Master'sMotorcycles & 2-Wheelers Applications open

Master’s in Charging Cybersecurity and PKI

Online master's programme of 1,900 hours in EV charging cybersecurity and PKI. 12 modules covering threat modelling, applied cryptography, public key infrastructure, ISO 15118 Plug & Charge, OCPP security, charger hardware and backend security, European regulation, penetration testing and secure operations, with an assigned technical tutor.

Duration12–14 months
ModeOnline
LanguageEnglish
Start datesSet by the faculty
AwardSEIUM Institute diploma

Master’s in Charging Cybersecurity and PKI — studying from Australia

Motorcycles and two-wheeled vehicles are a significant part of Australian transport and recreation, with strong demand for motorcycles, scooters and e-bikes in urban and regional areas. Engineers working in this field contribute to chassis and powertrain design, rider safety systems and emissions compliance. National vehicle standards and rider safety initiatives shape product development and testing. Employers include motorcycle importers and distributors, component suppliers, accessory makers and e-mobility start-ups.

Fees for Australia: A$9,410 (AUD), with instalments and employer sponsorship available.

Relevant bodies in Australia

  • Federal Chamber of Automotive Industries (FCAI)
  • Australian Motorcycle Industry Association
  • Standards Australia
  • Department of Infrastructure, Transport, Regional Development, Communications and the Arts

Typical roles

  • Motorcycle Design Engineer
  • Two-Wheeler Test Engineer
  • Rider Safety Engineer
  • E-Mobility Product Engineer

Questions from Australia

Will a SEIUM qualification be recognised for motorcycle engineering roles in Australia?

SEIUM qualifications are private and not accredited by any Australian national body. Recognition for engineering or vehicle compliance roles is decided by individual employers and relevant bodies. Vehicle safety and compliance in Australia are governed by national design rules, which apply regardless of your qualification, so check requirements with the employer.

Which Australian employers work in motorcycle and two-wheeler engineering?

Motorcycle and scooter importers, distributors, component suppliers, dealer service networks and performance workshops are examples of Australian employers in this field. Whether they value a private qualification depends on their policies. Practical experience and a strong final project portfolio are typically persuasive in this industry.

Is the course suitable for someone working full time in Australia?

The programmes are delivered 100% online in English with an assigned technical tutor, so you can study from home at times that suit you. Fees are payable in instalments, and employers may sponsor you. Check the hours required for your chosen programme and make sure your schedule allows steady progress.

Virtual lab · try it before you enrol

Take the controls.

Run a real engineering trade-off from this field. Move the sliders, watch the model react in real time and beat the challenge.

SIM · LIVE ●
Learning outcomes

What you will be able to do

01

Identify the threats to the electric vehicle charging ecosystem.

02

Apply cryptography and TLS to charging communications.

03

Design and operate public key infrastructures.

04

Implement Plug & Charge in accordance with ISO 15118.

05

Secure chargers, OCPP protocols and backends.

06

Comply with European cybersecurity regulation.

07

Carry out penetration tests and manage incidents.

Profile

Who it's for

  • Charging cybersecurity engineers at operators and charger manufacturers.
  • PKI specialists moving into the V2G and Plug & Charge ecosystem.
  • Embedded systems pentesters targeting chargers and their protocols.
  • Cloud security architects responsible for CPMS backends.
  • Compliance managers preparing for NIS2, the CRA and IEC 62443.
  • SOC analysts monitoring charging networks.
  • Engineering or science graduates seeking to work with charge point operators.
Standards & tools

What you'll work with

  • ISO 15118-20 (vehicle-to-grid communication, Plug & Charge and PKI)
  • IEC 62443-4-2 (technical security requirements for industrial automation components)
  • OCPP 2.0.1 (Open Charge Point Protocol with security profiles)
  • Directive (EU) 2022/2555 – NIS2 (cybersecurity of essential and important entities)
  • Regulation (EU) 2024/2847 – CRA (Cyber Resilience Act for products with digital elements)
  • ISO/IEC 27001 (information security management systems)
  • UNECE R155 (vehicle cybersecurity management system)
  • ISO/SAE 21434 (road vehicle cybersecurity engineering)
  • OpenSSL
  • EJBCA
  • Wireshark
  • Burp Suite
  • Scapy
Syllabus

12 modules

  1. 1.1Attack surface of the charging ecosystem
  2. 1.2Actors: vehicle, charger, CPMS and grid
  3. 1.3Public incidents involving chargers
  4. 1.4Attacks on the power grid through charging
  5. 1.5Charging session fraud
  6. 1.6User data privacy
  7. 1.7STRIDE threat modelling
  8. 1.8TARA risk analysis
  9. 1.9Attacker motivations
  10. 1.10Case study: threat modelling of a charging station
  1. 2.1Symmetric cryptography and AES
  2. 2.2Asymmetric cryptography: RSA and ECC
  3. 2.3Hash functions and digital signatures
  4. 2.4Key exchange
  5. 2.5TLS 1.2 and 1.3
  6. 2.6Random number generation
  7. 2.7Secure key storage
  8. 2.8Post-quantum cryptography and migration
  9. 2.9Performance on embedded systems
  10. 2.10Lab: TLS handshake with OpenSSL
  1. 3.1X.509 certificate structure
  2. 3.2Root and intermediate certificate authorities
  3. 3.3Chains of trust
  4. 3.4Revocation with CRL and OCSP
  5. 3.5Certificate policies
  6. 3.6Certificate life cycle
  7. 3.7HSMs for root keys
  8. 3.8PKI audits
  9. 3.9PKI on embedded systems
  10. 3.10Practical exercise: deployment of a hierarchical PKI
  1. 4.1V2G Root CA roles
  2. 4.2Contract certificates
  3. 4.3OEM and charger certificates
  4. 4.4Plug & Charge and provisioning
  5. 4.5Hubject services and other ecosystems
  6. 4.6Interoperability between PKIs
  7. 4.7Certificate installation and renewal
  8. 4.8Revocation management
  9. 4.9What is new in ISO 15118-20
  10. 4.10Case study: Plug & Charge flow
  1. 5.1OCPP security profiles
  2. 5.2Basic and certificate-based authentication
  3. 5.3TLS between charger and backend
  4. 5.4Certificate management in OCPP 2.0.1
  5. 5.5Security event logging
  6. 5.6Secure firmware updates
  7. 5.7Common configuration errors
  8. 5.8Protocol security testing
  9. 5.9OCPP 2.1 and new capabilities
  10. 5.10Lab: secure OCPP connection with certificates
  1. 6.1Secure firmware boot
  2. 6.2Secure elements and TPM
  3. 6.3Protection of debug ports
  4. 6.4Physical tamper protection
  5. 6.5Supply chain security
  6. 6.6Firmware signing
  7. 6.7Protection of RFID readers
  8. 6.8Hardware testing
  9. 6.9Firmware vulnerability management
  10. 6.10Practical exercise: secure boot verification
  1. 7.1Cloud CPMS architecture
  2. 7.2Identity and access management
  3. 7.3Network segmentation
  4. 7.4API security
  5. 7.5Denial-of-service protection
  6. 7.6Logging and monitoring
  7. 7.7Incident response
  8. 7.8Backup and recovery
  9. 7.9Compliance with cloud standards
  10. 7.10Case study: audit of a backend
  1. 8.1NIS2 Directive requirements
  2. 8.2Cyber Resilience Act (CRA)
  3. 8.3Delegated regulation under the Radio Equipment Directive (RED)
  4. 8.4UNECE R155 in the vehicle
  5. 8.5IEC 62443 for industrial systems
  6. 8.6ISO/IEC 27001 management systems
  7. 8.7AFIR Regulation requirements
  8. 8.8National cybersecurity frameworks
  9. 8.9Product certification
  10. 8.10Workshop: regulatory compliance matrix
  1. 9.1Testing methodology
  2. 9.2Reconnaissance of exposed chargers
  3. 9.3Firmware analysis
  4. 9.4Protocol fuzzing
  5. 9.5Attacks on PLC communication
  6. 9.6Testing ISO 15118
  7. 9.7Testing OCPP
  8. 9.8Reporting and prioritisation
  9. 9.9Responsible vulnerability disclosure
  10. 9.10Lab: fuzzing OCPP messages
  1. 10.1Security operations centre
  2. 10.2Intrusion detection
  3. 10.3Patch management
  4. 10.4Asset inventory
  5. 10.5Vulnerability management
  6. 10.6Threat intelligence
  7. 10.7Incident drills
  8. 10.8Cybersecurity indicators
  9. 10.9Coordination with CSIRTs
  10. 10.10Case study: incident in a charger network
  1. 11.1Policies and standards
  2. 11.2Corporate risk analysis
  3. 11.3Security across the life cycle
  4. 11.4Supplier management
  5. 11.5Training and awareness
  6. 11.6Cyber risk insurance
  7. 11.7Incident communication
  8. 11.8Internal security audits
  9. 11.9Maturity roadmap
  10. 11.10Workshop: cybersecurity master plan
  1. 12.1Definition of the system under study
  2. 12.2Threat analysis
  3. 12.3Security requirements
  4. 12.4PKI design
  5. 12.5Charger and backend measures
  6. 12.6Security testing
  7. 12.7Operations plan
  8. 12.8Compliance assessment
  9. 12.9Thesis report
  10. 12.10Master's Thesis: defence before a panel
Methodology, software & labs

How you'll learn

100% online training on the SEIUM campus, with downloadable material, recorded classes and an assigned technical tutor. There are no fixed timetables: you progress at your own pace within each intake, so the programme is compatible with full-time work.

Each module combines theory, guided reading of the original standard and applied exercises. The working software is OpenSSL, EJBCA, Wireshark, Burp Suite and Scapy, in free, academic or evaluation versions. Practical work is based on real procedures for PKI deployment for Plug & Charge, penetration testing of chargers and backends, and threat analysis of charging stations. Assessment is continuous by module, plus the final Master's Thesis.

Standards covered: ISO 15118-20, IEC 62443-4-2, OCPP 2.0.1, Directive (EU) 2022/2555 (NIS2), Regulation (EU) 2024/2847 (CRA), ISO/IEC 27001, UNECE R155, ISO/SAE 21434.

Assigned technical tutor:every module ends with a deliverable that your tutor marks individually.
Standards-based learning:guided reading of ISO 15118-20, IEC 62443-4-2, OCPP 2.0.1 and NIS2 applied to real cases, not as a theoretical annex.
Industry software:OpenSSL, EJBCA, Wireshark, Burp Suite and Scapy, in free, academic or evaluation versions.
Master's Thesis with defence:a complete security design for a charging system, from threat analysis and PKI design to testing and compliance assessment, defended before a panel.
Flexible format:100% online, no fixed timetables, compatible with full-time work.
Capstone project

Build it end to end

Your final project follows the real engineering workflow, step by step, reviewed by your tutor.

Threat modelling
Model the threats to a charging station and its ecosystem using STRIDE and TARA.
PKI design
Deploy a hierarchical PKI and implement the Plug & Charge certificate flow.
Securing charger and backend
Set up secure OCPP connections, secure boot and backend protections.
Penetration testing
Fuzz OCPP messages and test ISO 15118 to find and prioritise vulnerabilities.
Master's Thesis
Integrate threat analysis, PKI, testing and compliance into a complete security project, defended before a panel.
Career opportunities

Where this takes you

Charging Cybersecurity EngineerPKI SpecialistEmbedded Systems PentesterCloud Security ArchitectCompliance ManagerSOC Analyst
Admissions & scholarships

Requirements

  • University degree in engineering, science or architecture, or equivalent demonstrable professional experience.
  • Internet connection and a computer capable of running the programme software.
  • English sufficient to read technical standards.

Ready to start?

Send your application today. Our admissions team replies within 72 hours with your study plan and funding options.

FAQ

Frequently asked questions

The programme totals 1,900 hours over 12–14 months. You set your own pace within each intake, and your tutor helps you plan the workload around your job.

You work with OpenSSL, EJBCA, Wireshark, Burp Suite and Scapy, using free, academic or evaluation versions. Your tutor indicates the free alternative wherever one exists.

A SEIUM Institute diploma, awarded on passing the continuous assessment and the Master's Thesis. It is SEIUM's own qualification, not an official state degree; its recognition depends on the programme completed and the regulations of each country.

Yes. Modules passed in a course or postgraduate diploma in the same area are recognised in the higher programme. Ask about the recognition policy when you enrol.

A university degree in engineering, science or architecture (or equivalent professional experience), a computer able to run the software and English sufficient to read technical standards.

Start dates are set by SEIUM's faculty for each intake. Our admissions team will confirm the next available date when you apply.

Master’s in Charging Cybersecurity and PKIEnrol
Scroll to Top
SEIUM – Institute of Advanced Engineering
Privacy Overview

This website uses cookies so that we can provide you with the best user experience possible. Cookie information is stored in your browser and performs functions such as recognising you when you return to our website and helping our team to understand which sections of the website you find most interesting and useful.