Master’s in Cybersecurity for Energy Systems (NIS2/NERC CIP)
Online master's programme of 1,900 hours in cybersecurity for energy systems (NIS2/NERC CIP) — CSMS, OT SOC and incident response. 12 modules covering energy systems as critical infrastructure, the NIS2 Directive, NERC CIP, the network code on cybersecurity, substation and telecontrol security, renewables and DER, risk management, detection and response, supply chain, and governance and compliance, with Directive (EU) 2022/2555 (NIS2), NERC CIP-005-7 and Delegated Regulation (EU) 2024/1366 and an assigned technical tutor.
Master’s in Cybersecurity for Energy Systems (NIS2/NERC CIP) — studying from Australia
Australia's energy sector is undergoing major transition, with significant growth in renewable generation, grid-scale storage and transmission upgrades. The National Electricity Market and the Wholesale Electricity Market in Western Australia are key frameworks shaping investment and operations. Engineers work on network planning, power system analysis, asset management and integration of distributed energy resources. Employers include network operators, generators, retailers, the Australian Energy Market Operator and engineering consultancies.
Fees for Australia: A$9,410 (AUD), with instalments and employer sponsorship available.
Relevant bodies in Australia
Typical roles
Questions from Australia
Which Australian bodies and regulators cover energy and networks engineering?
Engineers Australia is the main professional body, and the Australian Energy Regulator and the Australian Energy Market Operator oversee the national electricity market. State network regulators also apply. SEIUM's private qualifications are not accredited by these bodies, so recognition is decided by employers or the regulator.
What energy and network careers in Australia could this training support?
Australia has electricity network operators, renewable energy developers, grid planners and utilities that employ engineers in these fields. Employers usually prioritise accredited qualifications, licensing and project experience. A SEIUM qualification may add to your profile, but its value depends on each employer.
Is the course workable with a job, and does employer funding exist?
Yes, the programmes are online and taught in English, so you can study from Australia without a student visa. Specialist courses are 300 hours, diplomas 800 and master's 1,900, with an assigned technical tutor and final project. Fees are payable in instalments, and employer sponsorship may be possible, though it is arranged case by case.
Take the controls.
Run a real engineering trade-off from this field. Move the sliders, watch the model react in real time and beat the challenge.
What you will be able to do
Understand the threats to energy systems.
Apply NIS2 requirements in the energy sector.
Implement NERC CIP standards.
Apply the European network code on cybersecurity.
Protect substations and telecontrol systems.
Manage cyber risk in the energy sector.
Organise incident detection and response.
Who it's for
- Energy sector cybersecurity managers.
- Energy SOC analysts.
- NERC CIP auditors.
- NIS2 consultants.
- Substation security engineers.
- OT security architects.
- Engineering or science graduates seeking to enter electricity transmission.
What you'll work with
- Directive (EU) 2022/2555 — NIS2 (high common level of cybersecurity across the EU)
- NERC CIP-005-7 (electronic security perimeters)
- Delegated Regulation (EU) 2024/1366 (network code on cybersecurity for cross-border electricity flows)
- IEC 62351 (security for power system communication protocols)
- ISO/IEC 27019 (information security controls for the energy utility industry)
- IEC 62443-3-3 (system security requirements and security levels)
- NERC CIP-007-6 (systems security management)
- Spanish Law 8/2011 (protection of critical infrastructure)
- Wireshark
- Dragos Platform
- Splunk
- Nozomi Networks
- Zeek
12 modules
1.1Architecture of the power system1.2Energy control systems1.3EMS, DMS and SCADA1.4Digital substations and automation1.5Grid-connected distributed generation1.6Control centres1.7Interdependencies with telecommunications1.8The 2015 and 2016 Ukraine incidents1.9Threat landscape1.10Case study: critical asset map of a utility
2.1Scope and essential entities2.2Risk management measures2.3Incident notification2.4Management body accountability2.5Supply chain2.6Supervision and penalties2.7Transposition in Spain2.8Relationship with other regulations2.9Practical implementation in a utility2.10Workshop: NIS2 gap analysis
3.1The North American regulatory framework3.2Asset categorisation (CIP-002)3.3Security management controls (CIP-003)3.4Personnel and training (CIP-004)3.5Electronic security perimeters (CIP-005)3.6Physical security (CIP-006)3.7Systems security management (CIP-007)3.8Incident response (CIP-008)3.9Recovery plans (CIP-009)3.10Practical exercise: CIP-002 asset categorisation
4.1Delegated Regulation (EU) 2024/13664.2EU-wide risk assessment4.3High-impact critical functions4.4Minimum and advanced controls4.5Supplier management4.6Relationship with NIS24.7Application timelines4.8Implications for operators4.9Supervision by competent authorities4.10Case study: impact on a distribution system operator
5.1IEC 61850 and its vulnerabilities5.2IEC 62351 for security5.3Protection of GOOSE and SV5.4Security of protection relays5.5IED access management5.6Secure time synchronisation5.7Substation network segmentation5.8Substation monitoring5.9Secure equipment maintenance5.10Lab: GOOSE traffic analysis
6.1Secure IEC 60870-5-1046.2DNP3 Secure Authentication6.3Communications with RTUs6.4Utility communication networks6.5Communications encryption6.6Certificate management6.7Remote maintenance access6.8Suppliers and maintenance6.9Security testing6.10Practical exercise: secure IEC 104 configuration
7.1Grid-connected renewable plants7.2Inverters and their cybersecurity7.3Power plant controllers7.4Resource aggregators7.5Charging points7.6Smart meter security7.7Systemic risks of DER7.8Requirements for manufacturers7.9Monitoring of distributed resources7.10Case study: threats to an inverter fleet
8.1Risk methodologies8.2Threat scenarios8.3System impact assessment8.4IEC 62443 in energy8.5ISO/IEC 27019 for the energy sector8.6Application of compensating controls8.7Vulnerability management8.8Risk indicators8.9Reporting to senior management8.10Workshop: risk assessment of a control centre
9.1OT monitoring in energy9.2SOC for utilities9.3Sector threat intelligence9.4Anomaly detection9.5Incident response9.6Coordination with the CERT9.7GridEx and Cyber Europe exercises9.8System recovery9.9Incident forensics9.10Practical exercise: incident response simulation
10.1Supply chain risks10.2Contractual security requirements10.3Supplier assessment10.4Software bill of materials (SBOM)10.5Update security10.6Acceptance testing10.7Product certification10.8The Cyber Resilience Act10.9Third-party management10.10Lab: security assessment of a supplier
11.1Cybersecurity governance11.2Organisation and roles11.3Policies and procedures11.4Compliance audits11.5Training and awareness11.6Security metrics11.7Relationship with regulators11.8Cyber risk insurance11.9Continuous improvement of the programme11.10Case study: NIS2 compliance programme
12.1Selection of the energy organisation12.2Regulatory context analysis12.3Risk assessment12.4Control design12.5Security architecture12.6Detection and response plan12.7Compliance plan12.8Roadmap12.9Master's Thesis report12.10Master's Thesis: defence before a panel
How you'll learn
Training is 100% online on the SEIUM campus, with downloadable material, recorded classes and an assigned technical tutor. There are no fixed timetables: you progress at your own pace within each intake, so you can combine the programme with your job.
Each module combines theory, guided reading of the original standard and applied exercises. The working software is Wireshark, Dragos Platform, Splunk, Nozomi Networks and Zeek, in free, academic or evaluation versions. Practical work is based on real procedures for substation traffic analysis, incident response exercises and regulatory compliance assessments. Assessment is continuous for each module, plus the final Master's Thesis.
Standards covered: Directive (EU) 2022/2555 (NIS2), NERC CIP-005-7, Delegated Regulation (EU) 2024/1366 (network code on cybersecurity), IEC 62351, ISO/IEC 27019, IEC 62443-3-3, NERC CIP-007-6 and Spanish Law 8/2011 on critical infrastructure protection.
Build it end to end
Your final project follows the real engineering workflow, step by step, reviewed by your tutor.
Where this takes you
Requirements
- University degree in engineering, science or architecture, or equivalent demonstrable professional experience.
- Internet connection and a computer capable of running the programme software.
- English sufficient to read technical standards.
Ready to start?
Send your application today. Our admissions team replies within 72 hours with your study plan and funding options.
Frequently asked questions
The programme totals 1,900 hours over 12–14 months. You set your own pace within each intake, and your tutor helps you plan the workload around your job.
You work with Wireshark, Dragos Platform, Splunk, Nozomi Networks and Zeek, using free, academic or evaluation versions. Your tutor indicates the free alternative wherever one exists.
A SEIUM Institute diploma, awarded on passing the continuous assessment and the Master's Thesis. It is SEIUM's own qualification, not an official state degree; its recognition depends on the programme completed and the regulations of each country.
Yes. Modules passed in a course or postgraduate diploma in the same area are recognised in the higher programme. Ask about the recognition policy when you enrol.
A university degree in engineering, science or architecture (or equivalent professional experience), a computer able to run the programme software and English sufficient to read technical standards.
Start dates are set by SEIUM's faculty for each intake. Our admissions team will confirm the next available date when you apply.
Related programmes
Master’s in Energy Retrofitting Engineering and Certification
Online master's programme of 1,900 hours in energy retrofit and certification engineering: 12 modules covering existing building physics, energy performance certification, simulation tools, envelope and installation…
Master’s in H₂ Infrastructure: Compression, Storage and Safety
Online master's programme of 1,900 hours in H₂ infrastructure: compression, storage and safety, with 12 modules covering the hydrogen value chain, compression technologies, pressurised and bulk…
Master’s in LCA Engineering
Online master's programme of 1,900 hours in life-cycle assessment (LCA) engineering, structured in 12 modules covering the ISO 14040/14044 methodology, life-cycle inventory, impact assessment, uncertainty, LCA…
More in Energy and Networks
All Energy and Networks programmes → · How to apply · Fees & financing · Scholarships