Cybersecurity Course in Urban Infrastructures
Online course of 300 hours in urban infrastructure cybersecurity: 6 modules covering IEC 62443, the NIS2 Directive and the Spanish National Security Framework (ENS) applied to real cases, with an assigned technical tutor.
Take the controls.
Run a real engineering trade-off from this field. Move the sliders, watch the model react in real time and beat the challenge.
What you will be able to do
Identify the attack surface of connected urban infrastructure.
Interpret the obligations under NIS2, CER, the ENS and Law 8/2011.
Apply the IEC 62443 series to the segmentation of urban control systems.
Assess the security of IoT devices and municipal platforms.
Carry out risk analyses using recognised methodologies.
Plan response and continuity in the event of cyber incidents.
Design a cybersecurity plan for a critical urban infrastructure.
Who it's for
- Municipal cybersecurity managers responsible for protecting city services.
- OT security engineers working on water, energy or traffic control systems.
- SOC analysts who need to monitor industrial and urban networks.
- Cybersecurity auditors reviewing public operators and utilities.
- Regulatory compliance consultants advising on NIS2, CER and the ENS.
- IoT security technicians deploying sensors and platforms in the public realm.
- Engineering or science graduates looking to move into local government.
What you'll work with
- IEC 62443 (security for industrial automation and control systems)
- Directive (EU) 2022/2555 (NIS2) (cybersecurity of essential and important entities)
- Royal Decree 311/2022 (ENS) (Spanish National Security Framework)
- Directive (EU) 2022/2557 (CER) (resilience of critical entities)
- Law 8/2011 (protection of critical infrastructure in Spain)
- ISO/IEC 27001 (information security management systems)
- ETSI EN 303 645 (cybersecurity baseline for consumer IoT)
- Regulation (EU) 2024/2847 (Cyber Resilience Act) (security requirements for products with digital elements)
- Wireshark
- Nozomi Guardian
- PILAR
- Wazuh
- Nmap
6 modules
1.1Critical infrastructure and local essential services1.2IT/OT convergence in urban services1.3Assets: water SCADA, traffic lights, street lighting1.4IoT devices on the public highway1.5Threat actors and motivations1.6Real incidents in cities and utilities1.7Taxonomy of attacks on control systems1.8Dependencies and cascading impact1.9NIST CSF 2.0 cybersecurity framework1.10Case study: critical asset map of a city
2.1NIS2 Directive and essential entities2.2CER Directive on the resilience of critical entities2.3Law 8/2011 on the protection of critical infrastructure2.4National Security Framework (ENS)2.5Cyber Resilience Act2.6Incident notification to CCN-CERT and INCIBE-CERT2.7Management responsibilities2.8Public procurement requirements2.9Supervision and penalty regime2.10Workshop: analysis of NIS2 applicability to an operator
3.1IEC 62443 series: structure and roles3.2Zones, conduits and security levels3.3OT network segmentation3.4Industrial protocols: Modbus, DNP3, BACnet3.5Secure remote access3.6Patch management in legacy systems3.7Passive monitoring of OT networks3.8Physical security of cabinets and facilities3.9Hardening of controllers and RTUs3.10Lab: segmentation of a remote control network
4.1ETSI EN 303 645 requirements4.2Secure boot and signed updates4.3Credential management and PKI4.4Encryption in LoRaWAN and NB-IoT4.5Security of APIs and brokers4.6Municipal cloud security4.7Anomaly detection in telemetry4.8Ethical penetration testing in IoT4.9Supply chain and SBOM4.10Practical exercise: security review of an urban sensor
5.1Risk analysis with MAGERIT5.2Risk assessment according to IEC 62443-3-25.3Service continuity plans5.4Security operations centres5.5Incident response in OT environments5.6Cyber incident exercises and drills5.7Cyber insurance and risk transfer5.8Awareness training for municipal staff5.9Cybersecurity maturity indicators5.10Case study: ransomware drill in a water service
6.1Selection of the urban infrastructure6.2Inventory of assets and flows6.3Threat and risk analysis6.4Design of zones and conduits6.5Technical and organisational measures6.6Incident response plan6.7Regulatory compliance requirements6.8Implementation plan and budget6.9Report and presentation6.10Final project: final review with the tutor
How you'll learn
100% online training on the SEIUM campus, with downloadable material, recorded classes and an assigned technical tutor. No fixed timetables: you progress at your own pace within the intake, making it compatible with work.
Each module combines theory, guided reading of the original standard and applied exercises. The working software is Wireshark, Nozomi Guardian, PILAR, Wazuh and Nmap, in free, academic or evaluation versions. Real procedures are studied: risk analysis of an urban remote control system, OT network segmentation according to IEC 62443 and an incident response drill in an essential service. Assessment is continuous by module plus the final integrating project.
Standards covered: IEC 62443, Directive (EU) 2022/2555 (NIS2), Royal Decree 311/2022 (ENS), Directive (EU) 2022/2557 (CER), Law 8/2011, ISO/IEC 27001, ETSI EN 303 645, Regulation (EU) 2024/2847 (Cyber Resilience Act).
Build it end to end
Your final project follows the real engineering workflow, step by step, reviewed by your tutor.
Where this takes you
Requirements
- No prior qualification is required.
- Internet connection and a computer capable of running the programme software.
- English sufficient to read technical standards.
Ready to start?
Send your application today. Our admissions team replies within 72 hours with your study plan and funding options.
Frequently asked questions
The programme totals 300 hours over 3 months. You set your own pace within each intake, and your tutor helps you plan the workload around your job.
You work with Wireshark, Nozomi Guardian, PILAR, Wazuh and Nmap, using free, academic or evaluation versions. Your tutor indicates the free alternative wherever one exists.
A SEIUM Institute certificate, awarded on passing the continuous assessment and the final project. It is SEIUM's own qualification, not an official state degree; its recognition depends on the programme completed and the regulations of each country.
Yes. Modules passed are recognised in a higher programme in the same area (postgraduate diploma or master's). Ask about the recognition policy when you enrol.
No prior qualification is required; you need a computer able to run the programme software and English sufficient to read technical standards.
Start dates are set by SEIUM's faculty for each intake. Our admissions team will confirm the next available date when you apply.
Related programmes
Pedestrian Mobility Course in Urban Spaces
Online course of 300 hours in pedestrian mobility in urban spaces: 6 modules covering pedestrian mobility dynamics, measurement and modelling, pedestrian network design, safety and comfort,…
Flood Modeling Course with HEC-RAS 2D
Online course of 300 hours in flood modelling with HEC-RAS 2D. 6 modules covering the basics of two-dimensional modelling, terrain and computational mesh, boundary conditions and…
Course on European Regulations in Smart Cities
Online course of 300 hours in European regulation for smart cities: 6 modules covering EU urban policy, data and digital services law, artificial intelligence and data…
More in Civil, Rail & Smart Cities
All Civil, Rail & Smart Cities programmes → · How to apply · Fees & financing · Scholarships