Diploma in NATO/EU Data Security Standards
Online postgraduate diploma of 800 hours in NATO/EU data security standards. 8 modules covering NATO and EU security frameworks, information classification, personnel and industrial security, physical security and TEMPEST, system accreditation, NIS2/GDPR/ENS compliance and incident management, with an assigned technical tutor.
Take the controls.
Run a real engineering trade-off from this field. Move the sliders, watch the model react in real time and beat the challenge.
What you will be able to do
Understand the NATO and EU information security frameworks.
Apply the classification and handling of classified information.
Manage security clearances for individuals and companies.
Implement physical, personnel, document and system security measures.
Carry out risk analyses and system accreditation processes.
Integrate the requirements of NIS2, GDPR and ENS.
Manage incidents affecting sensitive information.
Who it's for
- Information security managers.
- Security auditors of classified systems.
- Regulatory compliance consultants.
- Cybersecurity engineers.
- Data protection officers.
- System accreditation managers.
- Engineering or science graduates looking to enter the defence sector.
What you'll work with
- C-M(2002)49 (Security within NATO)
- Council Decision 2013/488/EU (protection of EU classified information)
- Directive (EU) 2022/2555 NIS2 (cybersecurity of network and information systems)
- Regulation (EU) 2016/679 GDPR (data protection)
- ISO/IEC 27001 (information security management)
- Royal Decree 311/2022 (Spain's National Security Framework, ENS)
- SDIP-27 (NATO TEMPEST standards)
- ISO/IEC 27005 (information security risk management)
- PILAR
- Microsoft Purview
- Splunk
- Wireshark
8 modules
1.1NATO security policy C-M(2002)491.2NATO supporting directives1.3EU Council security rules1.4Bilateral security agreements1.5National security authorities1.6The National Security Office in Spain1.7Relationship between frameworks1.8Responsibilities of the holder1.9Penalties for non-compliance1.10Case study: analysis of a security agreement
2.1NATO and EU classification levels2.2National equivalences2.3Classification criteria2.4Document marking2.5Declassification and reclassification2.6Sensitive unclassified information2.7Need to know2.8Registers and copy control2.9Secure destruction2.10Workshop: document marking and control
3.1Personnel security clearances3.2Security investigations3.3Training and awareness3.4Facility security clearance3.5Classified contracts3.6Project security classification guide3.7International visits3.8Transfers of classified information3.9Insider threat3.10Case study: management of a classified contract
4.1Security areas4.2Access control4.3Approved security containers4.4TEMPEST security and SDIP-274.5Equipment zoning4.6Protection against eavesdropping4.7Transport of classified material4.8Security of industrial facilities4.9Physical inspections4.10Practical exercise: zoning of a secure room
5.1Security requirements for CIS5.2Risk analysis to ISO/IEC 270055.3MAGERIT methodology5.4System-specific security requirement statement5.5Security operating procedures5.6Approved and certified products5.7Approved cryptography5.8Accreditation process5.9System interconnection5.10Lab: risk analysis with PILAR
6.1NIS2 Directive and essential entities6.2Spain's National Security Framework (ENS)6.3System categorisation6.4GDPR in defence environments6.5Law Enforcement Directive on data protection6.6Official secrets legislation6.7ISO/IEC 27001 certification6.8Interaction between frameworks6.9Compliance audits6.10Practical exercise: ENS compliance audit
7.1Reporting security compromises7.2Damage assessment7.3Incident investigation7.4CERT and CSIRT response centres7.5Coordination with authorities7.6Managing information leaks7.7Lessons learned7.8Cyber defence exercises7.9Crisis communication7.10Case study: response to a compromise of information
8.1Description of the organisation8.2Information inventory8.3Regulatory requirements8.4Risk analysis8.5Security measures8.6Accreditation plan8.7Incident management plan8.8Training programme8.9Report and presentation8.10Final project: final review with the tutor
How you'll learn
The programme is 100% online on the SEIUM campus, with downloadable material, recorded classes and an assigned technical tutor. There are no fixed timetables: you progress at your own pace within each intake, so it fits around your job.
Each module combines theory, guided reading of the original standard and applied exercises. The working software is PILAR, Microsoft Purview, Splunk and Wireshark, in free, academic or evaluation versions. Practical work is based on real procedures: risk analysis of a system handling classified information, an ENS compliance audit and drawing up an accreditation plan. Assessment is continuous by module, plus the final project.
Standards covered: C-M(2002)49, Council Decision 2013/488/EU, Directive (EU) 2022/2555 NIS2, Regulation (EU) 2016/679 GDPR, ISO/IEC 27001, Royal Decree 311/2022 (ENS), SDIP-27, ISO/IEC 27005.
Build it end to end
Your final project follows the real engineering workflow, step by step, reviewed by your tutor.
Where this takes you
Requirements
- Prior technical training or professional experience in the sector. No university degree is required.
- An internet connection and a computer capable of running the programme software.
- English sufficient to read technical standards.
Ready to start?
Send your application today. Our admissions team replies within 72 hours with your study plan and funding options.
Frequently asked questions
The programme totals 800 hours over 6–8 months. You set your own pace within each intake, and your tutor helps you plan the workload around your job.
You work with PILAR, Microsoft Purview, Splunk and Wireshark, using free, academic or evaluation versions. Your tutor indicates the free alternative wherever one exists.
A SEIUM Institute diploma, awarded on passing the continuous assessment and the final project. It is SEIUM's own qualification, not an official state degree; its recognition depends on the programme completed and the regulations of each country.
Yes. Modules passed are recognised in a higher programme in the same area (postgraduate diploma or master's). Ask about the recognition policy when you enrol.
Prior technical training or professional experience in the sector (no university degree required), a computer able to run the programme software and English sufficient to read technical standards.
Start dates are set by SEIUM's faculty for each intake. Our admissions team will confirm the next available date when you apply.
Related programmes
Diploma in Anti-Drone Standards (EU/US/NATO)
Online postgraduate diploma of 800 hours in anti-drone (C-UAS) regulations across the EU, US and NATO. 8 modules covering the drone threat, European and US regulatory…
Postgraduate Diploma in Active Protection Systems (APS) and Certification Standards
Online 800-hour Postgraduate Diploma in Active Protection Systems (APS) and Certification Standards. 8 modules covering STANAG 4569 (vehicle protection levels), MIL-STD-882E (system safety) and MATLAB/Simulink. Assigned…
Postgraduate Diploma in Undercarriage for Extreme Climates
Online postgraduate diploma of 800 hours in running gear for extreme climates, with 8 modules covering extreme environments and mobility, wheel and track terramechanics, materials for…
More in Defense, Military Engineering & Land Systems
All Defense, Military Engineering & Land Systems programmes → · How to apply · Fees & financing · Scholarships