed by your tutor.
Explain digital dependency and the risk of systemic failures.
Draft coverage and exclusions for digital infrastructure interruptions.
Assess cyber risk in underwriting.
Model cyber catastrophe scenarios and their accumulation.
Design reinsurance and alternative risk transfer solutions.
Where this takes you
Requirements
- No prior qualification is required.
- Internet connection and a computer capable of running the programme’s software.
- Sufficient command of Spanish to follow technical regulatory texts.
Ready to start?
Send your application today. Our admissions team replies within 72 hours with your study plan and funding options.
Frequently asked questions
The programme comprises 300 hours in total, spread over 3 to 5 months. That is an average of 10 to 15 hours per week, compatible with a full-time job.
You will work with CyberCube, Guidewire Cyence, Kovrr, BitSight and Python (NumPy). Free, academic or evaluation versions are used, and the tutor indicates the free alternative where one exists.
An own diploma from SEIUM Institute upon passing the continuous assessment and the integrative project. It is in-house training, not an official Ministry qualification.
Yes. Modules passed in a course or postgraduate diploma in the same area can be credited towards the advanced programme. Check the credit transfer policy when you enrol.
Related programmes
Course in Motor Insurance Loss Assessment
Online 300-hour course in motor insurance loss assessment. 6 modules covering Royal Legislative Decree 8/2004 (civil liability and motor vehicle insurance), Law 35/2015 (traffic valuation table)…
Blockchain in Claims Management Course
Online 300-hour course in blockchain for claims management. 6 modules covering Regulation (EU) 910/2014 (eIDAS), Regulation (EU) 2024/1183 (European digital identity) and Hyperledger Besu. Assigned tutor…
Course in Fraud Detection Through Telematics
300-hour online course in fraud detection through telematics. 6 modules covering Regulation (EU) 2016/679 (GDPR), Law 20/2015 (LOSSEAR, common anti-fraud files) and Python (scikit-learn). Assigned tutor…
More in Insurance, Risk & Actuarial Data
All Insurance, Risk & Actuarial Data programmes → · How to apply · Fees & financing · Scholarships