International Encryption Regulation Course
Online 300 h course in international encryption regulation. 6 modules covering the Wassenaar Arrangement (category 5, part 2), Regulation (EU) 2021/821 (dual-use product control) and OpenSSL. Assigned tutor and open enrolment.
Take the controls.
Run a real engineering trade-off from this programme. Move the sliders, watch the model react in real time and beat the challenge.
What you will be able to do
Understand why cryptography is subject to international regulation.
Analyse the export controls of Wassenaar, the EU and the United States.
Evaluate lawful access proposals and their impact on security.
Apply sector-specific cryptographic requirements of the GDPR, eIDAS and PCI DSS.
Plan the transition to standardised post-quantum algorithms.
Assess the tensions between security, privacy and public policy.
Prepare a cryptographic compliance report for an organisation.
Who it's for
- Cryptography regulation consultant who wants to specialise in international encryption regulation.
- Cybersecurity compliance manager who wants to specialise in international encryption regulation.
- Cryptographic security architect who wants to specialise in international encryption regulation.
- Technology policy analyst who wants to specialise in international encryption regulation.
- Legal adviser in digital law who wants to specialise in international encryption regulation.
- Post-quantum migration manager who wants to specialise in international encryption regulation.
- Engineering or science graduates seeking to enter banking and payment systems.
What you'll work with
- Wassenaar Arrangement (category 5, part 2)
- Regulation (EU) 2021/821 (dual-use product control)
- Export Administration Regulations (15 CFR 730-774)
- Regulation (EU) 910/2014 (eIDAS) and Regulation (EU) 2024/1183
- Regulation (EU) 2016/679 (GDPR), Article 32
- FIPS 203 (ML-KEM, post-quantum cryptography)
- PCI DSS v4.0 (payment card data security)
6 modules · 300 h
1.1Why states regulate cryptography1.2History: from classified material to common technology1.3Strong cryptography and its current availability1.4Conflicting interests: security, trade and privacy1.5Actors: states, industry, academia and civil society1.6Minimum technical vocabulary required1.7International overview of regulatory approaches1.8Regulatory sources and how to monitor them1.9Common myths in public debate1.10Exercise: mapping the interests in a debate
2.1Multilateral regimes and control lists2.2Classification of products containing cryptography2.3Exemptions for mass-market software2.4Common authorisations and licences2.5Intangible transfers and publication of source code2.6Academic research and its exclusion2.7US legislation and its extraterritorial scope2.8European dual-use regulation2.9Common infringements in technology companies2.10Practice: classifying a product containing cryptography
3.1Interception obligations imposed on operators3.2Technical assistance orders to manufacturers3.3End-to-end encryption and its effect3.4Proposals for exceptional access and their variants3.5Key escrow and its history3.6Client-side scanning and the debate around it3.7Position of the technical community3.8Systemic risks of exceptional access3.9Decryption obligations placed on users3.10Debate: evaluating a specific proposal
4.1Data protection and encryption as a security measure4.2Encryption obligations in regulated sectors4.3Certification of cryptographic products4.4Electronic signature and digital identity rules4.5Evidential validity of encrypted and signed documents4.6Cryptocurrencies and their regulatory framework4.7Applicable telecommunications regulation4.8Requirements in public procurement4.9Technological sovereignty and national cryptography4.10Practice: mapping an organisation's obligations
5.1Crypto-agility and managing obsolescence5.2Standardisation of post-quantum cryptography5.3Regulatory migration deadlines5.4Cryptographic inventory of an organisation5.5Harvest now, decrypt later risk5.6International cooperation on standardisation5.7The role of open research5.8Responsible disclosure of weaknesses5.9Foreseeable regulatory agenda5.10Practice: migration and compliance plan
6.1Choosing the organisation or policy6.2Inventory of cryptographic uses6.3Product classification and export obligations6.4Analysis of the applicable regulatory framework6.5Analysis of the lawful access debate and its impact6.6Compliance and certification plan6.7Cryptographic migration plan6.8Reasoned position on a regulatory proposal6.9Analysis report6.10Project defence
How you'll learn
Fully 100 % online training on the SEIUM campus, with downloadable material, recorded classes and an assigned technical tutor. No fixed timetables: students progress at their own pace within the intake, which makes it possible to combine it with work.
Each module combines theory, guided reading of the original standard and applied exercises. The working software is OpenSSL, CrypTool 2, Python (cryptography), Wireshark, in free, academic or evaluation versions. The case studies draw on real procedures: comparative analysis of national legislation, cryptographic inventories for post-quantum migration, and sector compliance audits. Assessment is continuous per module plus the final integrative project.
Build it end to end
Your final project follows the real engineering workflow, step by step, reviewed by your tutor.
Understand why cryptography is subject to international regulation.
Analyse the export controls of Wassenaar, the EU and the United States.
Evaluate lawful access proposals and their impact on security.
Apply sector-specific cryptographic requirements of the GDPR, eIDAS and PCI DSS.
Plan the transition to standardised post-quantum algorithms.
Where this takes you
Requirements
- No prior degree is required.
- Internet connection and a computer capable of running the programme's software.
- Sufficient level of Spanish to follow technical regulatory texts.
Ready to start?
Send your application today. Our admissions team replies within 72 hours with your study plan and funding options.
Frequently asked questions
The programme totals 300 hours spread over 3 to 5 months. That is an average of 10 to 15 hours a week, compatible with a full-time job.
The course uses OpenSSL, CrypTool 2, Python (cryptography), Wireshark. Free, academic or evaluation versions are used, and the tutor indicates the free alternative where one exists.
An own diploma from SEIUM upon passing the continuous assessment and the integrative project. It is in-house training, not an official qualification from the Ministry.
Yes. Modules passed in a course or postgraduate diploma in the same area are recognised in the advanced programme. Check the recognition policy when you enrol.
Related programmes
Marine Insurance Underwriting Course
Online 300-hour course in marine insurance underwriting. 6 modules covering the Spanish Maritime Navigation Act 14/2014, the UK Marine Insurance Act 1906 and MarineTraffic. Assigned tutor…
Open Insurance and Data Sharing Course
Online 300-hour course in open insurance and data sharing. 6 modules covering Regulation (EU) 2023/2854 (Data Act), the FIDA Regulation proposal (access to financial data) and…
Course in Detailing Techniques for Classic Cars
Online 300-hour course in detailing techniques for classic cars. 6 modules covering ISO 2813 (specular gloss measurement), ISO 2808 (film thickness determination) and Elcometer ElcoMaster. Dedicated…
More in Off-Road, Special Vehicles & Machinery
All Off-Road, Special Vehicles & Machinery programmes → · How to apply · Fees & financing · Scholarships