Master’s in OT/ICS Cybersecurity in Nuclear Facilities Engineering
Online master's programme of 1,900 hours in OT/ICS cybersecurity engineering for nuclear facilities, structured in 12 modules covering nuclear I&C, OT threats, the nuclear cybersecurity regulatory framework, defensive architecture, industrial protocols, risk management, monitoring, supply chain security, incident response and security testing, with an assigned technical tutor.
Master’s in OT/ICS Cybersecurity in Nuclear Facilities Engineering — studying from Australia
Australia does not operate nuclear power plants, but nuclear science and technology play important roles in research, medicine, mining and regulation. The Australian Nuclear Science and Technology Organisation operates research reactors and produces radiopharmaceuticals, while uranium mining is conducted in South Australia, the Northern Territory and Queensland. Nuclear engineering skills support regulatory oversight, radiation safety and decommissioning activities. Employers include ANSTO, the Australian Radiation Protection and Nuclear Safety Agency, mining companies and specialist consultancies.
Fees for Australia: A$15,800 (AUD), with instalments and employer sponsorship available.
Relevant bodies in Australia
Typical roles
Questions from Australia
Does this programme meet Australian nuclear licensing or regulatory requirements?
No. SEIUM qualifications are private and are not accredited by any national body. Nuclear activities in Australia are regulated by the Australian Radiation Protection and Nuclear Safety Agency and related authorities, which set their own competency requirements. Check directly with the regulator and your employer about any qualifications needed for a specific role.
Which Australian organisations might consider this training for nuclear-related roles?
Australian employers in this area include research organisations, radiation protection services, mining and resources companies, and consultancies working on nuclear-related projects. Hiring depends on each organisation's requirements and on security and licensing needs. A private qualification is unlikely to be sufficient alone, so combine it with relevant experience.
Is the programme workable alongside a job, and how is it funded?
The programmes are delivered entirely online in English with an assigned technical tutor, allowing study from Australia around work commitments. Fees can be paid in instalments, and employer sponsorship is possible. Review the programme length, from 300 to 1,900 hours, and plan carefully.
Take the controls.
Run a real engineering trade-off from this field. Move the sliders, watch the model react in real time and beat the challenge.
What you will be able to do
Understand nuclear instrumentation and control architecture.
Analyse threats to industrial systems.
Apply the nuclear cybersecurity regulatory framework.
Design defensive architectures with zones and conduits.
Assess cybersecurity risks in OT systems.
Implement monitoring and incident response.
Manage security in the I&C supply chain.
Who it's for
- OT cybersecurity engineers.
- Industrial security analysts.
- I&C security architects.
- Nuclear cybersecurity auditors.
- Incident response leads.
- IEC 62443 compliance consultants.
- Engineering or science graduates seeking to enter the nuclear energy sector.
What you'll work with
- IEC 62645 (cybersecurity requirements for nuclear I&C systems)
- IAEA Nuclear Security Series No. 17-T (computer security techniques for nuclear facilities)
- IEC 62443 (security for industrial automation and control systems)
- 10 CFR 73.54 (protection of digital computer and communication systems and networks)
- NRC Regulatory Guide 5.71 (cybersecurity programmes for nuclear facilities)
- IEC 63096 (security controls for nuclear I&C systems)
- Directive (EU) 2022/2555 (NIS2, cybersecurity across the EU)
- IEC 61226 (classification of I&C functions important to safety)
- Wireshark
- Zeek
- Suricata
- OpenPLC
- Nozomi Guardian
12 modules · 1900 h
1.1Nuclear instrumentation and control architecture1.2Safety and non-safety systems1.3Classification according to IEC 612261.4Evolution from analogue to digital I&C1.5PLCs, DCS and FPGAs in nuclear1.6Industrial networks and protocols1.7Reactor protection systems1.8Diversity and defence in depth1.9Particularities compared with other industries1.10Case study: I&C architecture of a PWR-type plant
2.1Threat landscape for industrial systems2.2Historical incidents: Stuxnet and Triton2.3Threat actors and motivations2.4Attack vectors: USB, supply chain and remote access2.5Insider threat2.6The MITRE ATT&CK for ICS framework2.7Threat intelligence2.8Design basis threat (DBT) assessment2.9Trends2.10Workshop: mapping an incident with ATT&CK for ICS
3.1IAEA guide NSS 17-T3.2NSS 33-T on nuclear facilities3.3IEC 62645 and IEC 630963.410 CFR 73.54 and RG 5.713.5NEI 08-093.6Spanish regulations and the CSN3.7The NIS2 Directive3.8Relationship between nuclear safety and cybersecurity3.9Regulatory audit3.10Practical exercise: regulatory requirements matrix
4.1Computer security levels4.2IEC 62443 zones and conduits4.3Unidirectional data diodes4.4Network segmentation4.5Defence-in-depth architecture4.6Secure remote access4.7Safety versus non-safety systems4.8Reference architectures4.9Management of portable devices4.10Lab: design of zones and conduits
5.1Modbus and its security5.2DNP3 and Secure Authentication5.3IEC 61850 and GOOSE5.4OPC UA and security5.5Profibus and Profinet5.6Industrial Ethernet5.7Industrial traffic analysis5.8Proprietary protocols5.9Hardening of communications5.10Practical exercise: Modbus traffic analysis with Wireshark
6.1Risk assessment in OT6.2Identification of critical digital assets6.3Consequence analysis6.4Cyber HAZOP methods6.5Assignment of security levels6.6Technical, operational and management controls6.7Residual risk6.8Cybersecurity programme6.9Periodic review6.10Case study: risk assessment of an auxiliary system
7.1Security monitoring in OT7.2Passive industrial IDS7.3Automated asset inventory7.4Anomaly detection7.5Log management and SIEM7.6OT security operations centre7.7Indicators of compromise7.8Real-time response7.9Limitations in safety systems7.10Lab: industrial IDS with Zeek and Suricata
8.1I&C supplier risks8.2Software verification and validation8.3Firmware integrity8.4Software bill of materials8.5Contractual cybersecurity requirements8.6Factory acceptance testing8.7Patch and vulnerability management8.8Counterfeit components8.9Supplier audits8.10Practical exercise: cybersecurity requirements in a tender specification
9.1Incident response plans9.2Coordination with physical security and emergency response9.3Forensic analysis in OT9.4Containment in operating systems9.5Recovery and restoration9.6Communication with the regulator9.7Cybersecurity exercises9.8Lessons learned9.9Continuity of operations9.10Workshop: cyber incident tabletop exercise
10.1ICS test beds10.2Penetration testing in OT10.3Non-intrusive vulnerability assessment10.4Digital twins for cybersecurity10.5PLC assessment10.6Configuration audits10.7IEC 62443 certification10.8Security metrics10.9Assessment reports10.10Lab: test bed with OpenPLC
11.1Cybersecurity culture11.2Training and awareness11.3Roles and responsibilities11.4Integration with physical security11.5Configuration change management11.6Compliance and audit11.7Third-party management11.8Governance indicators11.9International cooperation11.10Case study: cybersecurity training programme
12.1Definition of the target system12.2Threat analysis12.3Risk assessment12.4Proposed defensive architecture12.5Monitoring and response plan12.6Regulatory compliance analysis12.7Validation on a test bed12.8Conclusions12.9Master's Thesis: written report12.10Master's Thesis: defence before a panel
How you'll learn
100% online training on the SEIUM campus, with downloadable material, recorded classes and an assigned technical tutor. There are no fixed timetables: you progress at your own pace within each intake, so the programme can be combined with work.
Each module combines theory, guided reading of the original standard and applied exercises. The working software is Wireshark, Zeek, Suricata, OpenPLC and Nozomi Guardian, in free, academic or evaluation versions. Practical work is based on real procedures for industrial protocol traffic analysis, OT cybersecurity risk assessment and incident response exercises. Assessment is continuous by module, plus the final Master's Thesis.
Standards covered: IEC 62645, IAEA Nuclear Security Series No. 17-T, IEC 62443, 10 CFR 73.54, NRC Regulatory Guide 5.71, IEC 63096, Directive (EU) 2022/2555 (NIS2), IEC 61226.
Build it end to end
Your final project follows the real engineering workflow, step by step, reviewed by your tutor.
Where this takes you
Requirements
- University degree in engineering, science or architecture, or equivalent demonstrable professional experience.
- Internet connection and a computer capable of running the programme software.
- English sufficient to read technical standards.
Ready to start?
Send your application today. Our admissions team replies within 72 hours with your study plan and funding options.
Frequently asked questions
The programme totals 1,900 hours over 12–14 months. You set your own pace within each intake, and your tutor helps you plan the workload around your job.
You work with Wireshark, Zeek, Suricata, OpenPLC and Nozomi Guardian, using free, academic or evaluation versions. Your tutor indicates the free alternative wherever one exists.
A SEIUM Institute diploma, awarded on passing the continuous assessment and the Master's Thesis. It is SEIUM's own qualification, not an official state degree; its recognition depends on the programme completed and the regulations of each country.
Yes. Modules passed in a course or postgraduate diploma in the same area are recognised in the higher programme. Ask about the recognition policy when you enrol.
A university degree in engineering, science or architecture (or equivalent professional experience), a computer able to run the programme software and English sufficient to read technical standards.
Start dates are set by SEIUM's faculty for each intake. Our admissions team will confirm the next available date when you apply.
Related programmes
Master’s in Reactor Fuel Design and Performance Engineering
Online master's programme of 1,900 hours in fuel design and in-reactor performance engineering. 12 modules covering fuel assembly mechanical design, design criteria, thermomechanical modelling, fuel performance…
Master’s in Nuclear Energy Policy, Economics and Project Finance Engineering
Online master's programme of 1,900 hours in nuclear energy policy, economics and project finance engineering. 12 modules covering electricity markets, the economics of nuclear generation, project…
Master’s in Robotics and Remote Handling for Radioactive Environments Engineering
Online master's programme of 1,900 hours in robotics and remote handling engineering for radioactive environments. 12 modules covering radiation effects on robots, radiation-tolerant design, hot cell…
More in Nuclear Engineering & Nuclear Fuel Cycle Technologies
All Nuclear Engineering & Nuclear Fuel Cycle Technologies programmes → · How to apply · Fees & financing · Scholarships