Cyber Defence Policies and Society Course
300-hour online course in cyber defence policies and society. 6 modules covering Directive (EU) 2022/2555 (NIS2), Regulation (EU) 2019/881 (Cybersecurity Act) and MISP. Assigned tutor and open enrolment.
Take the controls.
Run a real engineering trade-off from this programme. Move the sliders, watch the model react in real time and beat the challenge.
What you will be able to do
Characterise cyberspace as a security domain and its actors.
Analyse national cybersecurity strategies and governance models.
Interpret international law applicable to operations in cyberspace.
Evaluate the balance between cyber defence, fundamental rights and privacy.
Apply the obligations of the NIS2 Directive to a typical organisation.
Plan the management of a cyber crisis with a social resilience approach.
Draft a well-founded public cybersecurity policy proposal.
Who it's for
- Cybersecurity policy analyst who wants to specialise in Cyber Defence Policies and Society.
- Cyber defence adviser in public administration who wants to specialise in Cyber Defence Policies and Society.
- Cyber crisis management officer who wants to specialise in Cyber Defence Policies and Society.
- Data protection officer who wants to specialise in Cyber Defence Policies and Society.
- Internet governance researcher who wants to specialise in Cyber Defence Policies and Society.
- Digital resilience consultant who wants to specialise in Cyber Defence Policies and Society.
- Engineering or science graduates looking to enter public administration.
What you'll work with
- Directive (EU) 2022/2555 (NIS2)
- Regulation (EU) 2019/881 (Cybersecurity Act)
- Budapest Convention on Cybercrime
- Regulation (EU) 2016/679 (GDPR)
- Royal Decree 311/2022 (National Security Framework)
- Regulation (EU) 2024/2847 (Cyber Resilience Act)
- Law 36/2015 on National Security
6 modules · 300 h
1.1Layers of cyberspace: physical, logical and social1.2Difference between cybersecurity, cyber defence and cybercrime1.3State, criminal and activist actors1.4Technical attribution and political attribution1.5Critical infrastructure and its digital dependence1.6Digital supply chain as a vector1.7Disinformation and influence operations1.8Interdependence between civil and military domains1.9Domain vocabulary and its confusions1.10Exercise: classifying known incidents
2.1National cybersecurity strategies2.2Division of competences among bodies2.3Incident response centres2.4Joint cyber defence command and its role2.5Public-private collaboration2.6Obligations of essential service operators2.7Mandatory incident notification2.8National and sectoral exercises2.9Capabilities, talent and retention2.10Practice: diagnosing the governance of a sector
3.1Application of international law to cyberspace3.2Sovereignty, non-intervention and use of force3.3Armed attack threshold and self-defence3.4International humanitarian law in cyber conflict3.5United Nations processes and voluntary norms3.6Confidence-building measures between States3.7Judicial cooperation and the cybercrime convention3.8Sanctions and non-military responses3.9Open debates on binding norms3.10Practice: legally qualifying an incident
4.1Security and freedoms: a permanent balance4.2Strong encryption and pressures to weaken it4.3Vulnerabilities: disclosure or stockpiling4.4Surveillance and proportionality4.5Intervention programmes and judicial guarantees4.6Protection of journalists, activists and dissidents4.7Market for intrusion tools and its control4.8Digital literacy of the population4.9Public trust in digital institutions4.10Debate: disclose or retain a vulnerability
5.1Preparedness and continuity plans5.2Detection, response and recovery5.3Coordination in a multisector crisis5.4Public communication during an incident5.5International cooperation in response5.6Lessons from real incidents5.7Insurance and risk transfer5.8Resilience indicators5.9Realistic investment and priorities5.10Practice: cyber crisis simulation
6.1Choosing the country or sector6.2Diagnosis of threats and dependencies6.3Analysis of the legal and institutional framework6.4Identification of governance gaps6.5Policy and measures proposal6.6Analysis of impact on civil rights6.7Crisis management plan6.8Indicators and evaluation6.9Proposal report6.10Defence of the work
How you'll learn
100% online training on the SEIUM Institute campus, with downloadable material, recorded classes and an assigned technical tutor. There are no fixed timetables: students progress at their own pace within the enrolment period, which makes it possible to combine the programme with work.
Each module combines theory, guided reading of the original standard and applied exercises. The working software is MISP, Maltego, Python (pandas), NVivo, in free, academic or evaluation versions. The exercises are based on real procedures from tabletop cyber crisis simulation exercises, comparative analysis of national cybersecurity strategies and privacy impact assessment. Assessment is continuous, module by module, plus the final integrative project.
Build it end to end
Your final project follows the real engineering workflow, step by step, reviewed by your tutor.
Characterise cyberspace as a security domain and its actors.
Analyse national cybersecurity strategies and governance models.
Interpret international law applicable to operations in cyberspace.
Evaluate the balance between cyber defence, fundamental rights and privacy.
Apply the obligations of the NIS2 Directive to a typical organisation.
Where this takes you
Requirements
- No prior qualification is required.
- Internet connection and a computer capable of running the programme's software.
- Sufficient level of Spanish to follow technical regulatory texts.
Ready to start?
Send your application today. Our admissions team replies within 72 hours with your study plan and funding options.
Frequently asked questions
The programme comprises 300 hours in total, spread over 3 to 5 months. That is an average of 10 to 15 hours per week, compatible with a full-time job.
The programme uses MISP, Maltego, Python (pandas) and NVivo. Free, academic or evaluation versions are used, and the tutor indicates the free alternative where one exists.
A SEIUM Institute diploma upon passing the continuous assessment and the integrative project. This is in-house training, not an official qualification from the Ministry.
Yes. Modules passed in a course or postgraduate diploma in the same area are recognised towards the higher-level programme. Check the recognition policy when you enrol.
Related programmes
Portable Radiation Protection Instrumentation Course
Online 300 h course in portable radiation protection instrumentation. 6 modules covering IEC 60846-1 (ambient and directional dose equivalent meters), IEC 60325 (alpha and beta contamination…
UNECE R156 Course: Secure OTA Updates
Online 300-hour course in UNECE R156: secure OTA updates. 6 modules covering UN Regulation No. 156 (software updates), ISO 24089 (software update engineering) and Uptane (aktualizr).…
DC-DC converter course at EV
DC-DC Converters in EVs Course Explore the design, operation, and control of DC-DC converters used in electric vehicles (EVs). It focuses on understanding topologies, circuit modeling,…
More in Insurance, Risk & Actuarial Data
All Insurance, Risk & Actuarial Data programmes → · How to apply · Fees & financing · Scholarships