Postgraduate Diploma in CSMS and OT Network Segmentation
Online 800 h Postgraduate Diploma in CSMS and OT Network Segmentation. 8 modules covering IEC 62443-2-1, IEC 62443-3-2 and Fortinet FortiGate. Assigned tutor and enrolment open.
Take the controls.
Run a real engineering trade-off from this programme. Move the sliders, watch the model react in real time and beat the challenge.
What you will be able to do
Establish a cybersecurity management system in line with IEC 62443-2-1.
Assess and treat industrial cybersecurity risks.
Design network segmentation by zones and conduits.
Select segmentation technologies suited to OT.
Implement operational controls of the management system.
Verify the effectiveness of the deployed segmentation.
Audit and improve the maturity of the management system.
Who it's for
- Industrial cybersecurity manager who wants to specialise in CSMS and OT Network Segmentation.
- OT security architect who wants to specialise in CSMS and OT Network Segmentation.
- Cybersecurity auditor who wants to specialise in CSMS and OT Network Segmentation.
- Industrial network engineer who wants to specialise in CSMS and OT Network Segmentation.
- IEC 62443 consultant who wants to specialise in CSMS and OT Network Segmentation.
- Technology risk analyst who wants to specialise in CSMS and OT Network Segmentation.
- Engineering or science graduates looking to enter the energy sector.
What you'll work with
- IEC 62443-2-1
- IEC 62443-3-2
- IEC 62443-3-3
- NIST SP 800-82 Rev. 3
- Directiva (UE) 2022/2555 (NIS2)
- ISO/IEC 27001
- IEC 62443-2-4
- NIST CSF 2.0
8 modules · 800 h
1.1CSMS concept in IEC 62443-2-11.2Scope and context of the organisation1.3Industrial cybersecurity policy1.4Roles, responsibilities and governance1.5Relationship with ISO/IEC 270011.6PDCA cycle applied to OT1.7Asset inventory and criticality1.8System documentation1.9Requirements for NIS2 operators1.10Case study: scope of a CSMS for a plant
2.1OT risk assessment methodologies2.2IEC 62443-3-2 process2.3Threat scenarios and consequences2.4Target security level2.5Risk treatment plans2.6Residual risk and acceptance2.7Integration with functional safety analysis2.8Risk register2.9Periodic review2.10Workshop: risk assessment of a zone
3.1Principles of zones and conduits3.2Grouping assets by function and criticality3.3Conduit design and permitted flows3.4Communication matrices3.5Industrial DMZ and shared services3.6Segmentation in legacy systems3.7Microsegmentation and zero trust3.8Wireless network segmentation3.9Architecture documentation3.10Laboratory: zone design in a process network
4.1Next-generation industrial firewalls4.2VLAN, VRF and access lists4.3Industrial protocol inspection4.4Unidirectional data diodes4.5Remote access with bastion hosts4.6Software-defined segmentation4.7802.1X network access control4.8Centralised rule management4.9Performance and latency in OT4.10Practice: firewall rules for Modbus/TCP
5.1Patch and vulnerability management5.2Change control in OT5.3Account and privilege management5.4Backup and restoration5.5Supplier management and IEC 62443-2-45.6Training and awareness5.7Monitoring and logging5.8Incident response5.9Business continuity5.10Case study: change management procedure
6.1Rule review and clean-up6.2Reachability testing6.3Monitoring unauthorised flows6.4Validation with OT visibility tools6.5Configuration auditing6.6Control effectiveness indicators6.7Attack simulation exercises6.8Exception management6.9Reports for management6.10Laboratory: flow auditing with Zeek
7.1Internal CSMS audits7.2IEC 62443-2-1 maturity levels7.3System and process certification7.4NIST CSF 2.0 framework in OT7.5Key cybersecurity indicators7.6Management review7.7Corrective actions7.8Supplier assessment7.9Sector benchmarking7.10Practice: maturity self-assessment
8.1Organisational context and scope8.2Inventory and risk analysis8.3Zone and conduit design8.4Selection of technical controls8.5Key operational procedures8.6Verification and audit plan8.7Implementation roadmap8.8Budget and resources8.9Report and presentation8.10Final review with the tutor
How you'll learn
100 % online training on the SEIUM campus, with downloadable material, recorded classes and an assigned technical tutor. No fixed timetable: students progress at their own pace within the intake, making it possible to combine study with work.
Each module combines theory, guided reading of the original standard and applied exercises. The working software is Fortinet FortiGate, Tenable OT Security, Nozomi Networks Guardian, Zeek, Wireshark, in free, academic or evaluation versions. Practical work is based on real procedures: auditing segmentation rules, assessing risk in an OT zone and self-assessing CSMS maturity. Assessment is continuous per module plus the final integrating project.
Build it end to end
Your final project follows the real engineering workflow, step by step, reviewed by your tutor.
Establish a cybersecurity management system in line with IEC 62443-2-1.
Assess and treat industrial cybersecurity risks.
Design network segmentation by zones and conduits.
Select segmentation technologies suited to OT.
Implement operational controls of the management system.
Where this takes you
Requirements
- Prior technical training or professional experience in the sector. A university degree is not required.
- Internet connection and a computer capable of running the programme's software.
- Sufficient Spanish to follow technical standards documentation.
Ready to start?
Send your application today. Our admissions team replies within 72 hours with your study plan and funding options.
Frequently asked questions
The programme totals 800 hours, spread over 6 to 8 months. That is an average of 10 to 15 hours per week, compatible with a full-time job.
The programme uses Fortinet FortiGate, Tenable OT Security, Nozomi Networks Guardian, Zeek and Wireshark. Free, academic or evaluation versions are used, and the tutor indicates the open-source alternative where one exists.
An SEIUM own diploma upon passing the continuous assessment and the final integrating project. It is in-house training, not an official qualification from the Ministry.
Yes. Modules passed in a course or postgraduate diploma in the same area are recognised in the higher programme. Check the recognition policy when you enrol.
Related programmes
Postgraduate Diploma in Advanced Helmet Design and Impact Management
Online Postgraduate Diploma of 800 hours in Advanced Helmet Design and Impact Management. 8 modules covering UNECE Regulation No. 22 (series 06), FIM Racing Homologation Programme…
Postgraduate Diploma in On-board Calibration and Self-Calibration (Intrinsic/Extrinsic)
Online 800-hour Postgraduate Diploma in On-board Calibration and Self-Calibration (intrinsic/extrinsic). 8 modules covering ISO 26262:2018, ISO 21448:2022 (SOTIF) and Kalibr. Assigned tutor and open enrolment.
Diploma in CAMO Management and Continuous Maintenance
The Diploma in CAMO Management and Continuing Maintenance focuses on aircraft airworthiness control, encompassing the planning, management, and monitoring of maintenance to ensure compliance with aviation…
More in Electromobility, Batteries & Hydrogen
All Electromobility, Batteries & Hydrogen programmes → · How to apply · Fees & financing · Scholarships