CourseDefense, Military Engineering & Land Systems Applications open

Diploma in NATO/EU Data Security Standards

Online postgraduate diploma of 800 hours in NATO/EU data security standards. 8 modules covering NATO and EU security frameworks, information classification, personnel and industrial security, physical security and TEMPEST, system accreditation, NIS2/GDPR/ENS compliance and incident management, with an assigned technical tutor.

Duration800 hours · 6–8 months
ModeOnline
LanguageEnglish
Start datesSet by the faculty
AwardSEIUM Institute diploma
Virtual lab · try it before you enrol

Take the controls.

Run a real engineering trade-off from this field. Move the sliders, watch the model react in real time and beat the challenge.

SIM · LIVE ●
Learning outcomes

What you will be able to do

01

Understand the NATO and EU information security frameworks.

02

Apply the classification and handling of classified information.

03

Manage security clearances for individuals and companies.

04

Implement physical, personnel, document and system security measures.

05

Carry out risk analyses and system accreditation processes.

06

Integrate the requirements of NIS2, GDPR and ENS.

07

Manage incidents affecting sensitive information.

Profile

Who it's for

  • Information security managers.
  • Security auditors of classified systems.
  • Regulatory compliance consultants.
  • Cybersecurity engineers.
  • Data protection officers.
  • System accreditation managers.
  • Engineering or science graduates looking to enter the defence sector.
Standards & tools

What you'll work with

  • C-M(2002)49 (Security within NATO)
  • Council Decision 2013/488/EU (protection of EU classified information)
  • Directive (EU) 2022/2555 NIS2 (cybersecurity of network and information systems)
  • Regulation (EU) 2016/679 GDPR (data protection)
  • ISO/IEC 27001 (information security management)
  • Royal Decree 311/2022 (Spain's National Security Framework, ENS)
  • SDIP-27 (NATO TEMPEST standards)
  • ISO/IEC 27005 (information security risk management)
  • PILAR
  • Microsoft Purview
  • Splunk
  • Wireshark
Syllabus

8 modules

  1. 1.1NATO security policy C-M(2002)49
  2. 1.2NATO supporting directives
  3. 1.3EU Council security rules
  4. 1.4Bilateral security agreements
  5. 1.5National security authorities
  6. 1.6The National Security Office in Spain
  7. 1.7Relationship between frameworks
  8. 1.8Responsibilities of the holder
  9. 1.9Penalties for non-compliance
  10. 1.10Case study: analysis of a security agreement
  1. 2.1NATO and EU classification levels
  2. 2.2National equivalences
  3. 2.3Classification criteria
  4. 2.4Document marking
  5. 2.5Declassification and reclassification
  6. 2.6Sensitive unclassified information
  7. 2.7Need to know
  8. 2.8Registers and copy control
  9. 2.9Secure destruction
  10. 2.10Workshop: document marking and control
  1. 3.1Personnel security clearances
  2. 3.2Security investigations
  3. 3.3Training and awareness
  4. 3.4Facility security clearance
  5. 3.5Classified contracts
  6. 3.6Project security classification guide
  7. 3.7International visits
  8. 3.8Transfers of classified information
  9. 3.9Insider threat
  10. 3.10Case study: management of a classified contract
  1. 4.1Security areas
  2. 4.2Access control
  3. 4.3Approved security containers
  4. 4.4TEMPEST security and SDIP-27
  5. 4.5Equipment zoning
  6. 4.6Protection against eavesdropping
  7. 4.7Transport of classified material
  8. 4.8Security of industrial facilities
  9. 4.9Physical inspections
  10. 4.10Practical exercise: zoning of a secure room
  1. 5.1Security requirements for CIS
  2. 5.2Risk analysis to ISO/IEC 27005
  3. 5.3MAGERIT methodology
  4. 5.4System-specific security requirement statement
  5. 5.5Security operating procedures
  6. 5.6Approved and certified products
  7. 5.7Approved cryptography
  8. 5.8Accreditation process
  9. 5.9System interconnection
  10. 5.10Lab: risk analysis with PILAR
  1. 6.1NIS2 Directive and essential entities
  2. 6.2Spain's National Security Framework (ENS)
  3. 6.3System categorisation
  4. 6.4GDPR in defence environments
  5. 6.5Law Enforcement Directive on data protection
  6. 6.6Official secrets legislation
  7. 6.7ISO/IEC 27001 certification
  8. 6.8Interaction between frameworks
  9. 6.9Compliance audits
  10. 6.10Practical exercise: ENS compliance audit
  1. 7.1Reporting security compromises
  2. 7.2Damage assessment
  3. 7.3Incident investigation
  4. 7.4CERT and CSIRT response centres
  5. 7.5Coordination with authorities
  6. 7.6Managing information leaks
  7. 7.7Lessons learned
  8. 7.8Cyber defence exercises
  9. 7.9Crisis communication
  10. 7.10Case study: response to a compromise of information
  1. 8.1Description of the organisation
  2. 8.2Information inventory
  3. 8.3Regulatory requirements
  4. 8.4Risk analysis
  5. 8.5Security measures
  6. 8.6Accreditation plan
  7. 8.7Incident management plan
  8. 8.8Training programme
  9. 8.9Report and presentation
  10. 8.10Final project: final review with the tutor
Methodology, software & labs

How you'll learn

The programme is 100% online on the SEIUM campus, with downloadable material, recorded classes and an assigned technical tutor. There are no fixed timetables: you progress at your own pace within each intake, so it fits around your job.

Each module combines theory, guided reading of the original standard and applied exercises. The working software is PILAR, Microsoft Purview, Splunk and Wireshark, in free, academic or evaluation versions. Practical work is based on real procedures: risk analysis of a system handling classified information, an ENS compliance audit and drawing up an accreditation plan. Assessment is continuous by module, plus the final project.

Standards covered: C-M(2002)49, Council Decision 2013/488/EU, Directive (EU) 2022/2555 NIS2, Regulation (EU) 2016/679 GDPR, ISO/IEC 27001, Royal Decree 311/2022 (ENS), SDIP-27, ISO/IEC 27005.

Assigned technical tutor:every module ends with a deliverable that your tutor marks individually.
Standards-based learning:guided reading of C-M(2002)49, Council Decision 2013/488/EU, NIS2, GDPR and ISO/IEC 27001 applied to real cases, not as a theoretical annex.
Industry software:PILAR, Microsoft Purview, Splunk and Wireshark, in free, academic or evaluation versions.
Final project:a NATO/EU data security project for an organisation, with information inventory, risk analysis, security measures and accreditation plan, reviewed by your tutor.
Flexible format:100% online, no fixed timetables, compatible with full-time work.
Capstone project

Build it end to end

Your final project follows the real engineering workflow, step by step, reviewed by your tutor.

Describe the organisation
Describe the organisation and build the inventory of the information it handles.
Map regulatory requirements
Identify the NATO, EU and national requirements that apply.
Analyse the risks
Carry out the risk analysis and define the security measures.
Plan accreditation and incidents
Draw up the accreditation plan and the incident management plan.
Final project
Add the training programme and present the complete project for final review with your tutor.
Career opportunities

Where this takes you

Information security managerClassified systems security auditorRegulatory compliance consultantCybersecurity engineerData protection officerSystem accreditation manager
Admissions & scholarships

Requirements

  • Prior technical training or professional experience in the sector. No university degree is required.
  • An internet connection and a computer capable of running the programme software.
  • English sufficient to read technical standards.

Ready to start?

Send your application today. Our admissions team replies within 72 hours with your study plan and funding options.

FAQ

Frequently asked questions

The programme totals 800 hours over 6–8 months. You set your own pace within each intake, and your tutor helps you plan the workload around your job.

You work with PILAR, Microsoft Purview, Splunk and Wireshark, using free, academic or evaluation versions. Your tutor indicates the free alternative wherever one exists.

A SEIUM Institute diploma, awarded on passing the continuous assessment and the final project. It is SEIUM's own qualification, not an official state degree; its recognition depends on the programme completed and the regulations of each country.

Yes. Modules passed are recognised in a higher programme in the same area (postgraduate diploma or master's). Ask about the recognition policy when you enrol.

Prior technical training or professional experience in the sector (no university degree required), a computer able to run the programme software and English sufficient to read technical standards.

Start dates are set by SEIUM's faculty for each intake. Our admissions team will confirm the next available date when you apply.

Diploma in NATO/EU Data Security StandardsEnrol
Scroll to Top
SEIUM – Institute of Advanced Engineering
Privacy Overview

This website uses cookies so that we can provide you with the best user experience possible. Cookie information is stored in your browser and performs functions such as recognising you when you return to our website and helping our team to understand which sections of the website you find most interesting and useful.