CourseInsurance, Risk & Actuarial Data Applications open

Course in Insurance Policies for Digital Infrastructure Failures

Online 300-hour course in insurance policies for digital infrastructure failures. 6 modules covering Regulation (EU) 2022/2554 (DORA), Directive (EU) 2022/2555 (NIS2) and CyberCube. Assigned tutor and open enrolment.

Duration300 h
ModeOnline
LanguageEnglish
Start datesSet by the faculty
AwardSEIUM Institute certificate
Virtual lab · try it before you enrol

Take the controls.

Run a real engineering trade-off from this field. Move the sliders, watch the model react in real time and beat the challenge.

SIM · LIVE ●
Learning outcomes

What you will be able to do

01

Explain digital dependency and the risk of systemic failures.

02

Draft coverage and exclusions for digital infrastructure interruptions.

03

Assess cyber risk in underwriting.

04

Model cyber catastrophe scenarios and their accumulation.

05

Design reinsurance and alternative risk transfer solutions.

06

Manage claims for digital service interruptions.

07

Develop an insurance programme against digital infrastructure failures.

Profile

Who it's for

  • Cyber risk underwriter who wants to specialise in Insurance Policies for Digital Infrastructure Failures.
  • Cyber catastrophe actuary who wants to specialise in Insurance Policies for Digital Infrastructure Failures.
  • Accumulation analyst who wants to specialise in Insurance Policies for Digital Infrastructure Failures.
  • Cyber claims manager who wants to specialise in Insurance Policies for Digital Infrastructure Failures.
  • Broker specialising in cyber insurance who wants to specialise in Insurance Policies for Digital Infrastructure Failures.
  • Business continuity manager who wants to specialise in Insurance Policies for Digital Infrastructure Failures.
  • Engineering or science graduates looking to enter insurance companies.
Standards & tools

What you'll work with

  • Regulation (EU) 2022/2554 (DORA)
  • Directive (EU) 2022/2555 (NIS2)
  • Directive (EU) 2022/2557 (resilience of critical entities)
  • Lloyd’s Market Bulletin Y5381 (state-backed cyberattacks)
  • ISO 22301 (business continuity)
  • NIST Cybersecurity Framework 2.0
Syllabus

6 modules · 300 h

  1. 1.1Taxonomy of failures: outages, cyberattacks and human errors
  2. 1.2Critical digital infrastructure and the NIS2 Directive
  3. 1.3Interdependencies between cloud, networks and essential services
  4. 1.4Systemic risk and cascade effects across providers
  5. 1.5Reference incidents: CrowdStrike 2024, NotPetya, AWS us-east-1
  6. 1.6Accumulated exposure and aggregation scenarios
  7. 1.7Silent cyber and exclusions in traditional policies
  8. 1.8DORA framework for financial entities and ICT third parties
  9. 1.9Risk appetite and transfer versus retention
  10. 1.10Case study: dependency map of a logistics operator
  1. 2.1Structure of a cyber policy: first and third party
  2. 2.2Loss of profits from business interruption
  3. 2.3Contingent business interruption: providers and cloud
  4. 2.4System failure versus malicious event
  5. 2.5Waiting periods, deductibles and sublimits
  6. 2.6War and state-backed attack exclusions (LMA 5564–5567)
  7. 2.7Infrastructure clauses and power grid failure
  8. 2.8Incident response and forensic costs
  9. 2.9Data liability and GDPR penalties
  10. 2.10Workshop: comparative analysis of two market wordings
  1. 3.1Underwriting questionnaires and minimum controls
  2. 3.2External scanning and security ratings
  3. 3.3MFA, immutable backups and segmentation as requirements
  4. 3.4Assessment of ISO 22301 continuity plans
  5. 3.5Maturity under NIST CSF 2.0 and ISO/IEC 27001
  6. 3.6Risk concentration by cloud provider
  7. 3.7Pricing by sector, size and revenue
  8. 3.8Warning signs and risk declination
  9. 3.9Dialogue between underwriter, broker and insured
  10. 3.10Practice: full underwriting of an industrial SME
  1. 4.1Frequency and severity: loss distributions
  2. 4.2Claims data and its limitations
  3. 4.3Cloud catastrophe scenario models
  4. 4.4Exceedance curves and return periods
  5. 4.5Correlation and copulas in cyber portfolios
  6. 4.6Commercial tools: CyberCube, RMS, Guidewire
  7. 4.7Solvency capital and Solvency II requirements
  8. 4.8Regulatory stress tests and EIOPA scenarios
  9. 4.9Validation and sensitivity of assumptions
  10. 4.10Laboratory: Monte Carlo simulation of a cloud outage
  1. 5.1Notification and activation of the response panel
  2. 5.2Quantification of business interruption loss
  3. 5.3Forensic assessment and proof of causation
  4. 5.4Coverage disputes: Merck v. Ace
  5. 5.5Quota share and excess of loss reinsurance
  6. 5.6Catastrophe bonds and cyber ILS
  7. 5.7Public-private schemes and state backstops
  8. 5.8Subrogation against technology providers
  9. 5.9Communication with insureds and regulators
  10. 5.10Case study: settlement of a ransomware claim
  1. 6.1Selection of the organisation and scope
  2. 6.2Inventory of digital assets and dependencies
  3. 6.3Failure scenarios and impact quantification
  4. 6.4Design of limits, deductibles and sublimits
  5. 6.5Selection of acceptable coverages and exclusions
  6. 6.6Control requirements prior to binding
  7. 6.7Placement and reinsurance strategy
  8. 6.8Claims management plan
  9. 6.9Report and presentation
  10. 6.10Final review with the tutor
Methodology, software & labs

How you'll learn

100% online training on the SEIUM Institute campus, with downloadable material, recorded classes and an assigned technical tutor. There are no fixed timetables: students progress at their own pace within the intake, which makes it possible to combine the programme with work.

Each module combines theory, guided reading of the original standard and applied exercises. The working software is CyberCube, Guidewire Cyence, Kovrr, BitSight, Python (NumPy), in free, academic or evaluation versions. Case studies are based on real procedures: cloud provider outage scenarios, cyber accumulation modelling and policy wording review. Assessment is continuous, module by module, plus the final integrative project.

Accredited laboratories(EN ISO/IEC 17025) with rotor test rig, EMC/Lightning pre-compliance, HIL/SIL, vibration/acoustics.
Evidence-focused Master's Thesis:safety case, test plan, compliance dossier and operational limits.
Industry mentoring:lecturers with experience in training, , eVTOL/UAM and flight test.
Flexible format(hybrid/online), international cohorts and support from SEIUM Career Services.
Ethics and safety:safety-by-design approach, with cyber-OT, DIH and compliance as its pillars.
Capstone project

Build it end to end

Your final project follows the real engineering workflow, step by step, reviewed by your tutor.

Selection of the organisation and scope

Explain digital dependency and the risk of systemic failures.

Inventory of digital assets and dependencies

Draft coverage and exclusions for digital infrastructure interruptions.

Failure scenarios and impact quantification

Assess cyber risk in underwriting.

Design of limits, deductibles and sublimits

Model cyber catastrophe scenarios and their accumulation.

Selection of acceptable coverages and exclusions

Design reinsurance and alternative risk transfer solutions.

Career opportunities

Where this takes you

Cyber risk underwriterCyber catastrophe actuaryAccumulation analystCyber claims managerBroker specialising in cyber insuranceBusiness continuity manager
Admissions & scholarships

Requirements

  • No prior qualification is required.
  • Internet connection and a computer capable of running the programme’s software.
  • Sufficient command of Spanish to follow technical regulatory texts.

Ready to start?

Send your application today. Our admissions team replies within 72 hours with your study plan and funding options.

FAQ

Frequently asked questions

The programme comprises 300 hours in total, spread over 3 to 5 months. That is an average of 10 to 15 hours per week, compatible with a full-time job.

You will work with CyberCube, Guidewire Cyence, Kovrr, BitSight and Python (NumPy). Free, academic or evaluation versions are used, and the tutor indicates the free alternative where one exists.

An own diploma from SEIUM Institute upon passing the continuous assessment and the integrative project. It is in-house training, not an official Ministry qualification.

Yes. Modules passed in a course or postgraduate diploma in the same area can be credited towards the advanced programme. Check the credit transfer policy when you enrol.

Course in Insurance Policies for Digital Infrastructure FailuresEnrol
Scroll to Top
SEIUM – Institute of Advanced Engineering
Privacy Overview

This website uses cookies so that we can provide you with the best user experience possible. Cookie information is stored in your browser and performs functions such as recognising you when you return to our website and helping our team to understand which sections of the website you find most interesting and useful.