Postgraduate Diploma in IoMT Platform Design and Security
Online Postgraduate Diploma in IoMT Platform Design and Security. 800 h, 8 modules covering IEC 81001-5-1 (medical device software cybersecurity), MDCG 2019-16 (cybersecurity of medical devices) and Wireshark. Assigned tutor and open enrolment.
Take the controls.
Run a real engineering trade-off from this field. Move the sliders, watch the model react in real time and beat the challenge.
What you will be able to do
Design IoMT architectures from the device to the cloud.
Apply interoperability standards such as HL7 FHIR and IEEE 11073.
Identify threats and risks through threat modelling.
Implement security measures in the device and its firmware.
Protect the platform with encryption, authentication and segmentation.
Meet regulatory requirements for cybersecurity and privacy.
Establish post-market surveillance and vulnerability response.
Who it's for
- IoMT platform architect who wants to specialise in IoMT Platform Design and Security.
- Healthcare cybersecurity engineer who wants to specialise in IoMT Platform Design and Security.
- Interoperability engineer who wants to specialise in IoMT Platform Design and Security.
- Connected medical device developer who wants to specialise in IoMT Platform Design and Security.
- Product security manager who wants to specialise in IoMT Platform Design and Security.
- Healthcare DevSecOps engineer who wants to specialise in IoMT Platform Design and Security.
- Graduates in engineering or science looking to enter healthcare technology.
What you'll work with
- IEC 81001-5-1 (medical device software cybersecurity)
- MDCG 2019-16 (cybersecurity of medical devices)
- IEC 62443 (industrial control systems cybersecurity)
- ISO 14971 (risk management)
- HL7 FHIR (healthcare interoperability)
- IEEE 11073 (personal medical device communication)
- ETSI EN 303 645 (consumer IoT cybersecurity)
- Regulation (EU) 2016/679 (GDPR)
8 modules · 800 h
1.1Connected medical devices and wearables1.2Layers: device, gateway, cloud and application1.3BLE, MQTT and CoAP protocols1.4Home and mobile gateways1.5Healthcare cloud platforms1.6Edge and fog architectures1.7Scalability and availability1.8Remote patient monitoring1.9Deployment models1.10Workshop: reference architecture for remote monitoring
2.1HL7 v2 and CDA2.2HL7 FHIR and resources2.3IHE profiles for devices2.4IEEE 11073 for personal devices2.5SNOMED CT and LOINC terminologies2.6Integration with electronic health records2.7Continua Design Guidelines2.8APIs and SMART on FHIR2.9Interoperability testing2.10Lab: sending FHIR observations
3.1Attack surface of medical devices3.2Historical vulnerabilities in infusion pumps and pacemakers3.3STRIDE threat modelling3.4Attacks on BLE and radio3.5Cloud risks3.6Security risk assessment3.7Relationship between security and safety3.8Vulnerability databases3.9Software supply chain: SBOM3.10Practical: threat modelling of a connected glucometer
4.1Secure boot and root of trust4.2Secure key storage4.3Communication encryption and authentication4.4Signed over-the-air (OTA) updates4.5Secure BLE pairing4.6Debugging and protected ports4.7Secure elements and TPM4.8Hardware penetration testing4.9End of device life4.10Workshop: designing a secure update process
5.1Identity and access management5.2Authentication of patients and professionals5.3Encryption at rest5.4Logging and auditing5.5SIEM monitoring5.6API security5.7Tenant segregation5.8Backups5.9Incident response5.10Lab: configuring OAuth 2.0 on an API
6.1MDCG 2019-16 cybersecurity guidance6.2FDA premarket cybersecurity guidance6.3IEC 81001-5-16.4IEC 80001-1 for hospital networks6.5GDPR and health data6.6European Health Data Space6.7Spanish National Security Framework (ENS)6.8Cyber Resilience Act6.9Privacy impact assessments6.10Practical: privacy impact assessment of an IoMT app
7.1Post-market vulnerability management7.2Coordinated disclosure7.3Patching device fleets7.4Device monitoring7.5Security indicators7.6Supplier management7.7Audits and certifications7.8Training for healthcare staff7.9Continuous improvement7.10Case study: responding to a published vulnerability
8.1Clinical use case8.2Platform architecture8.3Interoperability8.4Threat modelling8.5Device controls8.6Platform controls8.7Regulatory plan8.8Operations plan8.9Report and presentation8.10Final review with the tutor
How you'll learn
100 % online training on the SEIUM campus, with downloadable material, recorded lectures and an assigned technical tutor. No fixed timetable: students progress at their own pace within the intake, which makes it possible to combine with work.
Each module combines theory, guided reading of the original standard and applied exercises. The working software is Wireshark, Eclipse Mosquitto (MQTT), AWS IoT Core, OWASP ZAP, Node-RED, in free, academic or evaluation versions. The exercises draw on real-world procedures: threat modelling with STRIDE, penetration testing of connected devices, and FHIR-based data integration in a test environment. Assessment is continuous across modules, plus the final integrative project.
Build it end to end
Your final project follows the real engineering workflow, step by step, reviewed by your tutor.
Design IoMT architectures from the device to the cloud.
Apply interoperability standards such as HL7 FHIR and IEEE 11073.
Identify threats and risks through threat modelling.
Implement security measures in the device and its firmware.
Protect the platform with encryption, authentication and segmentation.
Where this takes you
Requirements
- Prior technical training or professional experience in the sector. No university degree is required.
- Internet connection and a computer capable of running the programme's software.
- Sufficient level of Spanish to follow technical regulatory texts.
Ready to start?
Send your application today. Our admissions team replies within 72 hours with your study plan and funding options.
Frequently asked questions
The programme comprises 800 hours in total, spread over 6 to 8 months. That is an average of 10 to 15 hours per week, compatible with full-time work.
You will work with Wireshark, Eclipse Mosquitto (MQTT), AWS IoT Core, OWASP ZAP, Node-RED. Free, academic or evaluation versions are used, and the tutor indicates the free alternative where one exists.
A SEIUM diploma, awarded on passing continuous assessment and the integrative project. It is in-house training, not an official qualification from the Ministry.
Yes. Modules passed in a course or diploma in the same area are recognised in the higher programme. Check the recognition policy when you enrol.
Related programmes
Postgraduate Diploma in Recommendations, CAPA and Follow-up
Online 800-hour Postgraduate Diploma in Recommendations, CAPA and Follow-up. 8 modules covering ISO 9001 (clause 10.2: nonconformity and corrective action), ISO 13485 (clause 8.5.2: corrective action)…
Postgraduate Diploma in EMG, Processing and Neuromuscular Control
Online Postgraduate Diploma of 800 h in EMG, Processing and Neuromuscular Control. 8 modules with SENIAM Recommendations (surface EMG), ISEK Standards for EMG data communication and…
Postgraduate Diploma in Motion Capture and Haptic Feedback
Online Postgraduate Diploma of 800 h in Motion Capture and Haptic Feedback. 8 modules covering ISO 9241-910 (touch and haptic interaction, framework), ISO 9241-920 (guidance on…
More in Health, Biomechanics, Wearables & Operational Safety
All Health, Biomechanics, Wearables & Operational Safety programmes → · How to apply · Fees & financing · Scholarships