Cybersecurity course for airports
Online course of 300 hours in airport cybersecurity. 6 modules covering cyber threats in the airport environment, the regulatory framework and governance, OT system security, protection of passenger services, and incident detection and response, with an assigned technical tutor.
Take the controls.
Run a real engineering trade-off from this field. Move the sliders, watch the model react in real time and beat the challenge.
What you will be able to do
Identify the cyber threats affecting airports.
Interpret the obligations of NIS2, Part-IS and aviation security regulations.
Protect airport OT systems by applying IEC 62443.
Assess risks in digital passenger services.
Organise incident detection and response.
Design cyber crisis exercises.
Draw up a cybersecurity plan for an airport.
Who it's for
- Airport cybersecurity managers
- SOC analysts
- OT security engineers
- Information security auditors
- NIS2 compliance consultants
- Business continuity managers
- Engineering or science graduates looking to join airport operators
What you'll work with
- Directive (EU) 2022/2555 NIS2 (EU cybersecurity obligations for essential entities)
- Commission Implementing Regulation (EU) 2023/203 (Part-IS) (information security management in aviation)
- Commission Implementing Regulation (EU) 2015/1998 on civil aviation security (detailed aviation security measures)
- ISO/IEC 27001:2022 Information security management systems (requirements for an ISMS)
- IEC 62443 Security for industrial automation and control systems (OT and industrial control system security)
- EUROCAE ED-201A Aeronautical Information System Security Framework Guidance (aeronautical information system security framework)
- Spanish Law 8/2011 on the protection of critical infrastructure (national critical infrastructure protection)
- Regulation (EU) 2016/679 GDPR (personal data protection)
- Splunk
- Nozomi Networks Guardian
- Microsoft Sentinel
- Wireshark
- Nessus
6 modules
1.1Critical digital assets of the airport1.2Airport IT and OT systems1.3Threat actors and motivations1.4Ransomware in the aviation sector1.5Attacks on check-in systems1.6Denial of service against airport websites1.7Historical incidents at airports1.8Risks in the digital supply chain1.9Interdependencies with airlines and ANSPs1.10Case study: analysing a ransomware incident
2.1The NIS2 Directive and essential entities2.2EASA Part-IS2.3Cybersecurity in Regulation 2015/19982.4Critical infrastructure protection law2.5Information security governance2.6CISO functions and responsibilities2.7Information security risk management2.8Audits and oversight2.9Mandatory incident reporting2.10Workshop: regulatory obligations matrix
3.1Baggage systems and SCADA3.2Airfield lighting control3.3Building management systems (BMS)3.4Operational communications networks3.5Zones and conduits according to IEC 624433.6Remote maintenance access3.7Patch management in critical environments3.8OT network monitoring3.9Safe penetration testing in OT3.10Lab: segmenting a BHS network
4.1CUTE and CUPPS platforms4.2Public Wi-Fi networks4.3Personal data protection and GDPR4.4Biometrics and privacy4.5Flight information displays4.6Airport mobile apps4.7Payments and PCI DSS compliance4.8Cloud services4.9Convergence of physical and logical security4.10Practical exercise: risk analysis of a CUPPS platform
5.1Security operations centre (SOC)5.2SIEM and use cases5.3Sector threat intelligence5.4Incident response plan5.5Business continuity5.6Cyber crisis exercises5.7Digital forensic analysis5.8Coordination with sector CERTs5.9Communication during a crisis5.10Case study: responding to a BHS outage
6.1Selecting the study airport6.2Inventory of critical assets6.3Cyber risk assessment6.4Regulatory compliance analysis6.5Proposed security architecture6.6Incident response plan6.7Training and awareness plan6.8Cybersecurity indicators6.9Report and presentation6.10Final project: final review with the tutor
How you'll learn
Training is 100% online on the SEIUM campus, with downloadable material, recorded classes and an assigned technical tutor. There are no fixed timetables: you progress at your own pace within the intake, so you can combine it with your job.
Each module combines theory, guided reading of the original standard and applied exercises. The working software is Splunk, Nozomi Networks Guardian, Microsoft Sentinel, Wireshark and Nessus, in free, academic or evaluation versions. Exercises are based on real procedures: risk assessment of airport OT systems, a ransomware incident response exercise and NIS2 and Part-IS compliance analysis. Assessment is continuous by module, plus the final integrating project.
Standards covered: Directive (EU) 2022/2555 NIS2; Commission Implementing Regulation (EU) 2023/203 (Part-IS); Commission Implementing Regulation (EU) 2015/1998 on civil aviation security; ISO/IEC 27001:2022 Information security management systems; IEC 62443 Security for industrial automation and control systems; EUROCAE ED-201A Aeronautical Information System Security Framework Guidance; Spanish Law 8/2011 on the protection of critical infrastructure; Regulation (EU) 2016/679 GDPR.
Build it end to end
Your final project follows the real engineering workflow, step by step, reviewed by your tutor.
Where this takes you
Requirements
- No prior qualification is required.
- Internet connection and a computer capable of running the programme software.
- English sufficient to read technical standards.
Ready to start?
Send your application today. Our admissions team replies within 72 hours with your study plan and funding options.
Frequently asked questions
The programme totals 300 hours over 3 months. You set your own pace within each intake, and your tutor helps you plan the workload around your job.
You work with Splunk, Nozomi Networks Guardian, Microsoft Sentinel, Wireshark and Nessus, using free, academic or evaluation versions. Your tutor indicates the free alternative wherever one exists.
A SEIUM Institute certificate, awarded on passing the continuous assessment and the final project. It is SEIUM's own qualification, not an official state degree; its recognition depends on the programme completed and the regulations of each country.
Yes. Modules passed are recognised in a higher programme in the same area (postgraduate diploma or master's). Ask about the recognition policy when you enrol.
No prior qualification is required; you need an internet connection, a computer capable of running the programme software and English sufficient to read technical standards.
Start dates are set by SEIUM's faculty for each intake. Our admissions team will confirm the next available date when you apply.
Related programmes
Hydrogen in Aviation Course
Online course of 300 hours in hydrogen in aviation: 6 modules covering hydrogen as an energy carrier, on-board storage, hydrogen combustion in turbines, fuel cells, safety…
GNSS navigation course for drones
Online course of 300 hours in GNSS navigation for drones: 6 modules covering GNSS systems, receivers and antennas for UAVs, high-precision techniques, integration with inertial navigation,…
eVTOL Distributed Propulsion Course
Online course of 300 hours in distributed propulsion in eVTOL: 6 modules covering distributed propulsion principles, rotors and propellers, the electric powertrain, thrust control and allocation,…
More in Aerospace, UAM, Drones & Space
All Aerospace, UAM, Drones & Space programmes → · How to apply · Fees & financing · Scholarships