Fundamentals of Cybersecurity in Defence Course
Online 300-hour course in fundamentals of cybersecurity in defence. 6 modules covering the Esquema Nacional de Seguridad (Royal Decree 311/2022), ISO/IEC 27001 (information security) and Wireshark. Assigned tutor and open enrolment.
Take the controls.
Run a real engineering trade-off from this field. Move the sliders, watch the model react in real time and beat the challenge.
What you will be able to do
Explain the concepts and framework of cybersecurity in defence.
Design secure architectures based on defence in depth.
Apply risk analysis and management methodologies to information systems.
Describe the accreditation processes for systems that handle classified information.
Plan detection, response and recovery capabilities for incidents.
Identify the specific requirements of tactical and industrial environments.
Draw up a security plan for a defence information system.
Who it's for
- Cybersecurity analyst looking to specialise in Fundamentals of Cybersecurity in Defence.
- Security architecture engineer looking to specialise in Fundamentals of Cybersecurity in Defence.
- Information security manager looking to specialise in Fundamentals of Cybersecurity in Defence.
- Security Operations Centre (SOC) analyst looking to specialise in Fundamentals of Cybersecurity in Defence.
- ICT security auditor looking to specialise in Fundamentals of Cybersecurity in Defence.
- Systems accreditation specialist looking to specialise in Fundamentals of Cybersecurity in Defence.
- Graduates in engineering or sciences seeking to enter defence public administration.
What you'll work with
- National Security Scheme (Royal Decree 311/2022)
- ISO/IEC 27001 (Information Security)
- NIST SP 800-53 (Security Controls)
- Directive (EU) 2022/2555 (NIS2)
- NIST SP 800-37 (Risk Management Framework)
- ISO/IEC 15408 (Common Criteria)
- IEC 62443 (industrial cybersecurity)
6 modules · 300 h
1.1What distinguishes cybersecurity in the defence domain from corporate cybersecurity1.2Confidentiality, integrity and availability in critical systems1.3Information classification and the need-to-know principle1.4Threat actors and their motivations1.5The intelligence cycle applied to system defence1.6Reference frameworks: NIST, ISO 27001 and sector equivalents1.7Governance, roles and allocation of responsibilities1.8Standardised vocabulary and documentation1.9Differences between the corporate and operational environments1.10Exercise: classifying the assets and information of a system
2.1Security by design versus security added afterwards2.2Segmentation into zones and conduits2.3Domain separation and controlled gateways2.4Zero trust applied to mission systems2.5Identity management, credentials and access control2.6Cryptography: uses, key management and lifecycle2.7Supply chain security2.8Physical security and its relationship with logical security2.9Redundancy, continuity and controlled degradation2.10Practice: reviewing an architecture and identifying its weaknesses
3.1Identification and valuation of assets3.2Threat modelling applied to the specific system3.3Risk analysis and evaluation3.4Risk treatment and acceptance of residual risk3.5The systems accreditation process3.6Security documentation required in the file3.7Auditing and independent verification3.8Vulnerability management and patching in critical systems3.9Security metrics and dashboards3.10Practice: preparing the risk analysis of a system
4.1Event logging and centralisation of traces4.2Continuous monitoring and anomaly detection4.3The Security Operations Centre: functions and shifts4.4Incident classification and escalation4.5Containment, eradication and recovery4.6Evidence preservation and chain of custody4.7Communication during an incident4.8Business continuity and contingency plans4.9Lessons learned and improvement of the setup4.10Practice: leading the response to a simulated incident
5.1Industrial control systems and operational technology5.2Embedded platforms and onboard systems5.3Tactical communications and satellite links5.4Unmanned systems and their attack surface5.5Cloud and outsourced services: what can and cannot be done5.6Mobile devices and remote working in sensitive environments5.7Interoperability with allies and the civilian domain5.8Cyber defence exercises and readiness assessment5.9Training and security culture for personnel5.10Practice: assessing the exposure of a specific environment
6.1Choosing the system and defining its mission6.2Asset inventory and classification6.3Threat model and risk analysis6.4Proposed security architecture6.5Detection and response plan6.6Business continuity plan6.7Accreditation file6.8Budget and implementation plan6.9Technical report6.10Defence of the work
How you'll learn
100% online training on the SEIUM Institute campus, with downloadable material, recorded classes and an assigned technical tutor. There are no fixed timetables: students progress at their own pace within the intake, which makes it possible to combine the course with work.
Each module combines theory, guided reading of the original standard and applied exercises. The working software is Wireshark, PILAR (CCN-CERT), Splunk, Security Onion, Nessus, in free, academic or evaluation versions. Practical work covers real laboratory procedures for network traffic analysis, incident response exercises and simulations of systems accreditation processes. Assessment is continuous, module by module, plus the final integrative project.
Build it end to end
Your final project follows the real engineering workflow, step by step, reviewed by your tutor.
Explain the concepts and framework of cybersecurity in defence.
Design secure architectures based on defence in depth.
Apply risk analysis and management methodologies to information systems.
Describe the accreditation processes for systems that handle classified information.
Plan detection, response and recovery capabilities for incidents.
Where this takes you
Requirements
- No prior degree is required.
- Internet connection and a computer capable of running the programme's software.
- Sufficient Spanish to follow technical regulatory texts.
Ready to start?
Send your application today. Our admissions team replies within 72 hours with your study plan and funding options.
Frequently asked questions
The programme totals 300 hours, spread over 3 to 5 months. That is between 10 and 15 hours per week on average, compatible with a full-time job.
The course works with Wireshark, PILAR (CCN-CERT), Splunk, Security Onion and Nessus. Free, academic or evaluation versions are used, and the tutor indicates the free alternative where one exists.
A SEIUM Institute own diploma upon passing the continuous assessment and the integrative project. It is in-house training, not an official qualification from the Ministry.
Yes. Modules passed in a course or Postgraduate Diploma in the same area are credited towards the advanced programme. Check the credit transfer policy when you enrol.
Related programmes
Course in International Regulation of Cyber Weapons
Online 300-hour course in international regulation of cyber weapons. 6 modules covering the UN Charter, articles 2.4 and 51, the Geneva Conventions and Additional Protocol I,…
Course in International Regulation for CBRN Certification
Online 300-hour course in international regulation for CBRN certification. 6 modules covering Regulation (EU) 2016/425 (personal protective equipment), EN 943-1 (chemical protective suits) and LIMS (laboratory…
Course in Ethics in Nerve Agent Research
Online course of 300 h in ethics in nerve agent research. 6 modules covering the Chemical Weapons Convention (1993), Law 49/1999 on the control of chemicals…
More in Defense, Military Engineering & Land Systems
All Defense, Military Engineering & Land Systems programmes → · How to apply · Fees & financing · Scholarships