Cybersecurity in Critical Urban Services Course
Online 300-hour course in cybersecurity for Critical Urban Services. 6 modules covering IEC 62443 Security for industrial automation and control systems, Directive (EU) 2022/2555 NIS2 and Wireshark. Assigned tutor and open enrolment.
Take the controls.
Run a real engineering trade-off from this field. Move the sliders, watch the model react in real time and beat the challenge.
What you will be able to do
Identify the specific threats to urban OT systems.
Design secure architectures in line with IEC 62443.
Assess risk using MAGERIT and PILAR methodologies.
Implement monitoring and detection capabilities in industrial networks.
Manage incidents while maintaining the continuity of the physical service.
Meet the obligations of NIS2 and the Spanish National Security Framework (Esquema Nacional de Seguridad).
Draw up a cybersecurity roadmap for a critical service.
Who it's for
- Industrial cybersecurity engineer who wants to specialise in Cybersecurity in Critical Urban Services.
- OT SOC analyst who wants to specialise in Cybersecurity in Critical Urban Services.
- Municipal information security manager who wants to specialise in Cybersecurity in Critical Urban Services.
- NIS2 compliance consultant who wants to specialise in Cybersecurity in Critical Urban Services.
- Smart city security architect who wants to specialise in Cybersecurity in Critical Urban Services.
- Control systems auditor who wants to specialise in Cybersecurity in Critical Urban Services.
- Engineering or science graduates looking to enter local government.
What you'll work with
- IEC 62443 Security for industrial automation and control systems
- Directive (EU) 2022/2555 NIS2
- Royal Decree 311/2022 National Security Framework (Esquema Nacional de Seguridad)
- ISO/IEC 27001 Information security management systems
- Regulation (EU) 2024/2847 on Cyber Resilience (Cyber Resilience Act)
- NIST SP 800-82 Guide to Operational Technology Security
- Directive (EU) 2022/2557 on the resilience of critical entities (CER)
- Royal Decree-Law 12/2018 on the security of network and information systems
6 modules · 300 h
1.1Attack surface of a connected city1.2OT, SCADA and PLC systems in municipal services1.3Differences between IT and OT security1.4Reference incidents: Ukraine 2015, Oldsmar 20211.5Ransomware in local councils and operators1.6Threat actors and motivations1.7MITRE ATT&CK for ICS framework1.8Vulnerabilities in urban IoT devices1.9Threat intelligence and open sources1.10Case study: attack on a water treatment plant
2.1Purdue model and industrial network segmentation2.2Zones and conduits under IEC 624432.3Security levels SL1 to SL42.4Secure remote access for maintenance2.5Security in Modbus, DNP3 and IEC 61850 protocols2.6Smart city platforms and FIWARE2.7Identity and privilege management2.8Encryption and certificate management in the field2.9Zero trust architectures applied to OT2.10Laboratory: segmentation of a simulated control network
3.1Risk analysis with MAGERIT and PILAR3.2National Security Framework for local authorities3.3NIS2 obligations for essential entities3.4CER Directive and resilience requirements3.5OT asset inventory and criticality3.6Patch management in industrial environments3.7Supply chain security3.8Public procurement with cybersecurity clauses3.9Product certification and the Cyber Resilience Act3.10Practical exercise: risks of a traffic control centre
4.1Industrial security operations centres (SOC)4.2Passive monitoring of OT traffic4.3IDS systems specific to industrial protocols4.4Event correlation in SIEM4.5Anomaly detection using machine learning4.6Industrial honeypots for research purposes4.7Logging and retention of evidence4.8Indicators of compromise and threat hunting4.9IT-OT integration in monitoring4.10Laboratory: anomaly detection in Modbus traffic
5.1OT incident response plan5.2Incident notification under NIS2 and INCIBE-CERT5.3Containment without interrupting the physical service5.4Manual operation and degraded modes5.5Backups of PLC configurations5.6Forensic analysis in industrial systems5.7Coordination with security forces and CCN5.8Public communication during an incident5.9Cyber Europe exercises and similar5.10Case study: ransomware in the street lighting system
6.1Selection of the urban service to protect6.2Inventory of assets and flows6.3Risk and threat analysis6.4Design of zones and conduits6.5Technical and organisational measures6.6Monitoring and detection plan6.7Response and recovery plan6.8Regulatory compliance roadmap6.9Report and presentation6.10Final review with the tutor
How you'll learn
100 % online training on the SEIUM Institute campus, with downloadable material, recorded classes and an assigned technical tutor. There are no fixed timetables: students progress at their own pace within the intake, which makes it possible to combine study with work.
Each module combines theory, guided reading of the original standard and applied exercises. The working software is Wireshark, PILAR (CCN-CERT), Security Onion, Zeek, Nozomi Guardian, in free, academic or evaluation versions. Practical work is based on real risk analysis procedures for a water supply SCADA system, zone and conduit segmentation design, and a ransomware incident response exercise. Assessment is continuous by module, plus a final integrating project.
Build it end to end
Your final project follows the real engineering workflow, step by step, reviewed by your tutor.
Identify the specific threats to urban OT systems.
Design secure architectures in line with IEC 62443.
Assess risk using MAGERIT and PILAR methodologies.
Implement monitoring and detection capabilities in industrial networks.
Manage incidents while maintaining the continuity of the physical service.
Where this takes you
Requirements
- No prior degree is required.
- Internet connection and a computer capable of running the programme's software.
- Sufficient command of Spanish to follow technical regulatory texts.
Ready to start?
Send your application today. Our admissions team replies within 72 hours with your study plan and funding options.
Frequently asked questions
The programme totals 300 hours, spread over 3 to 5 months. That is an average of 10 to 15 hours per week, compatible with a full-time job.
You will work with Wireshark, PILAR (CCN-CERT), Security Onion, Zeek and Nozomi Guardian. Free, academic or evaluation versions are used, and the tutor indicates the free alternative where one exists.
An SEIUM Institute diploma upon passing the continuous assessment and the integrating project. This is in-house training, not an official qualification from the Ministry.
Yes. Modules passed in a course or postgraduate diploma in the same area can be credited towards the advanced programme. Check the credit recognition policy when you enrol.
Related programmes
Urban Digital Twins Course for City Planning
Online course of 300 hours in urban digital twins for city planning, structured in 6 modules covering digital twin concepts, model capture and construction, dynamic data…
Urban Reforestation and Biodiversity Course
Online course of 300 hours in urban reforestation and biodiversity, structured in 6 modules covering urban ecology, urban trees and forests, reforestation and naturalisation, fauna and…
Course in Resilient Infrastructure Engineering
Online 300-hour course in Resilient Infrastructure Engineering. 6 modules covering UNE-EN 1990 Eurocode: basis of structural design, UNE-EN 1991-1-7 Eurocode 1: accidental actions and SAP2000. Assigned…
More in Civil, Rail & Smart Cities
All Civil, Rail & Smart Cities programmes → · How to apply · Fees & financing · Scholarships