Diploma in ERM for Mobility and Infrastructure Operators
Online postgraduate diploma of 800 hours in ERM for mobility and infrastructure operators. 8 modules covering COSO ERM and ISO 31000, risk identification, probabilistic quantification, risk treatment and control, operational resilience, risk governance and reporting, and ERM maturity, with an assigned technical tutor.
Take the controls.
Run a real engineering trade-off from this field. Move the sliders, watch the model react in real time and beat the challenge.
What you will be able to do
Apply the COSO ERM and ISO 31000 frameworks.
Identify the risks specific to mobility and infrastructure operators.
Quantify risks using probabilistic techniques.
Design treatment plans and controls.
Strengthen the operational resilience of the service.
Organise risk governance and reporting.
Assess and improve the organisation's ERM maturity.
Who it's for
- Corporate risk managers at transport operators and concessions.
- Infrastructure risk analysts.
- Service continuity managers.
- Internal auditors.
- ERM consultants.
- Compliance officers.
- Engineering or science graduates seeking to join a public transport operator.
What you'll work with
- ISO 31000 (risk management)
- COSO Enterprise Risk Management 2017 (integrated ERM framework)
- ISO 22301 (business continuity)
- Directive (EU) 2022/2557 (resilience of critical entities)
- ISO 55001 (asset management)
- Directive (EU) 2022/2464 CSRD (corporate sustainability reporting)
- UNE 19601 (criminal compliance management systems)
- Archer GRC
- Palisade @RISK
- Microsoft Power BI
- Python
8 modules
1.1The ERM concept and its evolution1.2COSO ERM 2017 framework1.3ISO 31000 standard1.4The three lines model1.5Risk appetite and tolerance1.6Risk culture1.7Relationship between strategy and risk1.8Specific features of mobility operators1.9Specific features of infrastructure concessions1.10Case study: ERM diagnosis of a bus operator
2.1Sector risk taxonomy2.2Operational and safety risks2.3Regulatory and tariff risks2.4Financial and demand risks2.5Technology and cyber risks2.6Physical and transition climate risks2.7Reputational and image risks2.8Identification techniques2.9Corporate risk register2.10Workshop: risk taxonomy for a toll motorway
3.1Probability and impact matrices3.2Qualitative scales and their calibration3.3Operational value at risk3.4Monte Carlo simulation3.5Scenario analysis and stress testing3.6Correlation between risks3.7Infrastructure interdependencies3.8Residual versus inherent risk3.9Corporate heat map3.10Practical exercise: Monte Carlo simulation of concession demand
4.1Treatment strategies4.2Preventive and detective controls4.3Transfer through insurance4.4Contractual risk-sharing clauses4.5Financial hedging of interest rates and prices4.6Action plans and owners4.7Key risk indicators4.8Control effectiveness4.9Project risk management4.10Case study: risk treatment plan for a tramway
5.1Continuity of public service5.2Crisis and emergency management5.3Resilience of critical infrastructure5.4CER Directive on critical entities5.5Cyber resilience in mobility5.6Supply chain and spare parts5.7Extreme weather events5.8Exercises and drills5.9Lessons from major incidents5.10Workshop: crisis exercise for a flooded tunnel
6.1Risk committee and board6.2Role of the Chief Risk Officer6.3Risk reports to senior management6.4Risk reporting in annual accounts6.5ESG risks and the CSRD6.6Regulatory and criminal compliance6.7Internal audit and assurance6.8Regulatory supervision6.9Communication with lenders6.10Practical exercise: quarterly risk report for the board
7.1Governance, risk and compliance software7.2Automation of indicators7.3Data analytics applied to risk7.4ERM maturity models7.5Sector benchmarking of ERM practices7.6Integration with strategic planning7.7Risk training7.8Improvement roadmap7.9Common mistakes in implementations7.10Case study: maturity assessment of a railway operator
8.1Selection of the operator8.2Initial diagnosis of the organisation8.3Risk taxonomy and register8.4Quantification of key risks8.5Treatment plan8.6Indicators and reporting8.7Implementation roadmap8.8Conclusions and areas for improvement8.9Report and presentation8.10Final project: final review with the tutor
How you'll learn
100% online training on the SEIUM campus, with downloadable material, recorded classes and an assigned technical tutor. There are no fixed timetables: you progress at your own pace within each intake, so the programme fits around your job.
Each module combines theory, guided reading of the original standard and applied exercises. The software used is Archer GRC, Palisade @RISK, Microsoft Power BI and Python, in free, academic or evaluation versions. Exercises are based on real procedures: Monte Carlo simulation of demand risk, a crisis exercise on infrastructure and an ERM maturity assessment. Assessment is continuous by module plus the final project.
Standards covered: ISO 31000, COSO Enterprise Risk Management 2017, ISO 22301, Directive (EU) 2022/2557 (CER), ISO 55001, Directive (EU) 2022/2464 CSRD, UNE 19601.
Build it end to end
Your final project follows the real engineering workflow, step by step, reviewed by your tutor.
Where this takes you
Requirements
- Prior technical training or professional experience in the sector. No university degree is required.
- Internet connection and a computer capable of running the programme software.
- English sufficient to read technical standards.
Ready to start?
Send your application today. Our admissions team replies within 72 hours with your study plan and funding options.
Frequently asked questions
The programme totals 800 hours over 6–8 months. You set your own pace within each intake, and your tutor helps you plan the workload around your job.
You work with Archer GRC, Palisade @RISK, Microsoft Power BI and Python, using free, academic or evaluation versions. Your tutor indicates the free alternative wherever one exists.
A SEIUM Institute diploma, awarded on passing the continuous assessment and the final project. It is SEIUM's own qualification, not an official state degree; its recognition depends on the programme completed and the regulations of each country.
Yes. Modules passed are recognised in a higher programme in the same area (postgraduate diploma or master's). Ask about the recognition policy when you enrol.
Prior technical training or professional experience in the sector; no university degree is required.
Start dates are set by SEIUM's faculty for each intake. Our admissions team will confirm the next available date when you apply.
Related programmes
Diploma in Conformity, Testing and Evidence for Authorities
Online postgraduate diploma of 800 hours in conformity, testing and evidence for authorities. 8 modules covering vehicle type-approval systems, conformity of production, technical evidence and traceability,…
Diploma in KATRI Korea: Technical Conformity and Audits
Online postgraduate diploma of 800 hours in KATRI Korea technical conformity and audits. 8 modules covering the Korean automotive regulatory framework, self-certification and manufacturer liability, KMVSS…
Diploma in Software Contracts and Platform SLAs
Online postgraduate diploma of 800 hours in software contracts and platform SLAs. 8 modules covering types of technology contracts, scope definition, service level agreements, security and…
More in Business, Management & Technology Policy
All Business, Management & Technology Policy programmes → · How to apply · Fees & financing · Scholarships