Course in Cybersecurity Standards for Military Aviation
Online 300-hour course in cybersecurity standards for military aviation. 6 modules covering RTCA DO-326A / EUROCAE ED-202A (airworthiness security), RTCA DO-356A (security methods) and Microsoft Threat Modeling Tool. Assigned tutor and open enrolment.
Take the controls.
Run a real engineering trade-off from this programme. Move the sliders, watch the model react in real time and beat the challenge.
What you will be able to do
Understand the particularities of cybersecurity in military aviation.
Interpret the applicable regulatory and accreditation framework.
Apply risk management methodologies to embedded systems.
Select proportionate technical and operational controls.
Verify the effectiveness of security measures.
Manage incidents and promote a security culture.
Develop a cybersecurity plan for an air system.
Who it's for
- Aeronautical cybersecurity engineer who wants to specialise in cybersecurity standards for military aviation.
- Systems accreditation manager who wants to specialise in cybersecurity standards for military aviation.
- Security risk analyst who wants to specialise in cybersecurity standards for military aviation.
- Incident response analyst who wants to specialise in cybersecurity standards for military aviation.
- Cybersecurity auditor who wants to specialise in cybersecurity standards for military aviation.
- Avionics security engineer who wants to specialise in cybersecurity standards for military aviation.
- Engineering or science graduates seeking to enter the defence sector.
What you'll work with
- RTCA DO-326A / EUROCAE ED-202A (airworthiness security)
- RTCA DO-356A (security methods)
- NIST SP 800-37 (risk management framework)
- RTCA DO-355 (continued airworthiness security)
- NIST SP 800-53 (security controls)
- ISO/IEC 27005 (risk management)
- Esquema Nacional de Seguridad (Real Decreto 311/2022)
6 modules · 300 h
1.1Why the aircraft is a target of interest1.2Attack surface of a fleet1.3Embedded, ground and support systems1.4Software and data supply chain1.5Difference between operational and information security1.6Threat actors and their typical capabilities1.7Public incidents and lessons learned1.8Vocabulary and acronyms in the field1.9Common myths about real risk1.10Exercise: asset inventory of a unit
2.1Airworthiness guidance against information threats2.2General standards for information security management2.3Reference control frameworks and their selection2.4Specific requirements in the defence domain2.5Information classification and handling2.6System accreditation and responsible authority2.7Contractor obligations in the programme2.8Required documentation and evidence2.9Relationship with national cybersecurity regulations2.10Practice: regulatory map of a system
3.1Identification of assets and critical functions3.2System-level threat modelling3.3Compromise scenarios and effects on the mission3.4Assessment of likelihood and impact3.5Selection of proportionate controls3.6Residual risk and its formal acceptance3.7Reassessment after configuration changes3.8Dependencies on suppliers and third parties3.9Documentation of the analysis3.10Practice: risk analysis of a capability
4.1Network segmentation and flow control4.2Identity and access management4.3Integrity and signing of software and data4.4Key and cryptographic material management4.5Hardening of equipment and configurations4.6Protection of media and data loading4.7Event logging and detection capability4.8Continuity and recovery of capability4.9Physical security of facilities and aircraft4.10Practice: design of controls for a scenario
5.1Control verification and documented testing5.2Independent assessment and its scope5.3Management of published vulnerabilities5.4Updates and their airworthiness approval5.5Fleet incident detection and response5.6Coordination with authorities and the manufacturer5.7Notification and communication during a crisis5.8Staff training and awareness5.9Maturity indicators and continuous improvement5.10Practice: incident response plan
6.1Choice of air capability and its context6.2Inventory of assets and interfaces6.3Threat modelling and risk analysis6.4Justified selection of controls6.5Verification and assessment plan6.6Vulnerability management procedure6.7Incident response plan6.8Staff training plan6.9Accreditation file report6.10Project defence
How you'll learn
Fully 100% online training on the SEIUM campus, with downloadable material, recorded classes and an assigned technical tutor. No fixed timetable: students progress at their own pace within the intake, which makes it possible to combine study with work.
Each module combines theory, guided reading of the original standard and applied exercises. The working software is Microsoft Threat Modeling Tool, Splunk, Nessus, Wireshark, in free, academic or evaluation versions. Tests are studied using real procedures for risk analysis of embedded systems, incident response exercises and security accreditation audits. Assessment is continuous by module, plus the final integrative project.
Build it end to end
Your final project follows the real engineering workflow, step by step, reviewed by your tutor.
Understand the particularities of cybersecurity in military aviation.
Interpret the applicable regulatory and accreditation framework.
Apply risk management methodologies to embedded systems.
Select proportionate technical and operational controls.
Verify the effectiveness of security measures.
Where this takes you
Requirements
- No prior degree is required.
- Internet connection and a computer capable of running the programme software.
- Sufficient Spanish to follow technical regulatory texts.
Ready to start?
Send your application today. Our admissions team replies within 72 hours with your study plan and funding options.
Frequently asked questions
The programme is 300 hours in total, spread over 3 to 5 months. That is an average of between 10 and 15 hours per week, compatible with full-time work.
The course uses Microsoft Threat Modeling Tool, Splunk, Nessus and Wireshark. Free, academic or evaluation versions are used, and the tutor indicates the free alternative where one exists.
An SEIUM own diploma upon passing the continuous assessment and the integrative project. It is in-house training, not an official qualification from the Ministry.
Yes. Modules passed in a course or postgraduate diploma in the same area can be credited towards the advanced programme. Please check the credit transfer policy when you enrol.
Related programmes
Course on electric boats and marine hybrid systems
Course on Electric Boats and Marine Hybrid Systems This course delves into the world of naval electrification, exploring electric propulsion technology and the integration of hybrid…
ISM/ISPS Onboard Audits Course
Online 300-hour course in ISM/ISPS onboard audits. 6 modules covering the ISM Code, ISPS Code and SafetyCulture. Assigned tutor and open enrolment.
ADAS Systems Validation on Public Roads Course
Online 300-hour course in ADAS systems validation on public roads. 6 modules covering ISO 21448 (SOTIF, safety of the intended functionality), ISO 26262 (functional safety for…
More in Regulation, Safety, RAMS & Homologation
All Regulation, Safety, RAMS & Homologation programmes → · How to apply · Fees & financing · Scholarships