Cybersecurity Course in Urban Water Infrastructure
Online course of 300 hours in cybersecurity for urban water infrastructure, structured in 6 modules covering OT control systems, risks and threats, defensive architecture, detection and response, and governance and compliance under IEC 62443 and NIS2, with an assigned technical tutor.
Take the controls.
Run a real engineering trade-off from this field. Move the sliders, watch the model react in real time and beat the challenge.
What you will be able to do
Understand the control architecture of water infrastructure.
Identify threats and vulnerabilities specific to OT environments.
Analyse risks using recognised methodologies.
Design defensive architectures based on IEC 62443.
Plan incident detection and response.
Apply critical infrastructure regulations and NIS2.
Draw up a cybersecurity plan for an urban water infrastructure.
Who it's for
- Industrial cybersecurity analysts working on water and wastewater systems.
- OT security managers at water utilities.
- Remote-control (telecontrol) engineers responsible for SCADA networks.
- NIS2 compliance consultants advising essential service operators.
- Industrial systems auditors.
- Industrial SOC technicians.
- Engineering or science graduates looking to join water-cycle management companies.
What you'll work with
- IEC 62443 (security for industrial automation and control systems)
- Directive (EU) 2022/2555 (NIS2) (cybersecurity of network and information systems)
- Directive (EU) 2022/2557 (resilience of critical entities)
- Law 8/2011 (Spanish critical infrastructure protection)
- Royal Decree 311/2022 (Spanish National Security Framework)
- ISO/IEC 27001 (information security management systems)
- ISO/IEC 27019 (security controls for the energy utility industry)
- NIST SP 800-82 (guide to industrial control systems security)
- Wireshark
- Nozomi Networks Guardian
- Security Onion
- Nessus
- Zeek
6 modules
1.1OT architecture for water supply and sanitation1.2SCADA, PLCs and RTUs1.3Remote control of reservoirs, pumping stations and WWTPs1.4Modbus, DNP3 and IEC 60870-5-104 protocols1.5Purdue model and network levels1.6Differences between IT and OT security1.7Critical water infrastructure1.8Known incidents: Oldsmar and Aliquippa1.9Threat actors and motivations1.10Case study: OT asset inventory of a water supply system
2.1Attack surface in water networks2.2Remote access and suppliers2.3Vulnerabilities in PLCs and HMIs2.4Ransomware in essential services2.5Social engineering and insiders2.6Risk analysis methodologies2.7MITRE ATT&CK for ICS2.8Physical and public-health consequences2.9Service impact assessment2.10Practical exercise: risk analysis with IEC 62443-3-2
3.1Segmentation into zones and conduits3.2Industrial firewalls and DMZs3.3Data diodes3.4Secure management of remote access3.5Hardening of workstations and servers3.6Patch management in OT environments3.7Backups and recovery3.8Security of field IoT devices3.9IEC 62443 security levels (SL)3.10Workshop: segmentation design for a remote-control network
4.1Industrial traffic monitoring4.2OT intrusion detection systems4.3Security operations centres (SOC)4.4Event management with SIEM4.5Incident response plan4.6Manual operation and degraded modes4.7Incident notification to INCIBE-CERT4.8Forensic analysis in industrial environments4.9Exercises and drills4.10Lab: Modbus traffic analysis with Wireshark
5.1NIS2 Directive and the water sector5.2Spanish Critical Infrastructure Protection Act5.3Critical Entities Resilience Directive5.4Spanish National Security Framework (ENS)5.5ISO/IEC 27001 management systems5.6Security requirements for suppliers5.7Cybersecurity culture and training5.8Indicators and audits5.9Business continuity plan5.10Case study: cybersecurity master plan
6.1Description of the target infrastructure6.2Inventory of assets and communications6.3Risk analysis6.4Definition of zones and security levels6.5Proposed technical measures6.6Detection and response plan6.7Compliance roadmap6.8Implementation budget6.9Report and presentation6.10Final project: final review with the tutor
How you'll learn
100% online training on the SEIUM campus, with downloadable material, recorded classes and an assigned technical tutor. There are no fixed timetables: you progress at your own pace within the intake, so it fits around your job.
Each module combines theory, guided reading of the original standard and applied exercises. The working software is Wireshark, Nozomi Networks Guardian, Security Onion, Nessus and Zeek, in free, academic or evaluation versions. Exercises are based on real procedures: risk analysis of remote-control systems, design of segmented architectures and OT incident response drills. Assessment is continuous by module, plus the final integrated project.
Standards covered: IEC 62443, Directive (EU) 2022/2555 (NIS2), Directive (EU) 2022/2557, Law 8/2011, Royal Decree 311/2022, ISO/IEC 27001, ISO/IEC 27019, NIST SP 800-82.
Build it end to end
Your final project follows the real engineering workflow, step by step, reviewed by your tutor.
Where this takes you
Requirements
- No prior qualification is required.
- An internet connection and a computer able to run the programme software.
- English sufficient to read technical standards.
Ready to start?
Send your application today. Our admissions team replies within 72 hours with your study plan and funding options.
Frequently asked questions
The programme totals 300 hours over 3 months. You set your own pace within each intake, and your tutor helps you plan the workload around your job.
You work with Wireshark, Nozomi Networks Guardian, Security Onion, Nessus and Zeek, using free, academic or evaluation versions. Your tutor indicates the free alternative wherever one exists.
A SEIUM Institute certificate, awarded on passing the continuous assessment and the final project. It is SEIUM's own qualification, not an official state degree; its recognition depends on the programme completed and the regulations of each country.
Yes. Modules passed are recognised in a higher programme in the same area (postgraduate diploma or master's). Ask about the recognition policy when you enrol.
No prior qualification is required; you need an internet connection, a computer able to run the programme software and enough English to read technical standards.
Start dates are set by SEIUM's faculty for each intake. Our admissions team will confirm the next available date when you apply.
Related programmes
Course in Coastal Dynamics and Urban Coastal Protection
Online 300-hour course in coastal dynamics and urban coastal protection. 6 MODULES WITH LAW 22/1988, OF COASTS, LAW 2/2013, ON THE PROTECTION AND SUSTAINABLE USE OF…
Course in Insurance and Risk in Resilient Cities
Online 300-Hour Course in Insurance and Risk in Resilient Cities. 6 Modules Covering Royal Legislative Decree 7/2004, The Legal Statute of the Insurance Compensation Consortium, Royal…
Railway Traffic Regulation Course
Online course of 300 hours in railway traffic regulation, structured in 6 modules covering capacity and regulation, timetable design, real-time traffic regulation, tools and automation, and…
More in Civil, Rail & Smart Cities
All Civil, Rail & Smart Cities programmes → · How to apply · Fees & financing · Scholarships