Course in Security Auditing of Telematics Systems
Online 300-hour course in security auditing of telematics systems. 6 modules covering ISO/SAE 21434 (cybersecurity for road vehicles), UN Regulation No. 155 (cybersecurity) and Wireshark. Assigned tutor and open enrolment.
Take the controls.
Run a real engineering trade-off from this field. Move the sliders, watch the model react in real time and beat the challenge.
What you will be able to do
Describe the architecture of a vehicle and fleet telematics system and its interfaces.
Identify the exposure surface across the device, communications, cloud and applications.
Apply an authorised audit methodology covering scope, rules of engagement and traceability.
Relate findings to the requirements of ISO/SAE 21434 and UN Regulations No. 155 and 156.
Prioritise vulnerabilities according to their impact on safety, privacy and continuity.
Write an audit report with a remediation and verification plan.
Carry out a complete audit of a telematics environment in a laboratory setting.
Who it's for
- Embedded systems cybersecurity auditor who wants to specialise in security auditing of telematics systems.
- IoT security analyst who wants to specialise in security auditing of telematics systems.
- Automotive cybersecurity engineer who wants to specialise in security auditing of telematics systems.
- NIS2 compliance consultant who wants to specialise in security auditing of telematics systems.
- Security manager for telematics platforms who wants to specialise in security auditing of telematics systems.
- Penetration tester of connected systems who wants to specialise in security auditing of telematics systems.
- Graduates in engineering or sciences seeking to enter the automotive sector.
What you'll work with
- ISO/SAE 21434 (cybersecurity for road vehicles)
- UN Regulation No. 155 (cybersecurity)
- UN Regulation No. 156 (software updates)
- ISO/IEC 27001
- ETSI EN 303 645 (IoT cybersecurity)
- Directive (EU) 2022/2555 (NIS2)
- OWASP IoT Top 10
6 modules · 300 h
1.1Architecture of a telematics system1.2On-board device and its connection1.3Mobile communications and platform1.4Data collected and its purpose1.5Integration with fleet management1.6Stakeholders: manufacturer, supplier and operator1.7Field vocabulary and acronyms1.8Legitimate and questionable uses1.9Critical system dependencies1.10Exercise: component map of a system
2.1Interface with the vehicle bus2.2Devices connected to the diagnostic port2.3Communications channel and its protection2.4Cloud platform and its access2.5Associated mobile applications2.6Interfaces with third parties2.7Supplier supply chain2.8Device updates2.9Internal users and their permissions2.10Practice: exposure surface inventory
3.1Scope, criteria and rules of conduct3.2Written authorisation from the owner3.3Document and architecture review3.4Interviews with managers3.5Review of configuration and access3.6Review of logs and monitoring3.7Testing in a controlled environment3.8Evidence and its custody3.9Classification of findings by risk3.10Practice: audit plan for a system
4.1Vehicle cybersecurity regulations4.2Cybersecurity management system4.3Information security management standards4.4Data protection and minimisation4.5Driver data and employment relations4.6Contractual requirements for the supplier4.7Incident notification4.8Responsibilities of the fleet operator4.9Audits required by the client4.10Practice: matrix of applicable requirements
5.1Writing the audit report5.2Prioritisation of findings5.3Remediation plan with owners5.4Verification of closure5.5Temporary compensating controls5.6Continuous vulnerability management5.7Staff training5.8Periodic repetition of the audit5.9Maturity indicators5.10Practice: report and remediation plan
6.1Choice of fleet and its system6.2Inventory of components and exposure6.3Audit plan and criteria6.4Simulation of findings and their classification6.5Regulatory compliance matrix6.6Full audit report6.7Remediation plan and follow-up6.8Maturity indicators6.9Methodological report6.10Defence of the work
How you'll learn
Fully 100 % online training on the SEIUM campus, with downloadable material, recorded classes and an assigned technical tutor. There are no fixed timetables: students progress at their own pace within the enrolment period, which makes it possible to combine the course with work.
Each module combines theory, guided reading of the original standard and applied exercises. The working software is Wireshark, Nmap, Burp Suite, Vector CANalyzer, Kali Linux, in free, academic or evaluation versions. Tests are studied using real audit procedures in the laboratory of authorised telematics units, review of fleet management platform configurations, and preparation of remediation reports. Assessment is continuous by module, plus the final integrating project.
Build it end to end
Your final project follows the real engineering workflow, step by step, reviewed by your tutor.
Describe the architecture of a vehicle and fleet telematics system and its interfaces.
Identify the exposure surface across the device, communications, cloud and applications.
Apply an authorised audit methodology covering scope, rules of engagement and traceability.
Relate findings to the requirements of ISO/SAE 21434 and UN Regulations No. 155 and 156.
Prioritise vulnerabilities according to their impact on safety, privacy and continuity.
Where this takes you
Requirements
- No prior degree is required.
- Internet connection and a computer capable of running the programme's software.
- Sufficient level of Spanish to follow technical regulatory texts.
Ready to start?
Send your application today. Our admissions team replies within 72 hours with your study plan and funding options.
Frequently asked questions
The programme comprises 300 hours in total, spread over 3 to 5 months. That averages between 10 and 15 hours per week, compatible with full-time work.
The programme uses Wireshark, Nmap, Burp Suite, Vector CANalyzer and Kali Linux. Free, academic or evaluation versions are used, and the tutor indicates the free alternative where one exists.
A SEIUM in-house diploma upon passing the continuous assessment and the integrating project. It is in-house training, not an official qualification from the Ministry.
Yes. Modules passed in a course or postgraduate diploma in the same area are recognised towards the advanced programme. Check the recognition policy when you enrol.
Related programmes
Course on Customer Segmentation in Mobility Insurance
Online course of 300 hours in customer segmentation in mobility insurance. 6 modules covering Regulation (EU) 2016/679 (GDPR), Regulation (EU) 2024/1689 (Artificial Intelligence Regulation) and Python…
Course in Evaluating Insurtech Start-ups
Online 300 h course in evaluating insurtech start-ups. 6 modules covering Law 28/2022 on promoting the ecosystem of emerging companies, Law 7/2020 on the digital transformation…
Collaborative Platforms in Insurance Course
Online course of 300 h in collaborative platforms in insurance. 6 modules covering Regulation (EU) 2022/2065 (Digital Services Act), Regulation (EU) 2022/1925 (Digital Markets Act) and…
More in Insurance, Risk & Actuarial Data
All Insurance, Risk & Actuarial Data programmes → · How to apply · Fees & financing · Scholarships