Cybersecurity Course in Airport Systems
Online course of 300 hours in cybersecurity for airport systems, structured in 6 modules covering the airport digital ecosystem, regulation and governance, OT systems security, IT systems and services security, and detection, response and resilience, with an assigned technical tutor.
Take the controls.
Run a real engineering trade-off from this field. Move the sliders, watch the model react in real time and beat the challenge.
What you will be able to do
Identify the assets and threats of the airport digital ecosystem.
Apply the NIS 2 framework, Part-IS and the Spanish National Security Framework.
Protect OT systems using the ISA/IEC 62443 series.
Implement security controls in IT systems and passenger services.
Organise incident detection and response.
Plan business continuity in the face of cyberattacks.
Prepare an airport cybersecurity master plan.
Who it's for
- Airport cybersecurity managers.
- SOC analysts.
- Industrial cybersecurity specialists working with OT environments.
- Information security auditors.
- NIS 2 compliance consultants.
- Security architects.
- Engineering or science graduates looking to move into airport management.
What you'll work with
- Directive (EU) 2022/2555 (NIS 2, cybersecurity of essential and important entities)
- Implementing Regulation (EU) 2023/203 (Part-IS, information security risk management in aviation)
- ISA/IEC 62443 (security of industrial automation and control systems)
- ISO/IEC 27001 (information security management systems)
- ISO/IEC 27005 (information security risk management)
- Royal Decree 311/2022 (Spanish National Security Framework, ENS)
- Law 8/2011 (Spanish critical infrastructure protection)
- Implementing Regulation (EU) 2019/1583 (cybersecurity measures in aviation)
- Wireshark
- Nmap
- Splunk
- PILAR
- Nozomi Networks Guardian
6 modules
1.1Airport IT and OT systems1.2AODB, DCS and baggage systems1.3Airport communications networks1.4SCADA for visual aids and power1.5Critical suppliers: SITA, Amadeus1.6Assets and attack surface1.7Threats against aviation1.8Historical incidents at airports1.9Interdependencies with air navigation1.10Case study: asset map of a medium-sized airport
2.1The NIS 2 Directive and essential operators2.2EASA Part-IS Regulation2.3Annex 17 and cybersecurity2.4Implementing Regulation (EU) 2019/15832.5The Spanish Critical Infrastructure Protection Law2.6The Spanish National Security Framework (ENS) for public operators2.7Governance and roles: CISO and committee2.8Risk management under ISO 270052.9Suppliers and the supply chain2.10Workshop: gap analysis against Part-IS
3.1ISA/IEC 62443 reference architecture3.2Segmentation into zones and conduits3.3Inventory and passive monitoring3.4Remote maintenance access3.5Patching and obsolescence3.6Security of BHS and air bridges3.7Security of power and HVAC systems3.8Industrial anomaly detection3.9OT backup and recovery3.10Lab: segmentation of a BHS network
4.1Identity and access management4.2Security of public Wi-Fi networks4.3Protection of passenger systems4.4Cloud security4.5Secure application development4.6Protection of personal data and biometrics4.7Security of operational mobile devices4.8Penetration testing4.9Vulnerability management4.10Practical exercise: vulnerability management plan
5.1Security operations centre5.2SIEM and airport use cases5.3Incident response plan5.4Incident notification under NIS 25.5Business continuity with ISO 223015.6Crisis simulation exercises5.7Coordination with INCIBE-CERT and CCN-CERT5.8Post-incident forensic analysis5.9Lessons learned after incidents5.10Case study: ransomware tabletop exercise
6.1Scope and context of the airport6.2Inventory of critical assets6.3Cybersecurity risk analysis6.4IT and OT security architecture6.5Organisational measures and training6.6Response and continuity plan6.7Roadmap and budget6.8Maturity indicators6.9Report and presentation6.10Final project: final review with your tutor
How you'll learn
Training is 100% online on the SEIUM campus, with downloadable material, recorded classes and an assigned technical tutor. There are no fixed timetables: you progress at your own pace within each intake, so the programme fits around your job.
Each module combines theory, guided reading of the original standard and applied exercises. The working software is Wireshark, Nmap, Splunk, PILAR and Nozomi Networks Guardian, in free, academic or evaluation versions. Exercises are based on real procedures for risk analysis of airport systems, segmentation of industrial networks and incident response simulation. Assessment is continuous by module, plus the final project.
Standards covered: Directive (EU) 2022/2555 (NIS 2); Implementing Regulation (EU) 2023/203 (Part-IS); ISA/IEC 62443; ISO/IEC 27001; ISO/IEC 27005; Royal Decree 311/2022; Law 8/2011; Implementing Regulation (EU) 2019/1583.
Build it end to end
Your final project follows the real engineering workflow, step by step, reviewed by your tutor.
Where this takes you
Requirements
- No prior qualification is required.
- An internet connection and a computer capable of running the programme software.
- English sufficient to read technical standards.
Ready to start?
Send your application today. Our admissions team replies within 72 hours with your study plan and funding options.
Frequently asked questions
The programme totals 300 hours over 3 months. You set your own pace within each intake, and your tutor helps you plan the workload around your job.
You work with Wireshark, Nmap, Splunk, PILAR and Nozomi Networks Guardian, using free, academic or evaluation versions. Your tutor indicates the free alternative wherever one exists.
A SEIUM Institute certificate, awarded on passing the continuous assessment and the final project. It is SEIUM's own qualification, not an official state degree; its recognition depends on the programme completed and the regulations of each country.
Yes. Modules passed are recognised in a higher programme in the same area (postgraduate diploma or master's). Ask about the recognition policy when you enrol.
No prior qualification is required; you need an internet connection, a computer able to run the programme software and English sufficient to read technical standards.
Start dates are set by SEIUM's faculty for each intake. Our admissions team will confirm the next available date when you apply.
Related programmes
Course on Gender and Inclusive Urban Planning
Online course of 300 hours in gender and inclusive urban planning: 6 modules covering the gender perspective in planning, gender-sensitive urban diagnosis, inclusive public space, mobility,…
Course in Legislative Innovation in Urban Settings
Online 300-hour course in Legislative Innovation in Urban Settings. 6 modules covering Law 7/1985 on the Bases of the Local Government Regime, Law 39/2015 on the…
CBTC Course in Automatic Subways
Online course of 300 hours in CBTC for automated metros, structured in 6 modules covering CBTC fundamentals, system components, automatic train protection and operation, safety and…
More in Civil, Rail & Smart Cities
All Civil, Rail & Smart Cities programmes → · How to apply · Fees & financing · Scholarships