Diploma in OT/IoT Cyber Risk and Operational Continuity
Online postgraduate diploma of 800 hours in OT/IoT cyber risk and operational continuity. 8 modules covering OT and IoT assets, industrial threats, IEC 62443 risk assessment, protection controls, monitoring and detection, operational continuity and industrial incident response, with an assigned technical tutor.
Diploma in OT/IoT Cyber Risk and Operational Continuity — studying from Australia
Technology-driven organisations in Australia need professionals who combine engineering knowledge with business management, project governance and policy understanding. Sectors such as mining, energy, infrastructure and defence rely on technical managers who can translate complex engineering decisions into investment and regulatory terms. Government departments, industry bodies and consultancies in Canberra, Sydney and Melbourne actively shape technology policy, including innovation, digital transformation and critical technologies. Graduates often move into programme management, consulting or strategy roles within large engineering-intensive organisations.
Fees for Australia: A$2,850 (AUD), with instalments and employer sponsorship available.
Relevant bodies in Australia
Typical roles
Questions from Australia
Which Australian bodies relate to engineering management and technology policy?
Engineers Australia is the main professional body and offers pathways for engineering managers, while the Australian Institute of Company Directors and CPA Australia cover management and governance. SEIUM's private qualifications are not accredited by any of these bodies. Recognition is decided by employers or the relevant body, so verify it before enrolling.
What roles in Australia could this qualification support?
Engineering management, technology policy, and project leadership roles exist across government, utilities, consultancies and industry. Employers generally weigh your experience and leadership record heavily. A SEIUM qualification may add to your profile, but its acceptance depends on each employer.
Can I study this from Australia without a visa and with a job?
Yes, the programmes are fully online and in English, so you can study from Australia with no student visa required. Plan around 300 to 1,900 hours depending on the programme, and note an assigned technical tutor and a final project are included. Fees can be paid in instalments, and employer sponsorship may be possible.
Take the controls.
Run a real engineering trade-off from this field. Move the sliders, watch the model react in real time and beat the challenge.
What you will be able to do
Inventory OT and IoT assets and their dependencies.
Analyse the threats affecting industrial environments.
Assess cyber risk taking physical consequences into account.
Implement protection controls in OT and IoT networks.
Deploy monitoring and detection capabilities.
Design realistic operational continuity plans.
Coordinate incident response in industrial environments.
Who it's for
- Industrial cybersecurity engineers.
- Operational continuity managers in manufacturing and utilities.
- OT risk analysts.
- Industrial network architects.
- IoT security consultants.
- OT incident response leads.
- Engineering or science graduates seeking to enter manufacturing.
What you'll work with
- IEC 62443 (security of industrial automation and control systems)
- ISO 22301 (business continuity)
- Directive (EU) 2022/2555 NIS2 (cybersecurity of essential and important entities)
- NIST SP 800-82 (guide to industrial control systems security)
- ETSI EN 303 645 (cybersecurity of consumer IoT devices)
- ISO/IEC 27001 (information security management systems)
- Regulation (EU) 2024/2847 (Cyber Resilience Act)
- IEC 61511 (functional safety in the process industry)
- Nozomi Networks Guardian
- Claroty xDome
- Dragos Platform
- Wireshark
- Microsoft Defender for IoT
8 modules
1.1SCADA, DCS and PLC systems1.2Industrial and building IoT devices1.3Connected sensors and gateways1.4The Purdue architecture and its evolution1.5Industrial cloud connectivity1.6Legacy assets and obsolescence1.7Passive and active asset inventory1.8Dependencies between processes and systems1.9Suppliers and remote access1.10Case study: OT inventory of a packaging plant
2.1Landmark incidents such as Triton and Industroyer2.2Ransomware with impact on production2.3IoT device botnets2.4Firmware vulnerabilities2.5Attacks via third-party remote access2.6MITRE ATT&CK for ICS framework2.7Insider threats and operational errors2.8Industrial threat intelligence2.9CISA and CCN-CERT security advisories2.10Practical exercise: mapping an incident in ATT&CK for ICS
3.1Assessment according to IEC 62443-3-23.2Analysis of physical consequences3.3Integration with HAZOP and functional safety analysis3.4CyberPHA risk analysis methodology3.5Economic quantification of risk3.6Production shutdown scenarios3.7Third-party risk in OT3.8Risk tolerance and acceptance criteria3.9Risk register3.10Workshop: CyberPHA of a production line
4.1Segmentation into zones and conduits4.2Industrial firewalls and DMZ4.3Secure, supervised remote access4.4Vulnerability management in OT4.5Application whitelisting4.6IoT life-cycle security4.7ETSI EN 303 645 requirements4.8Configuration backups4.9Hardening of engineering workstations4.10Lab: segmentation of a plant network
5.1Passive monitoring of industrial traffic5.2Protocol anomaly detection5.3Integration with the corporate SOC5.4OT-specific use cases5.5Event logging and correlation5.6IoT device monitoring5.7Industrial indicators of compromise5.8False positive management5.9Detection metrics5.10Practical exercise: Modbus and S7 traffic analysis
6.1Business impact analysis of physical processes6.2Recovery times in production6.3Manual and degraded operating modes6.4Recovery plans for control systems6.5Critical spares and backup equipment6.6PLC and SCADA restoration tests6.7ISO 22301 applied to the plant6.8Coordination with maintenance6.9Continuity exercises6.10Case study: continuity plan for a chemical plant
7.1OT-specific response plan7.2Roles of IT, OT and physical security7.3Containment without putting the process at risk7.4Forensic analysis in industrial environments7.5Communication with authorities and customers7.6Notification under NIS27.7Secure restoration and validation7.8Lessons-learned log7.9Industrial cyber-risk insurance7.10Workshop: tabletop exercise of ransomware in a plant
8.1Selection of the facility8.2Asset inventory8.3Risk assessment8.4Control design8.5Monitoring plan8.6Continuity plan8.7Response plan8.8Investment roadmap8.9Report and presentation8.10Final project: final review with the tutor
How you'll learn
100% online training on the SEIUM campus, with downloadable material, recorded classes and an assigned technical tutor. There are no fixed timetables: you progress at your own pace within each intake, so the programme fits around your job.
Each module combines theory, guided reading of the original standard and applied exercises. The software used is Nozomi Networks Guardian, Claroty xDome, Dragos Platform, Wireshark and Microsoft Defender for IoT, in free, academic or evaluation versions. Exercises are based on real procedures: a CyberPHA of a production line, a restoration test of a SCADA system and a tabletop exercise of a plant incident. Assessment is continuous by module plus the final project.
Standards covered: IEC 62443, ISO 22301, Directive (EU) 2022/2555 NIS2, NIST SP 800-82, ETSI EN 303 645, ISO/IEC 27001, Regulation (EU) 2024/2847 (Cyber Resilience Act), IEC 61511.
Build it end to end
Your final project follows the real engineering workflow, step by step, reviewed by your tutor.
Where this takes you
Requirements
- Prior technical training or professional experience in the sector. No university degree is required.
- Internet connection and a computer capable of running the programme software.
- English sufficient to read technical standards.
Ready to start?
Send your application today. Our admissions team replies within 72 hours with your study plan and funding options.
Frequently asked questions
The programme totals 800 hours over 6–8 months. You set your own pace within each intake, and your tutor helps you plan the workload around your job.
You work with Nozomi Networks Guardian, Claroty xDome, Dragos Platform, Wireshark and Microsoft Defender for IoT, using free, academic or evaluation versions. Your tutor indicates the free alternative wherever one exists.
A SEIUM Institute diploma, awarded on passing the continuous assessment and the final project. It is SEIUM's own qualification, not an official state degree; its recognition depends on the programme completed and the regulations of each country.
Yes. Modules passed are recognised in a higher programme in the same area (postgraduate diploma or master's). Ask about the recognition policy when you enrol.
Prior technical training or professional experience in the sector; no university degree is required.
Start dates are set by SEIUM's faculty for each intake. Our admissions team will confirm the next available date when you apply.
Related programmes
Diploma in Feature Roadmap, Bundles and Usage-Based Pricing
Online postgraduate diploma of 800 hours in feature roadmap, bundles and usage-based pricing. 8 modules covering fundamentals, the regulatory framework (Regulation (EU) 2017/745 (MDR), ISO 13485),…
Diploma in ESG Risk Management and Combating Greenwashing
Online postgraduate diploma of 800 hours in ESG risk management and combating greenwashing. 8 modules covering ESG risks, forms of greenwashing, the EU anti-greenwashing framework, measurement…
Diploma in Export Compliance Programmes and Audits
Online postgraduate diploma of 800 hours in export compliance programmes and audits. 8 modules covering export control fundamentals, internal compliance programmes, dual-use classification, screening, licences, export…
More in Business, Management & Technology Policy
All Business, Management & Technology Policy programmes → · How to apply · Fees & financing · Scholarships