Postgraduate Diploma in IoMT Platform Design and Security
Online Postgraduate Diploma in IoMT Platform Design and Security. 800 h, 8 modules covering IEC 81001-5-1 (medical device software cybersecurity), MDCG 2019-16 (cybersecurity of medical devices) and Wireshark. Assigned tutor and open enrolment.
Postgraduate Diploma in IoMT Platform Design and Security — studying from Australia
Health technology and biomechanics are growing areas in Australia, supported by a strong medical research sector and an established medical device industry. Wearable devices and occupational safety systems are increasingly used in mining, construction and healthcare. Medical devices are regulated nationally, requiring engineers to understand conformity, risk management and clinical evaluation. Employers include medical device manufacturers, hospitals, research institutes such as those affiliated with universities, and workplace safety consultancies.
Fees for Australia: A$2,050 (AUD), with instalments and employer sponsorship available.
Relevant bodies in Australia
Typical roles
Questions from Australia
Will a SEIUM qualification be recognised by Engineers Australia or other professional bodies for this area?
SEIUM qualifications are private qualifications and are not accredited by Engineers Australia or any other national body. Recognition is decided by individual employers and, where relevant, by the professional body assessing your application. Engineers Australia assesses skills and experience independently, so check directly with the body you hope to join before enrolling.
Which Australian employers might value this training in health, biomechanics or wearable safety work?
Employers in Australian medical device firms, rehabilitation services, workplace health and safety teams and wearable technology companies may consider advanced engineering training when hiring. Whether they value a private qualification depends on each employer's own policy and on your existing experience. Speaking with prospective employers about how they view private qualifications is a sensible step.
Can I study this alongside full-time work in Australia, and is employer funding possible?
The programmes are 100% online and taught in English, so you can study from any time zone, including Australian time zones, around your work hours. Fees are payable in instalments, and employer sponsorship is possible; ask your employer whether they fund training. Plan for the workload of 300 to 1,900 hours depending on the programme, and confirm the schedule with SEIUM.
Take the controls.
Run a real engineering trade-off from this field. Move the sliders, watch the model react in real time and beat the challenge.
What you will be able to do
Design IoMT architectures from the device to the cloud.
Apply interoperability standards such as HL7 FHIR and IEEE 11073.
Identify threats and risks through threat modelling.
Implement security measures in the device and its firmware.
Protect the platform with encryption, authentication and segmentation.
Meet regulatory requirements for cybersecurity and privacy.
Establish post-market surveillance and vulnerability response.
Who it's for
- IoMT platform architect who wants to specialise in IoMT Platform Design and Security.
- Healthcare cybersecurity engineer who wants to specialise in IoMT Platform Design and Security.
- Interoperability engineer who wants to specialise in IoMT Platform Design and Security.
- Connected medical device developer who wants to specialise in IoMT Platform Design and Security.
- Product security manager who wants to specialise in IoMT Platform Design and Security.
- Healthcare DevSecOps engineer who wants to specialise in IoMT Platform Design and Security.
- Graduates in engineering or science looking to enter healthcare technology.
What you'll work with
- IEC 81001-5-1 (medical device software cybersecurity)
- MDCG 2019-16 (cybersecurity of medical devices)
- IEC 62443 (industrial control systems cybersecurity)
- ISO 14971 (risk management)
- HL7 FHIR (healthcare interoperability)
- IEEE 11073 (personal medical device communication)
- ETSI EN 303 645 (consumer IoT cybersecurity)
- Regulation (EU) 2016/679 (GDPR)
8 modules · 800 h
1.1Connected medical devices and wearables1.2Layers: device, gateway, cloud and application1.3BLE, MQTT and CoAP protocols1.4Home and mobile gateways1.5Healthcare cloud platforms1.6Edge and fog architectures1.7Scalability and availability1.8Remote patient monitoring1.9Deployment models1.10Workshop: reference architecture for remote monitoring
2.1HL7 v2 and CDA2.2HL7 FHIR and resources2.3IHE profiles for devices2.4IEEE 11073 for personal devices2.5SNOMED CT and LOINC terminologies2.6Integration with electronic health records2.7Continua Design Guidelines2.8APIs and SMART on FHIR2.9Interoperability testing2.10Lab: sending FHIR observations
3.1Attack surface of medical devices3.2Historical vulnerabilities in infusion pumps and pacemakers3.3STRIDE threat modelling3.4Attacks on BLE and radio3.5Cloud risks3.6Security risk assessment3.7Relationship between security and safety3.8Vulnerability databases3.9Software supply chain: SBOM3.10Practical: threat modelling of a connected glucometer
4.1Secure boot and root of trust4.2Secure key storage4.3Communication encryption and authentication4.4Signed over-the-air (OTA) updates4.5Secure BLE pairing4.6Debugging and protected ports4.7Secure elements and TPM4.8Hardware penetration testing4.9End of device life4.10Workshop: designing a secure update process
5.1Identity and access management5.2Authentication of patients and professionals5.3Encryption at rest5.4Logging and auditing5.5SIEM monitoring5.6API security5.7Tenant segregation5.8Backups5.9Incident response5.10Lab: configuring OAuth 2.0 on an API
6.1MDCG 2019-16 cybersecurity guidance6.2FDA premarket cybersecurity guidance6.3IEC 81001-5-16.4IEC 80001-1 for hospital networks6.5GDPR and health data6.6European Health Data Space6.7Spanish National Security Framework (ENS)6.8Cyber Resilience Act6.9Privacy impact assessments6.10Practical: privacy impact assessment of an IoMT app
7.1Post-market vulnerability management7.2Coordinated disclosure7.3Patching device fleets7.4Device monitoring7.5Security indicators7.6Supplier management7.7Audits and certifications7.8Training for healthcare staff7.9Continuous improvement7.10Case study: responding to a published vulnerability
8.1Clinical use case8.2Platform architecture8.3Interoperability8.4Threat modelling8.5Device controls8.6Platform controls8.7Regulatory plan8.8Operations plan8.9Report and presentation8.10Final review with the tutor
How you'll learn
100 % online training on the SEIUM campus, with downloadable material, recorded lectures and an assigned technical tutor. No fixed timetable: students progress at their own pace within the intake, which makes it possible to combine with work.
Each module combines theory, guided reading of the original standard and applied exercises. The working software is Wireshark, Eclipse Mosquitto (MQTT), AWS IoT Core, OWASP ZAP, Node-RED, in free, academic or evaluation versions. The exercises draw on real-world procedures: threat modelling with STRIDE, penetration testing of connected devices, and FHIR-based data integration in a test environment. Assessment is continuous across modules, plus the final integrative project.
Build it end to end
Your final project follows the real engineering workflow, step by step, reviewed by your tutor.
Design IoMT architectures from the device to the cloud.
Apply interoperability standards such as HL7 FHIR and IEEE 11073.
Identify threats and risks through threat modelling.
Implement security measures in the device and its firmware.
Protect the platform with encryption, authentication and segmentation.
Where this takes you
Requirements
- Prior technical training or professional experience in the sector. No university degree is required.
- Internet connection and a computer capable of running the programme's software.
- Sufficient level of Spanish to follow technical regulatory texts.
Ready to start?
Send your application today. Our admissions team replies within 72 hours with your study plan and funding options.
Frequently asked questions
The programme comprises 800 hours in total, spread over 6 to 8 months. That is an average of 10 to 15 hours per week, compatible with full-time work.
You will work with Wireshark, Eclipse Mosquitto (MQTT), AWS IoT Core, OWASP ZAP, Node-RED. Free, academic or evaluation versions are used, and the tutor indicates the free alternative where one exists.
A SEIUM diploma, awarded on passing continuous assessment and the integrative project. It is in-house training, not an official qualification from the Ministry.
Yes. Modules passed in a course or diploma in the same area are recognised in the higher programme. Check the recognition policy when you enrol.
Related programmes
Postgraduate Diploma in Anonymisation, Pseudonymisation and Consent
Online 800-hour Postgraduate Diploma in Anonymisation, Pseudonymisation and Consent. 8 modules covering Regulation (EU) 2016/679 (GDPR), Organic Law 3/2018 (LOPDGDD) and ARX Data Anonymization Tool. Assigned…
Postgraduate Diploma in Audits, Investigation and Continuous Improvement
Online 800-hour Postgraduate Diploma in Audits, Investigation and Continuous Improvement. 8 modules covering ICAO Annex 19 (safety management), ICAO Doc 9859 (Safety Management Manual) and Q-Pulse.…
Postgraduate Diploma in FDA 510(k)/De Novo: Dossier Preparation
800-hour online Postgraduate Diploma in FDA 510(k)/De Novo: Dossier Preparation. 8 modules covering 21 CFR Part 807, Subpart E (premarket notification 510(k)), 21 CFR Part 860…
More in Health, Biomechanics, Wearables & Operational Safety
All Health, Biomechanics, Wearables & Operational Safety programmes → · How to apply · Fees & financing · Scholarships