CourseDefense, Military Engineering & Land Systems Applications open

ISO/IEC 27001 Course in Military Environments

Online course of 300 h in ISO/IEC 27001 in military environments. 6 modules covering ISO/IEC 27001:2022 (information security management), ISO/IEC 27002:2022 (security controls) and PILAR (CCN). Assigned tutor and open enrolment.

Duration300 h
ModeOnline
Start datesSet by the faculty
AwardSEIUM Institute certificate
Virtual lab · try it before you enrol

Take the controls.

Run a real engineering trade-off from this field. Move the sliders, watch the model react in real time and beat the challenge.

SIM · LIVE ●
Learning outcomes

What you will be able to do

01

Explain the structure of an information security management system.

02

Carry out risk analysis and treatment.

03

Select organisational, people, physical and technological controls.

04

Prepare the statement of applicability.

05

Relate ISO/IEC 27001 to the Spanish National Security Framework (ENS).

06

Plan internal audits and system certification.

07

Manage incidents and the continual improvement of the ISMS.

Profile

Who it's for

  • Information security manager wanting to specialise in ISO/IEC 27001 in military environments.
  • ISO/IEC 27001 auditor wanting to specialise in ISO/IEC 27001 in military environments.
  • Risk analyst wanting to specialise in ISO/IEC 27001 in military environments.
  • Cybersecurity consultant wanting to specialise in ISO/IEC 27001 in military environments.
  • Security incident manager wanting to specialise in ISO/IEC 27001 in military environments.
  • ENS compliance manager wanting to specialise in ISO/IEC 27001 in military environments.
  • Engineering or science graduates looking to enter the defence industry.
Standards & tools

What you'll work with

  • ISO/IEC 27001:2022 (information security management)
  • ISO/IEC 27002:2022 (security controls)
  • Royal Decree 311/2022 (Spanish National Security Framework)
  • ISO/IEC 27005 (information security risk management)
  • ISO/IEC 27035-1 (incident management)
  • ISO/IEC 27007 (management system auditing)
  • ISO 22301 (business continuity)
Syllabus

6 modules · 300 h

  1. 1.1Purpose and structure of the standard
  2. 1.2System scope and its delimitation
  3. 1.3Context, interested parties and leadership
  4. 1.4Information security policy
  5. 1.5Roles, responsibilities and resources
  6. 1.6Relationship with other management standards
  7. 1.7Environments handling classified information: particularities
  8. 1.8System accreditation and authorisation to operate
  9. 1.9Field vocabulary and acronyms
  10. 1.10Exercise: defining the scope of a system
  1. 2.1Risk assessment methodology
  2. 2.2Asset inventory and ownership
  3. 2.3Identification of threats and vulnerabilities
  4. 2.4Assessment of impact and likelihood
  5. 2.5Risk acceptance criteria
  6. 2.6Selection of controls and their justification
  7. 2.7Statement of applicability
  8. 2.8Risk treatment plan
  9. 2.9Residual risk and its approval
  10. 2.10Practice: risk assessment of a process
  1. 3.1Policies, procedures and responsibilities
  2. 3.2Information classification and labelling
  3. 3.3Personnel clearance and background verification
  4. 3.4Confidentiality agreements
  5. 3.5Training and awareness
  6. 3.6Supplier and supply chain management
  7. 3.7Asset management and return
  8. 3.8Teleworking and personal devices
  9. 3.9Incident management and notification
  10. 3.10Practice: information classification policy
  1. 4.1Perimeters, zones and physical access control
  2. 4.2Protection of areas holding sensitive information
  3. 4.3Cabling and equipment security
  4. 4.4Logical access control and privileges
  5. 4.5Cryptography and key management
  6. 4.6Protection against malicious code
  7. 4.7Logging, monitoring and clock synchronisation
  8. 4.8Backups and continuity
  9. 4.9Security in development and change
  10. 4.10Practice: designing access control for a zone
  1. 5.1Mandatory documentation and its control
  2. 5.2Indicators and measurement of effectiveness
  3. 5.3Internal audit and its programme
  4. 5.4Management review
  5. 5.5Nonconformities and corrective actions
  6. 5.6Certification process and stages
  7. 5.7Common findings and how to avoid them
  8. 5.8Certificate maintenance and version transition
  9. 5.9Integration with regulatory requirements
  10. 5.10Practice: preparing a certification audit
  1. 6.1Choice of organisation and scope
  2. 6.2Asset inventory and context analysis
  3. 6.3Risk assessment and treatment
  4. 6.4Justified statement of applicability
  5. 6.5Design of priority controls
  6. 6.6Documentation of the management system
  7. 6.7Audit programme and indicators
  8. 6.8Roadmap to certification
  9. 6.9System manual
  10. 6.10Project defence
Methodology, software & labs

How you'll learn

100% online training on the SEIUM campus, with downloadable material, recorded classes and an assigned technical tutor. There are no fixed timetables: students progress at their own pace within the intake, which makes it possible to combine study with work.

Each module combines theory, guided reading of the original standard and applied exercises. The working software is PILAR (CCN), GlobalSUITE, Microsoft Sentinel, advanced Excel, in free, academic or evaluation versions. Tests are studied using real procedures for information asset risk analysis, internal ISMS audits and security incident management exercises. Assessment is continuous by module plus the final integrative project.

Accreditable laboratories(EN ISO/IEC 17025) with rotor test rig, EMC/Lightning pre-compliance, HIL/SIL, vibration/acoustics.
Evidence-oriented final project:safety case, test plan, compliance dossier and operational limits.
Industry mentoring:lecturers with experience in training, , eVTOL/UAM and flight test.
Flexible format(hybrid/online), international cohorts and support from SEIUM Career Services.
Ethics and safety:safety-by-design approach, ciber-OT, DIH and compliance as core pillars.
Capstone project

Build it end to end

Your final project follows the real engineering workflow, step by step, reviewed by your tutor.

Choice of organisation and scope

Explain the structure of an information security management system.

Asset inventory and context analysis

Carry out risk analysis and treatment.

Risk assessment and treatment

Select organisational, people, physical and technological controls.

Justified statement of applicability

Prepare the statement of applicability.

Design of priority controls

Relate ISO/IEC 27001 to the Spanish National Security Framework (ENS).

Career opportunities

Where this takes you

Information security managerISO/IEC 27001 auditorRisk analystCybersecurity consultantSecurity incident managerENS compliance manager
Admissions & scholarships

Requirements

  • No prior degree is required.
  • Internet connection and a computer capable of running the programme's software.
  • Sufficient command of Spanish to follow technical regulatory texts.

Ready to start?

Send your application today. Our admissions team replies within 72 hours with your study plan and funding options.

FAQ

Frequently asked questions

The programme is 300 hours in total, spread over 3 to 5 months. That is an average of 10 to 15 hours per week, compatible with a full-time job.

You work with PILAR (CCN), GlobalSUITE, Microsoft Sentinel and advanced Excel. Free, academic or evaluation versions are used, and the tutor indicates the free alternative where one exists.

An SEIUM own diploma upon passing the continuous assessment and the integrative project. It is in-house training, not an official qualification from the Ministry.

Yes. Modules passed in a course or postgraduate diploma in the same area are recognised in the higher programme. Check the recognition policy when you enrol.

ISO/IEC 27001 Course in Military EnvironmentsEnrol
Scroll to Top
SEIUM – Institute of Advanced Engineering
Privacy Overview

This website uses cookies so that we can provide you with the best user experience possible. Cookie information is stored in your browser and performs functions such as recognising you when you return to our website and helping our team to understand which sections of the website you find most interesting and useful.