Postgraduate DiplomaDefense, Military Engineering & Land Systems Applications open

Diploma in Internal and External Risk Assessment

Online postgraduate diploma of 800 hours in internal and external risk assessment. 8 modules covering risk concepts in defence, insider threat, external threats, assessment methods, information protection, risk treatment and continuity, and governance, compliance and ethics, with an assigned technical tutor.

Duration6–8 months
ModeOnline
LanguageEnglish
Start datesSet by the faculty
AwardSEIUM Institute diploma

Diploma in Internal and External Risk Assessment — studying from Ireland

Ireland maintains a small defence force, the Defence Forces, which operates its own engineering corps and equipment maintenance capabilities. Defence procurement and development are handled through the Department of Defence, while much of the wider defence-related industrial activity involves dual-use technologies, electronics and communications systems supplied by domestic and international firms. Engineers in this area typically work on land vehicle maintenance, military communications, protective equipment and systems integration. Policy and procurement are governed by national and European frameworks, including EU defence initiatives.

Fees for Ireland: €1,490 (Euro), with instalments and employer sponsorship available.

Relevant bodies in Ireland

  • Department of Defence
  • Defence Forces of Ireland
  • Irish Defence Forces Engineering Corps
  • Enterprise Ireland

Typical roles

  • Military Systems Engineer
  • Land Systems Engineer
  • Defence Electronics Engineer
  • Equipment Support Engineer

Questions from Ireland

Which Irish bodies oversee defence engineering and does a private qualification count?

Defence in Ireland is overseen by the Department of Defence, and the Defence Forces run their own training and technical structures. Engineers Ireland sets general professional engineering standards. SEIUM's qualifications are private and not state-awarded, and they are not accredited by any national body, so recognition for any defence-related role is decided by the relevant authority or employer.

Do Irish defence and land-systems employers hire people with private online qualifications?

Irish defence-related hiring is limited and often subject to security vetting and specific qualification requirements, so employers set their own criteria. A private online qualification may be taken into account alongside experience, but we cannot say how any employer will view it or guarantee any result. Check requirements for particular roles directly.

Can I study this from Ireland while working, and what is the workload?

Yes, the programme is 100% online and taught in English, so you can study from home without travel or a student visa. Master's programmes total 1,900 hours, postgraduate diplomas 800 and specialist courses 300. Each student has an assigned technical tutor, fees can be paid in instalments, and employer sponsorship may be possible. Plan your weekly hours realistically around your job.

Virtual lab · try it before you enrol

Take the controls.

Run a real engineering trade-off from this field. Move the sliders, watch the model react in real time and beat the challenge.

SIM · LIVE ●
Learning outcomes

What you will be able to do

01

Understand risk concepts as applied to defence.

02

Analyse insider threat and the programmes that mitigate it.

03

Identify external threats to defence organisations.

04

Apply qualitative and quantitative assessment methods.

05

Protect classified and sensitive information.

06

Design treatment and continuity plans.

07

Integrate ethics and compliance into risk management.

Profile

Who it's for

  • Corporate risk managers.
  • Security directors.
  • Industrial security managers in defence contractors.
  • Threat analysts.
  • Business continuity managers.
  • Compliance managers.
  • Engineering or science graduates seeking to enter the defence sector.
Standards & tools

What you'll work with

  • ISO 31000:2018 (risk management)
  • ISO/IEC 27005:2022 (information security risk management)
  • ISO 22301:2019 (business continuity)
  • IEC 31010 (risk assessment techniques)
  • Law 8/2011 (Spanish critical infrastructure protection)
  • Spanish National Security Framework (Royal Decree 311/2022) (information security in the public sector)
  • Law 2/2023 (Spanish whistleblower protection)
  • PILAR
  • @RISK
  • BowTieXP
  • Microsoft Power BI
  • Archer GRC
Syllabus

8 modules

  1. 1.1Risk, threat and vulnerability
  2. 1.2Internal and external risks
  3. 1.3Risk taxonomies
  4. 1.4Risk appetite and tolerance
  5. 1.5ISO 31000 risk management
  6. 1.6Corporate governance and risk
  7. 1.7Risks in defence programmes
  8. 1.8Strategic and operational risks
  9. 1.9Geopolitical context
  10. 1.10Case study: risk register for a programme
  1. 2.1Types of insider threat
  2. 2.2Motivating factors
  3. 2.3Behavioural indicators
  4. 2.4Insider threat programmes
  5. 2.5Personnel security clearances
  6. 2.6Access and privilege control
  7. 2.7Monitoring and privacy
  8. 2.8Organisational culture and loyalty
  9. 2.9Response and case management
  10. 2.10Workshop: designing an insider threat programme
  1. 3.1Industrial and state espionage
  2. 3.2Advanced persistent cyber threats
  3. 3.3Sabotage and physical attacks
  4. 3.4Hybrid threats
  5. 3.5Supply chain risks
  6. 3.6Foreign investment and control
  7. 3.7Disinformation and reputation
  8. 3.8Natural and climate risks
  9. 3.9Threat intelligence
  10. 3.10Case study: threat profile for a facility
  1. 4.1Probability and impact matrices
  2. 4.2Bow-tie analysis
  3. 4.3Event and fault trees
  4. 4.4Monte Carlo simulation
  5. 4.5MAGERIT and PILAR
  6. 4.6Scenarios and sensitivity analysis
  7. 4.7Delphi methods and expert judgement
  8. 4.8Facility vulnerability analysis
  9. 4.9Key risk indicators
  10. 4.10Practical: bow-tie analysis of a scenario
  1. 5.1Classified information
  2. 5.2Spanish Official Secrets Act
  3. 5.3National Security Authority
  4. 5.4Industrial security in contracts
  5. 5.5Facility security clearance
  6. 5.6Spanish National Security Framework (ENS)
  7. 5.7ISO/IEC 27005 for information risks
  8. 5.8Personal data protection
  9. 5.9Breach management
  10. 5.10Case study: protection plan for a classified contract
  1. 6.1Risk treatment strategies
  2. 6.2Preventive and corrective controls
  3. 6.3ISO 22301 continuity plans
  4. 6.4Crisis management
  5. 6.5Insurance and risk transfer
  6. 6.6Physical security of facilities
  7. 6.7Critical infrastructure protection
  8. 6.8Exercises and testing
  9. 6.9Crisis communication
  10. 6.10Practical: business impact analysis
  1. 7.1Risk management functions
  2. 7.2Three lines model
  3. 7.3Regulatory and criminal compliance
  4. 7.4Whistleblowing channels and Law 2/2023
  5. 7.5Workers' rights
  6. 7.6Proportionality of measures
  7. 7.7Ethics of surveillance
  8. 7.8Risk auditing
  9. 7.9Reporting to senior management
  10. 7.10Case study: balancing security and privacy
  1. 8.1Context of the organisation
  2. 8.2Identification of internal risks
  3. 8.3Identification of external risks
  4. 8.4Analysis and evaluation
  5. 8.5Treatment plan
  6. 8.6Continuity plan
  7. 8.7Indicators and monitoring
  8. 8.8Report to senior management
  9. 8.9Report and presentation
  10. 8.10Final project: final review with the tutor
Methodology, software & labs

How you'll learn

A 100% online programme on the SEIUM campus, with downloadable material, recorded classes and an assigned technical tutor. There are no fixed timetables: you progress at your own pace within each intake, so it can be combined with work.

Each module combines theory, guided reading of the original standard and applied exercises. The working software is PILAR, @RISK, BowTieXP, Microsoft Power BI and Archer GRC, in free, academic or evaluation versions. Practical work is based on real procedures for bow-tie scenario analysis, business impact analysis and crisis management exercises. Assessment is continuous by module plus the final integrating project.

Standards covered: ISO 31000:2018, ISO/IEC 27005:2022, ISO 22301:2019, IEC 31010, Law 8/2011, Spanish National Security Framework (Royal Decree 311/2022), Law 2/2023.

Assigned technical tutor:every module ends with a deliverable that your tutor marks individually.
Standards-based learning:guided reading of ISO 31000:2018, ISO/IEC 27005:2022 and ISO 22301:2019 applied to real cases, not as a theoretical annex.
Industry software:PILAR, @RISK, BowTieXP, Microsoft Power BI and Archer GRC, in free, academic or evaluation versions.
Final project:A complete risk assessment for a defence organisation, from context and identification of internal and external risks to analysis, treatment plan, continuity plan and monitoring indicators, reviewed by your tutor.
Flexible format:100% online, no fixed timetables, compatible with full-time work.
Capstone project

Build it end to end

Your final project follows the real engineering workflow, step by step, reviewed by your tutor.

Organisational context
Define the context of the organisation and its risk appetite under ISO 31000.
Risk identification
Identify internal and external risks, including insider and hybrid threats.
Analysis and evaluation
Analyse and evaluate the risks with bow-tie, matrices and Monte Carlo simulation.
Treatment and continuity
Prepare the treatment plan and an ISO 22301 continuity plan with indicators.
Final project
A report to senior management with presentation, reviewed by your tutor.
Career opportunities

Where this takes you

Corporate risk managerSecurity directorIndustrial security managerThreat analystBusiness continuity managerCompliance manager
Admissions & scholarships

Requirements

  • Prior technical training or professional experience in the sector. A university degree is not required.
  • Internet connection and a computer capable of running the programme software.
  • English sufficient to read technical standards.

Ready to start?

Send your application today. Our admissions team replies within 72 hours with your study plan and funding options.

FAQ

Frequently asked questions

The programme totals 800 hours over 6–8 months. You set your own pace within each intake, and your tutor helps you plan the workload around your job.

You work with PILAR, @RISK, BowTieXP, Microsoft Power BI and Archer GRC, using free, academic or evaluation versions. Your tutor indicates the free alternative wherever one exists.

A SEIUM Institute diploma, awarded on passing the continuous assessment and the final project. It is SEIUM's own qualification, not an official state degree; its recognition depends on the programme completed and the regulations of each country.

Yes. Modules passed are recognised in a higher programme in the same area (postgraduate diploma or master's). Ask about the recognition policy when you enrol.

Prior technical training or professional experience in the sector (no university degree required), a computer able to run the software and English sufficient to read technical standards.

Start dates are set by SEIUM's faculty for each intake. Our admissions team will confirm the next available date when you apply.

Diploma in Internal and External Risk AssessmentEnrol
Scroll to Top
SEIUM – Institute of Advanced Engineering
Privacy Overview

This website uses cookies so that we can provide you with the best user experience possible. Cookie information is stored in your browser and performs functions such as recognising you when you return to our website and helping our team to understand which sections of the website you find most interesting and useful.