Postgraduate Diploma in EVSE Hardening and Incident Response
Online 800-hour postgraduate diploma in EVSE hardening and incident response. 8 modules covering IEC 62443-4-2, IEC 62443-4-1 and Wireshark. Assigned tutor and open enrolment.
Take the controls.
Run a real engineering trade-off from this field. Move the sliders, watch the model react in real time and beat the challenge.
What you will be able to do
Identify the attack surface of a charging unit.
Apply firmware and embedded operating system hardening techniques.
Protect charger communications through segmentation and encryption.
Implement physical security measures and tamper detection.
Configure monitoring and detection of security events.
Manage incidents in accordance with NIST SP 800-61 and NIS2.
Prioritise and remediate vulnerabilities across charger fleets.
Who it's for
- Embedded systems security engineer who wants to specialise in EVSE Hardening and Incident Response.
- Security operations centre analyst who wants to specialise in EVSE Hardening and Incident Response.
- OT incident response specialist who wants to specialise in EVSE Hardening and Incident Response.
- IoT device penetration tester who wants to specialise in EVSE Hardening and Incident Response.
- EVSE product security manager who wants to specialise in EVSE Hardening and Incident Response.
- Industrial cybersecurity consultant who wants to specialise in EVSE Hardening and Incident Response.
- Engineering or science graduates seeking to enter charging equipment manufacturing.
What you'll work with
- IEC 62443-4-2
- IEC 62443-4-1
- NIST SP 800-61
- Directiva (UE) 2022/2555
- Reglamento (UE) 2024/2847
- ETSI EN 303 645
- ISO/IEC 27001
- PCI DSS
8 modules · 800 h
1.1Controller, HMI and communication modules1.2Debug ports and physical access1.3Mobile and Ethernet communications1.4RFID readers and payment terminals1.5Communication with the electric vehicle1.6Backend and associated mobile applications1.7Published vulnerabilities in commercial chargers1.8Potential impact on the electricity grid1.9Threat actor profiles1.10Case study: attack surface inventory
2.1Secure boot and chain of trust2.2Firmware signing and verification2.3Minimised embedded Linux systems2.4Removal of default credentials2.5Encryption of local storage2.6Disabling unnecessary services2.7Use of TPM and secure elements2.8Secure and reversible OTA updates2.9Software Bill of Materials (SBOM)2.10Lab: hardening an embedded Linux system
3.1TLS in OCPP communication3.2VPNs and private APNs for chargers3.3Network segmentation at the site3.4Firewalls and access control lists3.5Wi-Fi and Bluetooth interface security3.6Protection of remote management interfaces3.7ISO 15118 communication security3.8Traffic anomaly detection3.9PCI payment terminal security3.10Practice: network segmentation of an charging station
4.1Locks and opening sensors4.2Protection of JTAG and UART ports4.3Sealing and tamper detection4.4Energy meter protection4.5CCTV and access control4.6Vandalism and cable theft4.7Physical measures for payment terminals4.8Periodic physical inspections of the equipment4.9Secure key and access management4.10Workshop: physical audit of a charger
5.1Security logs in OCPP5.2SIEM and event correlation5.3Indicators of compromise in chargers5.4Firmware integrity monitoring5.5OT intrusion detection systems5.6Sector threat intelligence5.7Thresholds and alert generation5.8Security operations centre5.9Detection effectiveness metrics5.10Lab: detection rules in a SIEM
6.1Response cycle according to NIST SP 800-616.2Incident response plan6.3CSIRT roles and team composition6.4Containment of compromised chargers6.5Forensic analysis of embedded systems6.6Eradication and service recovery6.7Incident notification under NIS26.8Communication with customers and authorities6.9Lessons learned after the incident6.10Case study: backend attack simulation
7.1Coordinated vulnerability disclosure7.2CVE identifiers and CVSS scoring7.3Patch management across charger fleets7.4Secure development under IEC 62443-4-17.5Component requirements under IEC 62443-4-27.6ETSI EN 303 645 requirements7.7Obligations of the Cyber Resilience Act7.8Penetration testing of chargers7.9Vulnerability reward programmes7.10Practice: prioritising vulnerabilities with CVSS
8.1Initial security assessment8.2Equipment hardening plan8.3Segmented network architecture8.4Monitoring and detection architecture8.5Incident response plan8.6Vulnerability management procedure8.7Simulation and evaluation of results8.8Improvement roadmap8.9Report and presentation8.10Final review with the tutor
How you'll learn
100% online training on the SEIUM Institute campus, with downloadable material, recorded classes and an assigned technical tutor. No fixed timetables: students progress at their own pace within the intake, which makes it possible to combine study with work.
Each module combines theory, guided reading of the original standard and applied exercises. The working software is Wireshark, Nmap, Wazuh, Binwalk, Ghidra, in free, academic or evaluation versions. Tests are studied using real procedures from charger security assessments in the laboratory, incident response simulations on charging networks, and physical audits of public charging points. Assessment is continuous per module plus the final integrating project.
Build it end to end
Your final project follows the real engineering workflow, step by step, reviewed by your tutor.
Identify the attack surface of a charging unit.
Apply firmware and embedded operating system hardening techniques.
Protect charger communications through segmentation and encryption.
Implement physical security measures and tamper detection.
Configure monitoring and detection of security events.
Where this takes you
Requirements
- Prior technical training or professional experience in the sector. A university degree is not required.
- Internet connection and a computer capable of running the programme's software.
- Sufficient command of Spanish to follow technical standards documentation.
Ready to start?
Send your application today. Our admissions team replies within 72 hours with your study plan and funding options.
Frequently asked questions
The programme comprises 800 total hours spread over 6 to 8 months. That is 10 to 15 hours per week on average, compatible with a full-time job.
You work with Wireshark, Nmap, Wazuh, Binwalk and Ghidra. Free, academic or evaluation versions are used, and the tutor indicates the free alternative where one exists.
An own diploma from SEIUM Institute upon passing continuous assessment and the integrating project. It is in-house training, not an official qualification from the Ministry.
Yes. Modules passed in a course or postgraduate diploma in the same area are recognised towards the higher programme. Check the recognition policy when you enrol.
Related programmes
Postgraduate Diploma in PV+BESS+EV Design and Microgrid Control
Online 800-hour Postgraduate Diploma in PV+BESS+EV Design and Microgrid Control. 8 modules covering IEEE 2030.7, IEEE 2030.8 and PVsyst. Assigned tutor and open enrolment.
Postgraduate Diploma in Battery Transport and International Compliance
Online 800-hour Postgraduate Diploma in Battery Transport and International Compliance. 8 modules covering the UN Manual of Tests and Criteria, section 38.3, ADR and SAP EHS…
Postgraduate Diploma in Compliance Programmes and Accredited Laboratories
Online 800-hour Postgraduate Diploma in Compliance Programmes and Accredited Laboratories. 8 modules covering ISO/IEC 17025, ISO/IEC 17065 and LabWare LIMS. Assigned tutor and open enrolment.
More in Electromobility, Batteries & Hydrogen
All Electromobility, Batteries & Hydrogen programmes → · How to apply · Fees & financing · Scholarships