Postgraduate Diploma in Applied Clinical Data Security
Online Postgraduate Diploma of 800 h in Applied Clinical Data Security. 8 modules with Regulation (EU) 2016/679 (GDPR), ISO 27799 (information security in health) and Microsoft Sentinel. Assigned tutor and open enrolment.
Take the controls.
Run a real engineering trade-off from this field. Move the sliders, watch the model react in real time and beat the challenge.
What you will be able to do
Identify the specific threats facing the healthcare sector.
Interpret the regulatory framework for health data protection.
Manage identities and access in clinical environments.
Apply encryption, pseudonymisation and anonymisation.
Ensure interoperability, cloud and medical device security.
Carry out risk analysis and management.
Plan detection, response and continuity for incidents.
Who it's for
- Healthcare information security manager who wishes to specialise in Applied Clinical Data Security.
- Data protection officer who wishes to specialise in Applied Clinical Data Security.
- SOC analyst who wishes to specialise in Applied Clinical Data Security.
- Healthcare cybersecurity consultant who wishes to specialise in Applied Clinical Data Security.
- Security architect who wishes to specialise in Applied Clinical Data Security.
- Security auditor who wishes to specialise in Applied Clinical Data Security.
- Graduates in engineering or sciences seeking to enter hospitals.
What you'll work with
- Regulation (EU) 2016/679 (GDPR)
- ISO 27799 (information security in health)
- Directive (EU) 2022/2555 (NIS2)
- ISO/IEC 27001 (information security)
- Royal Decree 311/2022 (National Security Scheme)
- IEC 80001-1 (medical device networks)
- Organic Law 3/2018 (LOPDGDD)
8 modules · 800 h
1.1Ransomware in Hospitals: WannaCry and HSE Ireland 1.2 Attack on the Hospital Clínic de Barcelona (2023) 1.3 Threat Actors and Motivations 1.4 Value of Clinical Data on the Black Market 1.5 Attack Surface: HIS, PACS and LIS 1.6 Insider Threats and Improper Access 1.7 Supply Chain Attacks 1.8 Miter ATT&Cck in Healthcare 1.9 Impact on Continuity of Care 1.10 Case Study: Timeline of a Hospital Incident
2.1Health data as a special category under the GDPR2.2LOPDGDD and Law 41/20022.3National Security Scheme (RD 311/2022)2.4NIS2 Directive and the healthcare sector2.5HIPAA Security Rule as a reference2.6ISO/IEC 27001 and ISO 277992.772-hour breach notification2.8The healthcare data protection officer2.9Secondary use in the European Health Data Space2.10Workshop: requirements matrix for a hospital
3.1Role-based and context-aware access control3.2Emergency access (break the glass)3.3Multi-factor authentication at clinical workstations3.4Single sign-on and professional smart card3.5Privileged account management3.6Traceability of access to clinical records3.7Detection of anomalous access3.8Staff joiners and leavers3.9Remote access for suppliers3.10Lab: review of access logs to clinical records
4.1Encryption at rest for clinical databases4.2Encryption in transit in HL7 and FHIR4.3Key management and HSMs4.4Electronic signature of clinical reports4.5Pseudonymisation using tokens4.6k-anonymity and differential privacy4.7Re-identification in genomic data4.8Secure computation and homomorphic encryption4.9Backup security4.10Practical: pseudonymisation of a clinical extract
5.1Security of FHIR APIs and SMART on FHIR5.2OAuth 2.0 and OpenID Connect in healthcare5.3Risks of exposed DICOM servers5.4Unencrypted HL7 v2 messaging5.5Shared responsibility in the cloud5.6Provider certification under the ENS5.7Network segmentation for medical devices5.8Cybersecurity of healthcare software: IEC 81001-5-15.9Mobile applications and wearables5.10Lab: testing on a test FHIR server
6.1MAGERIT methodology and the PILAR tool6.2Impact assessment for clinical processing6.3Medical device networks: IEC 80001-16.4Vulnerability and patch management6.5Penetration testing in clinical environments6.6Processor contracts and third parties6.7Security metrics6.8Awareness training for healthcare staff6.9Phishing simulations6.10Case study: DPIA of a telemonitoring system
7.1SIEM monitoring in hospitals7.2Incident response plan7.3Coordination with CCN-CERT and INCIBE-CERT7.4Paper-based contingency procedures7.5Recovery of critical systems and RTO7.6Forensic analysis of incidents7.7Communication to patients and authorities7.8Tabletop exercises7.9Lessons learned and continuous improvement7.10Workshop: tabletop exercise for ransomware
8.1Description of the healthcare environment8.2Asset inventory and data flows8.3Risk analysis8.4Applicable regulatory requirements8.5Control architecture8.6Response and continuity plan8.7Roadmap and budget8.8Monitoring indicators8.9Report and presentation8.10Final review with the tutor
How you'll learn
100 % online training on the SEIUM campus, with downloadable material, recorded classes and assigned technical tutor. No fixed timetable: the student progresses at their own pace within the intake, which makes it possible to combine study with work.
Each module combines theory, guided reading of the original standard and applied exercises. The working software is Microsoft Sentinel, Splunk, Wireshark, ARX (anonymisation), OpenSSL, in free, academic or evaluation versions. Case studies cover real risk analysis procedures for clinical systems, incident response exercises, and anonymisation of clinical datasets. Assessment is continuous per module plus the final integrative project.
Build it end to end
Your final project follows the real engineering workflow, step by step, reviewed by your tutor.
Identify the specific threats facing the healthcare sector.
Interpret the regulatory framework for health data protection.
Manage identities and access in clinical environments.
Apply encryption, pseudonymisation and anonymisation.
Ensure interoperability, cloud and medical device security.
Where this takes you
Requirements
- Prior technical training or professional experience in the sector. A university degree is not required.
- Internet connection and a computer capable of running the programme's software.
- Spanish language level sufficient to follow technical regulatory texts.
Ready to start?
Send your application today. Our admissions team replies within 72 hours with your study plan and funding options.
Frequently asked questions
The programme totals 800 hours spread over 6 to 8 months. That is an average of 10 to 15 hours per week, compatible with a full-time job.
The programme uses Microsoft Sentinel, Splunk, Wireshark, ARX (anonymisation), OpenSSL. Free, academic or evaluation versions are used, and the tutor indicates the free alternative where one exists.
A SEIUM own diploma upon passing the continuous assessment and the integrative project. It is in-house training, not an official qualification from the Ministry.
Yes. Modules passed in a course or postgraduate diploma in the same area can be recognised in the advanced programme. Check the recognition policy when you enrol.
Related programmes
Postgraduate Diploma in Logistics, Kits and Patient Traceability
Online 800-hour postgraduate diploma in Logistics, Kits and Patient Traceability. 8 modules covering the Guidelines on Good Distribution Practice of Medicinal Products (2013/C 343/01), EudraLex Volume…
Postgraduate Diploma in Risk Communication and Effective Training
Online 800-hour Postgraduate Diploma in Risk Communication and Effective Training. 8 modules covering Spanish Law 31/1995 on Occupational Risk Prevention (arts. 18 and 19), ISO 45001…
Postgraduate Diploma in Wireless Charging and Power Management
Online 800-hour Postgraduate Diploma in Wireless Charging and Power Management. 8 modules covering Qi (Wireless Power Consortium), IEC 62368-1 (safety of audio/video and ICT equipment) and…
More in Health, Biomechanics, Wearables & Operational Safety
All Health, Biomechanics, Wearables & Operational Safety programmes → · How to apply · Fees & financing · Scholarships