Ethics in Simulated Cyber Attacks Course
Online 300-hour course in ethics in simulated cyber attacks. 6 modules covering NIST SP 800-84 (test, training and exercise programmes), NIST SP 800-115 (technical guide to security testing) and MITRE ATT&CK Navigator. Assigned tutor and open enrolment.
Take the controls.
Run a real engineering trade-off from this programme. Move the sliders, watch the model react in real time and beat the challenge.
What you will be able to do
Explain the purpose and types of cybersecurity exercises.
Define authorisation, scope and rules of engagement for an exercise.
Analyse the ethical dilemmas of simulated attacks.
Apply measures to protect third-party data and systems during the exercise.
Conduct exercises safely and proportionately.
Produce reports that support organisational learning.
Design a cybersecurity exercise with its ethical and legal framework.
Who it's for
- Cybersecurity exercise coordinators who want to specialise in Ethics in Simulated Cyber Attacks.
- Ethical red team leads who want to specialise in Ethics in Simulated Cyber Attacks.
- Cybersecurity risk managers who want to specialise in Ethics in Simulated Cyber Attacks.
- Security auditors who want to specialise in Ethics in Simulated Cyber Attacks.
- Legal advisers in cybersecurity who want to specialise in Ethics in Simulated Cyber Attacks.
- Cybersecurity trainers who want to specialise in Ethics in Simulated Cyber Attacks.
- Engineering or science graduates looking to enter cybersecurity.
What you'll work with
- NIST SP 800-84 (test, training and exercise programmes)
- NIST SP 800-115 (technical guide to security testing)
- TIBER-EU Framework (threat-led penetration testing)
- ISO 22398 (guidelines for exercises)
- Regulation (EU) 2022/2554 (DORA)
- Budapest Convention on Cybercrime (2001)
- Spanish Criminal Code, Article 197 bis (unlawful access to systems)
6 modules · 300 h
1.1Types of exercise: tabletop, functional and technical1.2Vulnerability assessment and authorised penetration testing1.3Red, blue and purple team exercises1.4Legitimate objectives of an exercise1.5What an exercise is not, and where the limit lies1.6Legal framework: authorisation and its requirements1.7Computer crimes and grounds for exclusion1.8Recognised standards and methodological guides1.9Field vocabulary1.10Exercise: define the purpose of an exercise
2.1Authorisation document and its signatories2.2Precise definition of scope2.3Excluded assets and critical systems2.4Time windows and schedules2.5Rules of engagement and escalation2.6Criteria for immediate halt2.7Communication with informed staff2.8Affected third parties: cloud, suppliers and customers2.9Insurance and liability for damage2.10Practice: draft the rules of engagement for an exercise
3.1Deceiving staff and its justification3.2Social engineering and respect for the individual3.3Personal data found during the exercise3.4Findings outside the scope3.5Discovery of irregular conduct3.6Risk of collateral damage to the service3.7Client pressure for spectacular results3.8Publication of results and reputation3.9Disclosure of vulnerabilities to third parties3.10Debate: three cases with blurred boundaries
4.1Planning and risk management of the exercise4.2Test environment versus production environment4.3Logging of all actions performed4.4Custody and encryption of evidence4.5Minimising access to real data4.6Handling of obtained credentials4.7Clean-up of the environment at completion4.8Real-time communication of critical findings4.9Coordination with the defending team4.10Practice: plan the conduct of an exercise
5.1Report structure and its audience5.2Prioritisation of findings by risk5.3Actionable recommendations5.4Closing meeting and just culture5.5Avoiding blame of staff5.6Monitoring remediation5.7Continuous programme versus one-off exercise5.8Contracting services and key clauses5.9Team competence and certification5.10Practice: write the report on a finding
6.1Choice of organisation and objective6.2Analysis of the applicable legal framework6.3Authorisation document and scope6.4Rules of engagement and halt criteria6.5Analysis of foreseeable dilemmas6.6Evidence and data management plan6.7Reporting and follow-up plan6.8Team code of conduct6.9Plan report6.10Project defence
How you'll learn
Fully 100 % online training on the SEIUM campus, with downloadable material, recorded classes and an assigned technical tutor. No fixed timetables: students progress at their own pace within the intake, which makes it possible to combine study with work.
Each module combines theory, guided reading of the original standard and applied exercises. The working software is MITRE ATT&CK Navigator, Wireshark, Microsoft Project, Advanced Excel, in free, academic or evaluation versions. Case studies cover tabletop cybersecurity exercise procedures, drafting rules of engagement for exercises, and reviews of post-exercise reports. Assessment is continuous by module, plus the final integrative project.
Build it end to end
Your final project follows the real engineering workflow, step by step, reviewed by your tutor.
Explain the purpose and types of cybersecurity exercises.
Define authorisation, scope and rules of engagement for an exercise.
Analyse the ethical dilemmas of simulated attacks.
Apply measures to protect third-party data and systems during the exercise.
Conduct exercises safely and proportionately.
Where this takes you
Requirements
- No previous degree is required.
- Internet connection and a computer capable of running the programme's software.
- Sufficient Spanish to follow technical regulatory texts.
Ready to start?
Send your application today. Our admissions team replies within 72 hours with your study plan and funding options.
Frequently asked questions
The programme comprises 300 hours in total, spread over 3 to 5 months. That is an average of 10 to 15 hours per week, compatible with a full-time job.
You work with MITRE ATT&CK Navigator, Wireshark, Microsoft Project and Advanced Excel. Free, academic or evaluation versions are used, and the tutor indicates the free alternative where one exists.
An SEIUM own diploma on passing the continuous assessment and the integrative project. It is in-house training, not an official Ministry title.
Yes. Modules passed in a course or postgraduate diploma in the same area are credited towards the advanced programme. Check the credit transfer policy when you enrol.
Related programmes
Off-Road Powertrain Sizing Course
Online 300-hour course in Off-Road powertrain sizing. 6 modules covering Regulation (EU) 2016/1628 (emissions from non-road mobile machinery), ISO 14396 (engine power for non-road mobile machinery)…
Demand forecasting course at UAM
The UAM Demand Forecasting Course trains participants in the use of advanced data analysis, predictive modeling, and machine learning techniques applied to estimating service demand in…
Course in Maritime Law Applied to Insurance
The SEIUM Institute course in Maritime Law Applied to Insurance is a 100 % online programme of 300 hours, structured into 4 modules and 24 submodules.
More in Regulation, Safety, RAMS & Homologation
All Regulation, Safety, RAMS & Homologation programmes → · How to apply · Fees & financing · Scholarships