Apply now
CourseMotorcycles & 2-Wheelers Enrolment open

ISO/IEC Cybersecurity Testing Course

Online 300 h course in ISO/IEC cybersecurity testing. 6 modules covering ISO/IEC 15408 (Common Criteria), ISO/IEC 18045 (methodology for security evaluation) and Burp Suite. Dedicated tutor and open enrolment.

Duration300 h
ModeOnline
Start datesOctober / March
LocationEurope (Madrid)
AwardSEIUM Institute diploma
Enrol now View syllabus Ask an advisor
Virtual lab · try it before you enrol

Take the controls.

Run a real engineering trade-off from this programme. Move the sliders, watch the model react in real time and beat the challenge.

SIM · LIVE ●
Learning outcomes

What you will be able to do

01

Explain the product security evaluation model according to the Common Criteria.

02

Interpret protection profiles and security targets.

03

Plan security tests in accordance with a standardised methodology.

04

Carry out vulnerability tests in a controlled environment and document them.

05

Apply vulnerability management and disclosure processes.

06

Describe the accreditation requirements for an evaluation laboratory.

07

Prepare a technical evaluation report with traceable evidence.

Profile

Who it's for

  • ICT product security evaluator looking to specialise in ISO/IEC cybersecurity testing.
  • Cybersecurity auditor looking to specialise in ISO/IEC cybersecurity testing.
  • Penetration testing analyst looking to specialise in ISO/IEC cybersecurity testing.
  • Technical manager of an evaluation laboratory looking to specialise in ISO/IEC cybersecurity testing.
  • Cybersecurity certification consultant looking to specialise in ISO/IEC cybersecurity testing.
  • Product security engineer looking to specialise in ISO/IEC cybersecurity testing.
  • Graduates in engineering or science seeking to enter cybersecurity evaluation laboratories.
Standards & tools

What you'll work with

  • ISO/IEC 15408 (Common Criteria)
  • ISO/IEC 18045 (methodology for security evaluation)
  • ISO/IEC 17025 (laboratory competence)
  • IEC 62443-4-2 (technical requirements for industrial components)
  • ISO/IEC 27001 (information security management)
  • ISO/IEC 29147 (vulnerability disclosure)
  • ISO/IEC 30111 (vulnerability handling)
  • NIST SP 800-115 (technical guide to security testing)
Syllabus

6 modules · 300 h

  1. 1.1Why the cybersecurity of a product is certified
  2. 1.2Product, process and service certification
  3. 1.3Actors: manufacturer, laboratory, certification body and authority
  4. 1.4National and international schemes
  5. 1.5European cybersecurity regulation and associated schemes
  6. 1.6Mutual recognition between countries
  7. 1.7Relationship with information security management
  8. 1.8Vocabulary and acronyms in the field
  9. 1.9Cost and timescales of a certification
  10. 1.10Exercise: choosing the appropriate scheme for a product
  1. 2.1Structure of the Common Criteria standard
  2. 2.2Target of evaluation and its scope
  3. 2.3Protection profiles and security objectives
  4. 2.4Security functional requirements
  5. 2.5Assurance requirements and levels
  6. 2.6Security target and its content
  7. 2.7Assumptions, threats and organisational policies
  8. 2.8Traceability between threats and objectives
  9. 2.9Maintaining certification
  10. 2.10Practice: drafting a security target
  1. 3.1Common evaluation methodology
  2. 3.2Review of design documentation
  3. 3.3Analysis of the security architecture
  4. 3.4Functional testing of mechanisms
  5. 3.5Penetration testing oriented to evaluation
  6. 3.6Analysis of known vulnerabilities
  7. 3.7Side-channel analysis and its scope
  8. 3.8Cryptographic evaluation and modules
  9. 3.9Evaluation report and verdict
  10. 3.10Practice: evaluation plan for a mechanism
  1. 4.1Information security management system
  2. 4.2Risk management in accordance with the applicable standard
  3. 4.3Secure development and lifecycle
  4. 4.4Vulnerability management and coordinated disclosure
  5. 4.5Patch and update management
  6. 4.6Supply chain security
  7. 4.7Software component inventory
  8. 4.8Incident management and notification
  9. 4.9Business continuity and recovery
  10. 4.10Practice: coordinated disclosure procedure
  1. 5.1Laboratory competence requirements
  2. 5.2Accreditation and scope
  3. 5.3Impartiality and independence
  4. 5.4Evaluator competence and training
  5. 5.5Traceability and repeatability of testing
  6. 5.6Sample and confidentiality management
  7. 5.7Audit of the certification body
  8. 5.8Post-certification surveillance
  9. 5.9Withdrawal and suspension of certificates
  10. 5.10Practice: accreditation checklist
  1. 6.1Choice of product to certify
  2. 6.2Definition of the target of evaluation
  3. 6.3Threat analysis and security objectives
  4. 6.4Security target
  5. 6.5Evaluation and testing plan
  6. 6.6Secure development and vulnerability processes
  7. 6.7Certificate maintenance plan
  8. 6.8Budget and schedule
  9. 6.9Technical report
  10. 6.10Project defence
Methodology, software & labs

How you'll learn

100 % online training on the SEIUM campus, with downloadable material, recorded classes and a dedicated technical tutor. There are no fixed timetables: students progress at their own pace within the intake, making it possible to combine study with work.

Each module combines theory, guided reading of the original standard and applied exercises. The working software is Burp Suite, Wireshark, Nmap, Ghidra, OpenVAS, in free, academic or evaluation versions. Tests are studied using real procedures from ICT product evaluation laboratories, penetration testing in controlled environments and laboratory accreditation audits. Assessment is continuous per module, plus the final integrating project.

Accreditable laboratories(EN ISO/IEC 17025) with a rotor test bench, EMC/Lightning pre-compliance, HIL/SIL, vibration/acoustics.
Evidence-focused Master's Thesis:safety case, test plan, compliance dossier and operational limits.
Industry-mentored:lecturers with experience in training, , eVTOL/UAM and flight test.
Flexible format:(hybrid/online), international cohorts and support from SEIUM Career Services.
Ethics and security:a safety-by-design approach, with cyber-OT, DIH and compliance as its pillars.
Capstone project

Build it end to end

Your final project follows the real engineering workflow, step by step, reviewed by your tutor.

Choice of product to certify

Explain the product security evaluation model according to the Common Criteria.

Definition of the target of evaluation

Interpret protection profiles and security targets.

Threat analysis and security objectives

Plan security tests in accordance with a standardised methodology.

Security target

Carry out vulnerability tests in a controlled environment and document them.

Evaluation and testing plan

Apply vulnerability management and disclosure processes.

Career opportunities

Where this takes you

ICT product security evaluatorCybersecurity auditorPenetration testing analystTechnical manager of an evaluation laboratoryCybersecurity certification consultantProduct security engineer
Admissions & scholarships

Requirements

  • No prior degree is required.
  • Internet connection and a computer capable of running the programme's software.
  • Sufficient level of Spanish to follow the reading of technical standards.

Ready to start?

Send your application today. Our admissions team replies within 72 hours with your study plan and funding options.

Apply now Scholarships
FAQ

Frequently asked questions

The programme consists of 300 hours in total, spread over 3 to 5 months. That is an average of 10 to 15 hours a week, compatible with a full-time job.

You will work with Burp Suite, Wireshark, Nmap, Ghidra and OpenVAS. Free, academic or evaluation versions are used, and the tutor will indicate the free alternative where one exists.

An own diploma from SEIUM upon passing the continuous assessment and the integrating project. It is in-house training, not an official qualification from the Ministry.

Yes. Modules passed in a course or postgraduate diploma in the same area can be credited towards the advanced programme. Please check the credit transfer policy when you enrol.

Keep exploring

Related programmes

See all in Motorcycles & 2-Wheelers
Course575 $

Course on Academic Nuclear Safeguards

Online course of 300 h in Academic Nuclear Safeguards. 6 modules covering INFCIRC/153 (comprehensive safeguards agreements), INFCIRC/540 (Model Additional Protocol) and Python (pandas). Dedicated tutor and…

300 hOnlineElectromobility, Batteries & Hydrogen
Course480 $

Accident-Tolerant Fuel (ATF) Course

Online 300-hour course in accident-tolerant fuel (ATF). 6 modules covering 10 CFR 50.46 (ECCS acceptance criteria), NUREG-0800, chapter 4.2 (fuel design) and BISON. Assigned tutor and…

300 hOnlineMotorcycles & 2-Wheelers
Course620 $

Course in Tempered and Laminated Glass for Classic Cars

Online 300-hour course in tempered and laminated glass for classic cars. 6 modules with UN Regulation No. 43 (safety glazing), ISO 3537 (safety glass: mechanical tests)…

300 hHybridMotorcycles & 2-Wheelers
ISO/IEC Cybersecurity Testing CourseEnrol
Related programmes

More in Nuclear Engineering & Nuclear Fuel Cycle Technologies

Course in Safety Standards for Mining MachineryView programme →Course on Offset and Cooperation RegulationsView programme →Course in Fraud Detection Through TelematicsView programme →Mechanical Distributors Course: Complete RepairView programme →Course in Resilience Assessment in Urban InsuranceView programme →Military Vehicles Course: MRAPView programme →

All Nuclear Engineering & Nuclear Fuel Cycle Technologies programmes → · How to apply · Fees & financing · Scholarships

Scroll to Top
SEIUM – Institute of Advanced Engineering
Powered by  GDPR Cookie Compliance
Privacy Overview

This website uses cookies so that we can provide you with the best user experience possible. Cookie information is stored in your browser and performs functions such as recognising you when you return to our website and helping our team to understand which sections of the website you find most interesting and useful.