Ethics in Simulated Cyber Attacks Course
Online 300-hour course in ethics in simulated cyber attacks. 6 modules covering NIST SP 800-84 (test, training and exercise programmes), NIST SP 800-115 (technical guide to security testing) and MITRE ATT&CK Navigator. Assigned tutor and open enrolment.
Ethics in Simulated Cyber Attacks Course — studying from Australia
Defence is one of Australia's largest engineering employers, with major programmes in land systems, naval platforms, aircraft and integrated systems managed through the Department of Defence. Land systems engineering supports armoured vehicles, weapons and logistics equipment, often through prime contractors and local industry partners. Industry involvement is strongly encouraged through the Defence industry policy framework. Engineers work on sustainment, capability development, systems integration and safety assurance, typically in Canberra, Adelaide, Melbourne and regional defence precincts.
Fees for Australia: A$1,020 (AUD), with instalments and employer sponsorship available.
Relevant bodies in Australia
Typical roles
Questions from Australia
How does defence engineering recognition work in Australia?
Defence engineering in Australia is largely run through the Department of Defence and its industry partners, which set their own security clearance and qualification requirements. Engineers Australia is the professional body for accreditation. SEIUM's private qualifications are not accredited by these bodies, so recognition is for employers or the relevant body to decide.
Which Australian employers hire in defence and land systems?
Australia has defence prime contractors, the Department of Defence, and specialist land systems firms. Many of these roles require Australian security clearances, which depend on citizenship and background checks rather than course completion. Ask employers how they weigh private qualifications against experience and clearance requirements.
Is the course manageable with a job, and does it need a visa?
The programmes are 100% online and taught in English, so you can study from Australia without a student visa. Specialist courses take 300 hours, diplomas 800 and master's 1,900. An assigned technical tutor supports you, fees are payable in instalments, and employer sponsorship may be possible.
Take the controls.
Run a real engineering trade-off from this field. Move the sliders, watch the model react in real time and beat the challenge.
What you will be able to do
Explain the purpose and types of cybersecurity exercises.
Define authorisation, scope and rules of engagement for an exercise.
Analyse the ethical dilemmas of simulated attacks.
Apply measures to protect third-party data and systems during the exercise.
Conduct exercises safely and proportionately.
Produce reports that support organisational learning.
Design a cybersecurity exercise with its ethical and legal framework.
Who it's for
- Cybersecurity exercise coordinators who want to specialise in Ethics in Simulated Cyber Attacks.
- Ethical red team leads who want to specialise in Ethics in Simulated Cyber Attacks.
- Cybersecurity risk managers who want to specialise in Ethics in Simulated Cyber Attacks.
- Security auditors who want to specialise in Ethics in Simulated Cyber Attacks.
- Legal advisers in cybersecurity who want to specialise in Ethics in Simulated Cyber Attacks.
- Cybersecurity trainers who want to specialise in Ethics in Simulated Cyber Attacks.
- Engineering or science graduates looking to enter cybersecurity.
What you'll work with
- NIST SP 800-84 (test, training and exercise programmes)
- NIST SP 800-115 (technical guide to security testing)
- TIBER-EU Framework (threat-led penetration testing)
- ISO 22398 (guidelines for exercises)
- Regulation (EU) 2022/2554 (DORA)
- Budapest Convention on Cybercrime (2001)
- Spanish Criminal Code, Article 197 bis (unlawful access to systems)
6 modules · 300 h
1.1Types of exercise: tabletop, functional and technical1.2Vulnerability assessment and authorised penetration testing1.3Red, blue and purple team exercises1.4Legitimate objectives of an exercise1.5What an exercise is not, and where the limit lies1.6Legal framework: authorisation and its requirements1.7Computer crimes and grounds for exclusion1.8Recognised standards and methodological guides1.9Field vocabulary1.10Exercise: define the purpose of an exercise
2.1Authorisation document and its signatories2.2Precise definition of scope2.3Excluded assets and critical systems2.4Time windows and schedules2.5Rules of engagement and escalation2.6Criteria for immediate halt2.7Communication with informed staff2.8Affected third parties: cloud, suppliers and customers2.9Insurance and liability for damage2.10Practice: draft the rules of engagement for an exercise
3.1Deceiving staff and its justification3.2Social engineering and respect for the individual3.3Personal data found during the exercise3.4Findings outside the scope3.5Discovery of irregular conduct3.6Risk of collateral damage to the service3.7Client pressure for spectacular results3.8Publication of results and reputation3.9Disclosure of vulnerabilities to third parties3.10Debate: three cases with blurred boundaries
4.1Planning and risk management of the exercise4.2Test environment versus production environment4.3Logging of all actions performed4.4Custody and encryption of evidence4.5Minimising access to real data4.6Handling of obtained credentials4.7Clean-up of the environment at completion4.8Real-time communication of critical findings4.9Coordination with the defending team4.10Practice: plan the conduct of an exercise
5.1Report structure and its audience5.2Prioritisation of findings by risk5.3Actionable recommendations5.4Closing meeting and just culture5.5Avoiding blame of staff5.6Monitoring remediation5.7Continuous programme versus one-off exercise5.8Contracting services and key clauses5.9Team competence and certification5.10Practice: write the report on a finding
6.1Choice of organisation and objective6.2Analysis of the applicable legal framework6.3Authorisation document and scope6.4Rules of engagement and halt criteria6.5Analysis of foreseeable dilemmas6.6Evidence and data management plan6.7Reporting and follow-up plan6.8Team code of conduct6.9Plan report6.10Project defence
How you'll learn
Fully 100 % online training on the SEIUM campus, with downloadable material, recorded classes and an assigned technical tutor. No fixed timetables: students progress at their own pace within the intake, which makes it possible to combine study with work.
Each module combines theory, guided reading of the original standard and applied exercises. The working software is MITRE ATT&CK Navigator, Wireshark, Microsoft Project, Advanced Excel, in free, academic or evaluation versions. Case studies cover tabletop cybersecurity exercise procedures, drafting rules of engagement for exercises, and reviews of post-exercise reports. Assessment is continuous by module, plus the final integrative project.
Build it end to end
Your final project follows the real engineering workflow, step by step, reviewed by your tutor.
Explain the purpose and types of cybersecurity exercises.
Define authorisation, scope and rules of engagement for an exercise.
Analyse the ethical dilemmas of simulated attacks.
Apply measures to protect third-party data and systems during the exercise.
Conduct exercises safely and proportionately.
Where this takes you
Requirements
- No previous degree is required.
- Internet connection and a computer capable of running the programme's software.
- Sufficient Spanish to follow technical regulatory texts.
Ready to start?
Send your application today. Our admissions team replies within 72 hours with your study plan and funding options.
Frequently asked questions
The programme comprises 300 hours in total, spread over 3 to 5 months. That is an average of 10 to 15 hours per week, compatible with a full-time job.
You work with MITRE ATT&CK Navigator, Wireshark, Microsoft Project and Advanced Excel. Free, academic or evaluation versions are used, and the tutor indicates the free alternative where one exists.
An SEIUM own diploma on passing the continuous assessment and the integrative project. It is in-house training, not an official Ministry title.
Yes. Modules passed in a course or postgraduate diploma in the same area are credited towards the advanced programme. Check the credit transfer policy when you enrol.
Related programmes
Course on ITAR/EAR Export Control Regulations
Online 300 h course on ITAR/EAR export control regulations. 6 modules covering ITAR (22 CFR 120-130), EAR (15 CFR 730-774) and SAP GTS (Global Trade Services).…
Course in Ethics in Military Algorithm Auditing
Online course of 300 h in ethics in military algorithm auditing. 6 modules covering Additional Protocol I (1977), Art. 36, Guiding Principles of the GEG of…
Course in Ethics in Infrastructure Resilience
Online 300-hour course in ethics in infrastructure resilience. 6 modules with Directive (EU) 2022/2557 (resilience of critical entities), Directive (EU) 2022/2555 (NIS 2) and QGIS. Assigned…
More in Defense, Military Engineering & Land Systems
All Defense, Military Engineering & Land Systems programmes → · How to apply · Fees & financing · Scholarships