OT Cybersecurity Course in Energy Systems
Online 300-hour course in OT cybersecurity for energy systems. 6 modules covering IEC 62443, Directive (EU) 2022/2555 (NIS2) and Nozomi Networks Guardian. Assigned tutor and open enrolment.
Take the controls.
Run a real engineering trade-off from this field. Move the sliders, watch the model react in real time and beat the challenge.
What you will be able to do
Differentiate the security requirements of OT environments from those of IT.
Assess cybersecurity risks in accordance with the IEC 62443 series.
Design segmented defensive architectures for energy installations.
Implement monitoring and detection capabilities in industrial networks.
Plan the response and recovery to OT incidents.
Apply the European and national regulatory framework for energy cybersecurity.
Prepare a comprehensive cybersecurity plan for an energy installation.
Who it's for
- OT cybersecurity engineer who wants to specialise in OT Cybersecurity in energy systems.
- Industrial security analyst who wants to specialise in OT Cybersecurity in energy systems.
- Control systems security manager who wants to specialise in OT Cybersecurity in energy systems.
- IEC 62443 consultant who wants to specialise in OT Cybersecurity in energy systems.
- Industrial network architect who wants to specialise in OT Cybersecurity in energy systems.
- Energy cybersecurity auditor who wants to specialise in OT Cybersecurity in energy systems.
- Graduates in engineering or sciences seeking to enter electricity utilities.
What you'll work with
- IEC 62443
- Directive (EU) 2022/2555 (NIS2)
- IEC 62351
- NIST SP 800-82 Rev. 3
- NIST Cybersecurity Framework 2.0
- Delegated Regulation (EU) 2024/1366 (cybersecurity network code)
- Spanish Law 8/2011 on the protection of critical infrastructure
- ISO/IEC 27019
6 modules · 300 h
1.1Differences between IT and OT environments1.2SCADA, DCS, PLC and RTU in energy1.3Substations, power plants and control centres1.4Purdue model and automation levels1.5Industrial protocols without native authentication1.6Availability and physical safety as priorities1.7Long lifecycle of control assets1.8Historical incidents in electrical grids1.9Threat landscape for the energy sector1.10Workshop: asset inventory of a substation
2.1IEC 62443 series and its roles2.2Zones, conduits and security levels2.3Risk assessment according to IEC 62443-3-22.4Process safety impact analysis2.5System requirements under IEC 62443-3-32.6NIST CSF framework and NIST SP 800-82 guidance2.7C2M2 maturity model2.8Supplier and integrator management2.9Security by design in new projects2.10Practice: defining zones and conduits of a plant
3.1Segmentation and industrial demilitarised zones3.2Industrial firewalls and data diodes3.3Secure remote access for maintenance3.4Identity and privilege management3.5Hardening of engineering workstations and HMIs3.6Application allowlisting3.7Patch management in OT environments3.8Backups of control configurations3.9Communications security with IEC 623513.10Laboratory: segmenting an OT network in a simulated environment
4.1Passive monitoring of industrial traffic4.2Automatic asset inventory4.3Anomaly detection in control protocols4.4IT and OT event correlation4.5Threat intelligence for the energy sector4.6MITRE ATT&CK for ICS framework4.7Indicators of compromise in OT environments4.8Vulnerability management without interrupting the process4.9Monitoring metrics4.10Case study: alert analysis in a substation network
5.1OT incident response plan5.2Coordination between operations and cybersecurity5.3Containment without affecting supply continuity5.4Recovery and restoration of control systems5.5Simulation and tabletop exercises5.6Incident notification to authorities5.7Business continuity and manual operation5.8Lessons learned after an incident5.9Cybersecurity culture in operations5.10Case study: tabletop exercise for ransomware at a control centre
6.1Description of the energy installation6.2Asset inventory and criticality6.3IEC 62443 risk assessment6.4Proposed security architecture6.5Monitoring plan6.6Incident response procedures6.7Roadmap and budget6.8Monitoring indicators6.9Report and presentation6.10Final review with the tutor
How you'll learn
100% online training on the SEIUM campus, with downloadable material, recorded classes and an assigned technical tutor. There are no fixed timetables: students progress at their own pace within the intake, which makes it possible to combine the programme with work.
Each module combines theory, guided reading of the original standard and applied exercises. The working software is Nozomi Networks Guardian, Claroty, Wireshark, Security Onion, GRASSMARLIN, in free, academic or evaluation versions. The case studies cover real IEC 62443 risk assessment procedures for a substation, segmentation of an OT network in the laboratory, and an incident response exercise in a control centre. Assessment is continuous per module, plus the final integrative project.
Build it end to end
Your final project follows the real engineering workflow, step by step, reviewed by your tutor.
Differentiate the security requirements of OT environments from those of IT.
Assess cybersecurity risks in accordance with the IEC 62443 series.
Design segmented defensive architectures for energy installations.
Implement monitoring and detection capabilities in industrial networks.
Plan the response and recovery to OT incidents.
Where this takes you
Requirements
- No previous qualification is required.
- Internet connection and a computer capable of running the programme's software.
- Sufficient level of Spanish to follow technical standards reading.
Ready to start?
Send your application today. Our admissions team replies within 72 hours with your study plan and funding options.
Frequently asked questions
The programme comprises 300 hours in total, spread over 3 to 5 months. That is between 10 and 15 hours per week on average, compatible with a full-time job.
You will work with Nozomi Networks Guardian, Claroty, Wireshark, Security Onion, GRASSMARLIN. Free, academic or evaluation versions are used, and the tutor indicates the free alternative where one exists.
An own diploma from SEIUM upon passing the continuous assessment and the integrative project. This is in-house training, not an official qualification from the Ministry.
Yes. Modules passed in a course or postgraduate diploma in the same area are recognised towards the advanced programme. Check the recognition policy when you enrol.
Related programmes
Course in Thermal Management in Storage Systems
The Course in Thermal Management in Storage Systems focuses on the design and optimisation of thermal management for energy storage systems. It explores the use of…
Course in Market Regulation in LATAM and the US
Online 300 h course in market regulation in LATAM and the US. 6 modules covering the Federal Power Act (United States), FERC Order 888 and PLEXOS.…
Airport Electrification Course
Online 300-hour course in airport electrification. 6 modules covering Regulation (EU) 2023/1804 (AFIR), ICAO Annex 14 and ETAP. Assigned tutor and open enrolment.
More in Energy and Networks
All Energy and Networks programmes → · How to apply · Fees & financing · Scholarships