Course in Urban Critical Infrastructure Regulation
Online 300-hour course in Urban Critical Infrastructure Regulation. 6 modules covering Law 8/2011 on the protection of critical infrastructure, Royal Decree 704/2011 Regulation on the protection of critical infrastructure and Microsoft Excel. Assigned tutor and open enrolment.
Take the controls.
Run a real engineering trade-off from this field. Move the sliders, watch the model react in real time and beat the challenge.
What you will be able to do
Understand the evolution of the legal framework for critical infrastructure protection.
Interpret the obligations of the CER Directive and its transposition.
Relate cybersecurity regulation to physical protection.
Identify the sectoral regulation applicable to urban services.
Prepare and review the documentation required of critical operators.
Carry out regulatory compliance gap analyses.
Design adaptation plans for new regulatory requirements.
Who it's for
- Security regulatory compliance manager who wishes to specialise in Urban Critical Infrastructure Regulation.
- Legal consultant in critical infrastructure who wishes to specialise in Urban Critical Infrastructure Regulation.
- Security manager and liaison who wishes to specialise in Urban Critical Infrastructure Regulation.
- Public administration security technician who wishes to specialise in Urban Critical Infrastructure Regulation.
- Security auditor who wishes to specialise in Urban Critical Infrastructure Regulation.
- Public security policy adviser who wishes to specialise in Urban Critical Infrastructure Regulation.
- Graduates in engineering or science seeking to enter critical operators.
What you'll work with
- Law 8/2011 on the protection of critical infrastructure
- Royal Decree 704/2011 Regulation on the protection of critical infrastructure
- Directive (EU) 2022/2557 on the resilience of critical entities (CER)
- Directive (EU) 2022/2555 NIS2
- Law 36/2015 on National Security
- Royal Decree 311/2022 National Security Scheme
- Regulation (EU) 2022/2554 on digital operational resilience (DORA)
- Law 5/2014 on Private Security
6 modules · 300 h
1.1Evolution of European regulation since Directive 2008/114/CE1.2Law 8/2011 and its regulatory development1.3PIC system and its actors1.4National Catalogue and its classification1.5Municipally owned urban critical infrastructure1.6Relationship with the National Security Law1.7Classified information and confidentiality1.8Powers of the State Secretariat for Security1.9Public-private collaboration framework1.10Case study: designation of a critical operator
2.1Purpose and scope of Directive 2022/25572.2Critical entities and the eleven sectors2.3National risk assessment2.4Entity risk assessment2.5Mandatory resilience measures2.6Background checks on personnel2.7Notification of disruptive incidents2.8Critical entities of particular European importance2.9Supervision, inspection and penalties2.10Practice: CER compliance checklist for an operator
3.1NIS2 Directive and essential entities3.2Coordination between CER and NIS23.3National Security Scheme3.4DORA Regulation in the financial sector3.5Cyber Resilience Act and connected products3.6Personal data protection in security3.7Private security regulation3.8Video surveillance regulation3.9Comparative penalty regimes3.10Case study: notification obligations in a mixed incident
4.1Water supply and sanitation4.2Electricity and gas distribution4.3Urban and rail transport4.4Telecommunications and data centres4.5Healthcare and hospitals4.6Urban waste management4.7Urban tunnels and their safety regulation4.8Facilities with hazardous substances in urban environments4.9Civil protection and self-protection regulation4.10Workshop: regulatory matrix for an urban service
5.1Sectoral Strategic Plan5.2Operator Security Plan5.3Specific Protection Plan5.4Operational Support Plan5.5Resilience plan for the critical entity5.6Minimum content and CNPIC guidelines5.7Preparation and review timeframes5.8Compliance audits5.9Document management of sensitive information5.10Case study: review of an operator security plan
6.1Selection of the urban infrastructure6.2Identification of the applicable framework6.3Analysis of operator obligations6.4Analysis of compliance gaps6.5Proposal for required documentation6.6Adaptation plan for the CER Directive6.7Schedule and responsibilities6.8Compliance indicators6.9Report and presentation6.10Final review with the tutor
How you'll learn
Fully 100 % online training on the SEIUM campus, with downloadable material, recorded classes and an assigned technical tutor. No fixed timetables: students progress at their own pace within the enrolment period, which makes it possible to combine the course with work.
Each module combines theory, guided reading of the original standard and applied exercises. The working software is Microsoft Excel, ArcGIS Pro, PILAR (CCN-CERT), Archer GRC, SharePoint, in free, academic or evaluation versions. Practicals are based on real procedures: compliance gap analysis for a water operator, document review of an operator security plan, and a regulatory matrix for an essential urban service. Assessment is continuous by module plus the final integrating project.
Build it end to end
Your final project follows the real engineering workflow, step by step, reviewed by your tutor.
Understand the evolution of the legal framework for critical infrastructure protection.
Interpret the obligations of the CER Directive and its transposition.
Relate cybersecurity regulation to physical protection.
Identify the sectoral regulation applicable to urban services.
Prepare and review the documentation required of critical operators.
Where this takes you
Requirements
- No prior degree required.
- Internet connection and a computer capable of running the programme's software.
- Sufficient Spanish to follow technical regulatory texts.
Ready to start?
Send your application today. Our admissions team replies within 72 hours with your study plan and funding options.
Frequently asked questions
The programme totals 300 hours spread over 3 to 5 months. That is an average of 10 to 15 hours per week, compatible with a full-time job.
You work with Microsoft Excel, ArcGIS Pro, PILAR (CCN-CERT), Archer GRC, SharePoint. Free, academic or evaluation versions are used, and the tutor indicates the free alternative where one exists.
A SEIUM own diploma upon passing the continuous assessment and the integrating project. This is in-house training, not an official qualification from the Ministry.
Yes. Modules passed in a course or postgraduate diploma in the same area can be credited towards the advanced programme. Check the credit transfer policy when you enrol.
Related programmes
Course in Operational Resilience in Water, Energy and Transport
Online 300-hour course in Operational Resilience in Water, Energy and Transport. 6 modules covering Directive (EU) 2022/2557 on the resilience of critical entities (CER), ISO 22316…
Digitalisation in Port Terminals Course
Online 300-hour course in digitalisation in Port Terminals. 6 modules covering Regulation (EU) 2019/1239, the European maritime single window environment, Directive (EU) 2022/2555, NIS 2 and…
Urban Flood Risk Course
Online 300-hour course in Urban Flood Risk. 6 modules covering Directive 2007/60/CE on the assessment and management of flood risks, Royal Decree 903/2010 on flood risk…
More in Civil, Rail & Smart Cities
All Civil, Rail & Smart Cities programmes → · How to apply · Fees & financing · Scholarships