Apply now
Master'sDefense, Military Engineering & Land Systems Applications open

Master’s in Data Governance, Classification and Information Security Engineering (NATO/EU/US)

Online master's programme of 1,900 hours in data governance, classification and information security engineering (NATO/EU/US). 12 modules covering C-M(2002)49, Council Decision 2013/488/EU, NIST SP 800-171, CMMC, data-centric security architectures and industrial security, using Microsoft Purview and Collibra, with an assigned technical tutor.

Duration1900 h
ModeOnline
LanguageEnglish
Start datesSet by the faculty
AwardSEIUM Institute diploma
Enrol now View syllabus Ask an advisor
Virtual lab · try it before you enrol

Take the controls.

Run a real engineering trade-off from this field. Move the sliders, watch the model react in real time and beat the challenge.

SIM · LIVE ●
Learning outcomes

What you will be able to do

01

Design data governance frameworks in defence.

02

Apply national, NATO, EU and US classification systems.

03

Meet NATO and EU information security requirements.

04

Manage controlled information in line with NIST SP 800-171 and CMMC.

05

Design data-centric security architectures.

06

Manage industrial security and information sharing.

07

Apply ethical and accountability principles to secrecy.

Profile

Who it's for

  • Information security managers in defence organisations and suppliers.
  • Data governance leads responsible for catalogues, quality and data life cycle.
  • Facility security officers handling classified contracts and clearances.
  • CMMC compliance consultants advising suppliers to the US market.
  • Data security architects designing labelling, access control and cross-domain solutions.
  • Security auditors reviewing compliance with NATO, EU and US requirements.
  • Engineering or science graduates aiming to enter the defence industry.
Standards & tools

What you'll work with

  • C-M(2002)49 (NATO security policy)
  • Council Decision 2013/488/EU (security rules for protecting EU classified information)
  • Law 9/1968 (Spanish Official Secrets Act)
  • NIST SP 800-171 (protecting controlled unclassified information)
  • 32 CFR Part 2002 (controlled unclassified information)
  • Executive Order 13526 (classified national security information)
  • 32 CFR Part 170 (CMMC programme)
  • ISO/IEC 27001:2022 (information security management systems)
  • Microsoft Purview
  • Collibra
  • Titus Classification
  • Varonis
  • Splunk
Syllabus

12 modules · 1900 h

  1. 1.1Data as an asset in defence
  2. 1.2NATO and EU data strategies
  3. 1.3Data governance frameworks
  4. 1.4Roles and responsibilities
  5. 1.5Data life cycle
  6. 1.6Data quality
  7. 1.7Catalogues and metadata
  8. 1.8Data interoperability
  9. 1.9Data ethics
  10. 1.10Case study: data governance assessment of an organisation
  1. 2.1Classification principles
  2. 2.2National classification levels
  3. 2.3Spanish Official Secrets Act (Law 9/1968)
  4. 2.4National Authority for the Protection of Classified Information
  5. 2.5NATO classification
  6. 2.6EU classification
  7. 2.7US classification and Executive Order 13526
  8. 2.8Equivalences between systems
  9. 2.9Declassification
  10. 2.10Practical exercise: table of classification level equivalences
  1. 3.1NATO security policy C-M(2002)49
  2. 3.2Security directives
  3. 3.3Personnel security
  4. 3.4Physical security
  5. 3.5Security of information
  6. 3.6INFOSEC
  7. 3.7Industrial security
  8. 3.8Security agreements
  9. 3.9NATO audits
  10. 3.10Case study: security requirements of a NATO project
  1. 4.1Council Decision 2013/488/EU
  2. 4.2Commission security rules
  3. 4.3EU classified information
  4. 4.4System accreditation
  5. 4.5Industrial security in European programmes
  6. 4.6European Defence Fund and security
  7. 4.7Agreements with third countries
  8. 4.8Incident management
  9. 4.9Oversight
  10. 4.10Workshop: security plan for a European Defence Fund project
  1. 5.1Controlled Unclassified Information (CUI)
  2. 5.2CUI Registry and categories
  3. 5.332 CFR Part 2002
  4. 5.4NIST SP 800-171
  5. 5.5CMMC 2.0
  6. 5.6ITAR-controlled technical data
  7. 5.7NISPOM industrial security programme
  8. 5.8Requirements for foreign suppliers
  9. 5.9Audits and assessment
  10. 5.10Practical exercise: NIST SP 800-171 self-assessment
  1. 6.1Role-based and attribute-based access control
  2. 6.2Data labelling
  3. 6.3Digital rights management
  4. 6.4Data loss prevention
  5. 6.5Encryption of data at rest and in transit
  6. 6.6Cross-domain solutions
  7. 6.7Data-centric zero trust
  8. 6.8Identity federation
  9. 6.9Logging and auditing
  10. 6.10Lab: attribute-based access control with labels
  1. 7.1System accreditation
  2. 7.2TEMPEST security requirements: principles
  3. 7.3Security zones and areas
  4. 7.4Media management
  5. 7.5Secure erasure and destruction
  6. 7.6Approved products
  7. 7.7Configuration management
  8. 7.8Inspections
  9. 7.9Incident management
  10. 7.10Case study: media management procedure
  1. 8.1Need to know versus need to share
  2. 8.2Sharing in coalitions
  3. 8.3Federated mission networks
  4. 8.4Label interoperability
  5. 8.5Sharing agreements
  6. 8.6Personal data protection in defence
  7. 8.7Open-source intelligence and privacy
  8. 8.8Aggregation risks
  9. 8.9Sharing governance
  10. 8.10Practical exercise: information sharing agreement
  1. 9.1Data platforms in defence
  2. 9.2Quality and lineage
  3. 9.3Analytics in secure environments
  4. 9.4Machine learning with sensitive data
  5. 9.5Differential privacy and federation
  6. 9.6AI model governance
  7. 9.7NATO principles of responsible use of AI
  8. 9.8Algorithm auditing
  9. 9.9Generative AI risks
  10. 9.10Workshop: risk assessment of an AI model using sensitive data
  1. 10.1Facility security clearances
  2. 10.2Personnel security clearances
  3. 10.3Classified contracts
  4. 10.4Security classification guides
  5. 10.5International visits
  6. 10.6Transport of classified material
  7. 10.7Subcontracting
  8. 10.8Inspections
  9. 10.9Training and awareness
  10. 10.10Case study: classification guide for a contract
  1. 11.1Information security audits
  2. 11.2Compliance indicators
  3. 11.3Security risk management
  4. 11.4Insider threat
  5. 11.5Whistleblowing channels
  6. 11.6Legal liability
  7. 11.7Transparency and access to information
  8. 11.8Ethics of secrecy
  9. 11.9Accountability
  10. 11.10Practical exercise: insider threat prevention programme
  1. 12.1Selection of the organisation or project
  2. 12.2Data governance assessment
  3. 12.3Map of NATO, EU and US requirements
  4. 12.4Design of the classification model
  5. 12.5Data security architecture
  6. 12.6Compliance plan
  7. 12.7Implementation plan
  8. 12.8Conclusions
  9. 12.9Master's Thesis report
  10. 12.10Master's Thesis: defence before a panel
Methodology, software & labs

How you'll learn

100% online training on the SEIUM campus, with downloadable material, recorded classes and an assigned technical tutor. There are no fixed timetables: you progress at your own pace within the intake, so the programme can be combined with work.

Each module combines theory, guided reading of the original standard and applied exercises. The working software is Microsoft Purview, Collibra, Titus Classification, Varonis and Splunk, in free, academic or evaluation versions. Practical work is based on real procedures for designing classification and data-labelling models, NIST SP 800-171 self-assessments and drawing up security plans for international projects. Assessment is continuous by module, plus the final Master's Thesis.

Standards covered: C-M(2002)49, Council Decision 2013/488/EU, Law 9/1968, NIST SP 800-171, 32 CFR Part 2002, Executive Order 13526, 32 CFR Part 170, ISO/IEC 27001:2022.

Assigned technical tutor:every module ends with a deliverable that your tutor marks individually.
Standards-based learning:guided reading of C-M(2002)49, Council Decision 2013/488/EU and NIST SP 800-171 applied to real cases, not as a theoretical annex.
Industry software:Microsoft Purview, Collibra, Titus Classification, Varonis and Splunk, in free, academic or evaluation versions.
Master's Thesis with defence:A data governance and information security project for an organisation, covering NATO, EU and US requirements, classification model, data security architecture and compliance plan, defended before a panel.
Flexible format:100% online, no fixed timetables, compatible with full-time work.
Capstone project

Build it end to end

Your final project follows the real engineering workflow, step by step, reviewed by your tutor.

Governance assessment
Assess the data governance maturity of a chosen organisation or project.
Requirements map
Map the applicable NATO, EU and US classification and security requirements.
Classification model
Design a classification and labelling model with equivalences between systems.
Data security architecture
Design attribute-based access control and data loss prevention for labelled data.
Master's Thesis
A complete data governance and security project with compliance and implementation plans, defended before a panel.
Career opportunities

Where this takes you

Information security managerData governance leadFacility security officerCMMC compliance consultantData security architectSecurity auditor
Admissions & scholarships

Requirements

  • University degree in engineering, science or architecture, or equivalent demonstrable professional experience.
  • Internet connection and a computer capable of running the programme software.
  • English sufficient to read technical standards.

Ready to start?

Send your application today. Our admissions team replies within 72 hours with your study plan and funding options.

Apply now Scholarships
FAQ

Frequently asked questions

The programme totals 1,900 hours over 12–14 months. You set your own pace within each intake, and your tutor helps you plan the workload around your job.

You work with Microsoft Purview, Collibra, Titus Classification, Varonis and Splunk, using free, academic or evaluation versions. Your tutor indicates the free alternative wherever one exists.

A SEIUM Institute diploma, awarded on passing the continuous assessment and the Master's Thesis. It is SEIUM's own qualification, not an official state degree; its recognition depends on the programme completed and the regulations of each country.

Yes. Modules passed in a course or postgraduate diploma in the same area are recognised in the higher programme. Ask about the recognition policy when you enrol.

A degree in engineering, science or architecture (or equivalent professional experience), a suitable computer and English sufficient to read technical standards.

Start dates are set by SEIUM's faculty for each intake. Our admissions team will confirm the next available date when you apply.

Keep exploring

Related programmes

See all in Defense, Military Engineering & Land Systems
Master's11,090 $

Master’s in Advanced Ground Sensors Engineering (Hyperspectral, Thermal, Ground Radar)

Online master's programme of 1,900 hours in advanced ground-based sensor engineering (hyperspectral, thermal and ground radar). 12 modules covering the academic and ethical framework, radiometry and…

1900 hOnlineDefense, Military Engineering & Land Systems
Master's11,090 $

Master’s in Defence Supply Chain Management and Industrial Sovereignty Engineering

Online master's programme of 1,900 hours in defence supply chain management and industrial sovereignty engineering. 12 modules covering defence supply chains, supply risk analysis, European industrial…

1900 hOnlineDefense, Military Engineering & Land Systems
Master's11,090 $

Master’s in Avionics, Mission Systems and Open Architectures (MOSA/CMOSS) Engineering

Online master's programme of 1,900 hours in avionics, mission systems and open architectures (MOSA/CMOSS), structured in 12 modules covering MOSA, IMA avionics architecture, FACE, SOSA and…

1900 hOnlineDefense, Military Engineering & Land Systems
Master’s in Data Governance, Classification and Information Security Engineering (NATO/EU/US)Enrol
Related programmes

More in Defense, Military Engineering & Land Systems

Master’s in Submarine Engineering: Pressure Hull and Acoustic StealthView programme →Master’s in Autonomy, Responsible AI & Software EngineeringView programme →Master’s in Resilient Autonomy and Navigation in GPS-Denied Environments EngineeringView programme →Master’s in EOD, UXO and Humanitarian Demining Engineering (Technical-Regulatory, Non-Operational)View programme →Master’s in Tactical SDR/MANET Networks and Land SATCOM EngineeringView programme →Master’s in Signature Management (LO/Stealth) and Electromagnetic Compatibility EngineeringView programme →

All Defense, Military Engineering & Land Systems programmes → · How to apply · Fees & financing · Scholarships

Scroll to Top
SEIUM – Institute of Advanced Engineering
Powered by  GDPR Cookie Compliance
Privacy Overview

This website uses cookies so that we can provide you with the best user experience possible. Cookie information is stored in your browser and performs functions such as recognising you when you return to our website and helping our team to understand which sections of the website you find most interesting and useful.