Course in Cybersecurity for Distribution Networks
Online 300 h course in cybersecurity for distribution networks. 6 modules covering IEC 62443 (security for industrial automation and control systems), IEC 62351 (security of power system communications) and Wireshark. Personal tutor assigned and enrolment open.
Take the controls.
Run a real engineering trade-off from this field. Move the sliders, watch the model react in real time and beat the challenge.
What you will be able to do
Identify the threats and vulnerabilities of digitalised distribution networks.
Carry out risk analysis of OT assets using the zones and conduits model.
Design segmented network architectures and secure remote access.
Apply the security mechanisms of IEC 62351 to sector protocols.
Implement monitoring and intrusion detection capabilities in OT.
Plan incident response and recovery in line with NIS2.
Develop a cybersecurity roadmap for an electricity distribution company.
Who it's for
- OT cybersecurity specialist wishing to specialise in Cybersecurity in Distribution Networks.
- Security operations centre analyst wishing to specialise in Cybersecurity in Distribution Networks.
- Industrial security architect wishing to specialise in Cybersecurity in Distribution Networks.
- Information security manager wishing to specialise in Cybersecurity in Distribution Networks.
- Cybersecurity auditor wishing to specialise in Cybersecurity in Distribution Networks.
- Control systems engineer wishing to specialise in Cybersecurity in Distribution Networks.
- Graduates in engineering or science seeking to enter electricity distribution.
What you'll work with
- IEC 62443 (security for industrial automation and control systems)
- IEC 62351 (security of power system communications)
- Directive (EU) 2022/2555 (NIS2)
- ISO/IEC 27019 (information security controls for the energy sector)
- ISO/IEC 27001 (information security management systems)
- Delegated Regulation (EU) 2024/1366 (network code on cybersecurity)
- Law 8/2011 (protection of critical infrastructure)
- NIST SP 800-82 (industrial control systems security)
6 modules · 300 h
1.1Convergence of IT and OT networks1.2Connected distribution assets1.3Threats and threat actors1.4Historical incidents in the sector1.5Vulnerabilities of industrial protocols1.6Risks in smart metering1.7Risks in distributed energy resources1.8Supply chain risks1.9MITRE ATT&CK for ICS framework1.10Case study: analysis of the 2015 Ukraine incident
2.1Risk analysis methodologies2.2OT asset inventory2.3Zones and conduits2.4Security levels SL2.5Policies and roles2.6Vulnerability management2.7Security in supplier relationships2.8Obligations under the NIS2 Directive2.9Protection of critical infrastructure2.10Workshop: risk matrix for a control centre
3.1Network segmentation3.2Industrial firewalls with deep packet inspection3.3Industrial demilitarised zones3.4Secure remote access3.5Data diodes3.6Hardening of IEDs and RTUs3.7Identity management and authentication3.8Secure protocols under IEC 623513.9Security in wireless communications3.10Practical: segmentation of a substation
4.1Passive monitoring of OT networks4.2Intrusion detection4.3SIEM and event correlation4.4Anomalies in industrial traffic4.5Log management4.6Sector-specific threat intelligence4.7Indicators of compromise4.8Security operations centres4.9Detection metrics4.10Laboratory: analysis of Modbus and DNP3 traffic
5.1Incident response plans5.2Coordination with INCIBE-CERT5.3Forensic analysis in OT5.4Business continuity5.5Configuration recovery5.6Exercises and simulations5.7Incident notification5.8Lessons learned after incidents5.9Security culture5.10Case study: ransomware simulation at a distribution company
6.1Scope and critical assets6.2Risk assessment6.3Target network architecture6.4Proposed technical controls6.5Organisational and personnel controls6.6Detection and response plan6.7Implementation roadmap6.8Maturity indicators6.9Report and presentation6.10Final review with the tutor
How you'll learn
100 % online study on the SEIUM campus, with downloadable material, recorded classes and an assigned technical tutor. There are no fixed timetables: students progress at their own pace within the intake, which makes it possible to combine study with work.
Each module combines theory, guided reading of the original standard and applied exercises. The working software is Wireshark, Zeek, Nozomi Networks Guardian, Claroty, Security Onion, in free, academic or evaluation versions. Practical work covers real procedures for analysing industrial protocol traffic, designing OT network segmentation and running incident response simulations. Assessment is continuous, module by module, plus a final integrating project.
Build it end to end
Your final project follows the real engineering workflow, step by step, reviewed by your tutor.
Identify the threats and vulnerabilities of digitalised distribution networks.
Carry out risk analysis of OT assets using the zones and conduits model.
Design segmented network architectures and secure remote access.
Apply the security mechanisms of IEC 62351 to sector protocols.
Implement monitoring and intrusion detection capabilities in OT.
Where this takes you
Requirements
- No prior degree is required.
- Internet connection and a computer capable of running the programme's software.
- Sufficient command of Spanish to follow technical standards documentation.
Ready to start?
Send your application today. Our admissions team replies within 72 hours with your study plan and funding options.
Frequently asked questions
The programme totals 300 hours, spread over 3 to 5 months. That is an average of 10 to 15 hours per week, which is compatible with a full-time job.
You work with Wireshark, Zeek, Nozomi Networks Guardian, Claroty and Security Onion. Free, academic or evaluation versions are used, and the tutor indicates the free alternative where one exists.
A SEIUM's own diploma upon passing the continuous assessment and the integrating project. It is in-house training, not an official qualification from the Ministry.
Yes. Modules completed in a course or Postgraduate Diploma in the same area can be recognised in the higher programme. Please check the recognition policy when you enrol.
Related programmes
Course on Demand-Side Flexibility Aggregators
Online 300-hour course on demand-side flexibility aggregators. 6 modules covering Directive (EU) 2019/944, Regulation (EU) 2019/943 and OpenADR VTN. Assigned tutor and open enrolment.
Collective Self-Consumption Course in Urban Environments
Online 300-hour course in collective self-consumption in urban environments. 6 modules covering Royal Decree 244/2019 (self-consumption of electrical energy), Royal Decree-Law 15/2018 (energy transition and consumer…
Course in Protection Coordination in MV/LV Networks
Online 300-hour course in protection coordination in MV/LV networks. 6 modules covering IEC 60909 (short-circuit currents in three-phase systems), IEC 60255-151 (overcurrent protection requirements) and ETAP.…
More in Energy and Networks
All Energy and Networks programmes → · How to apply · Fees & financing · Scholarships