Diploma in NIS2/IMO 2021 Compliance and Auditing
Online postgraduate diploma of 800 hours in NIS2/IMO 2021 compliance and auditing. 8 modules covering the maritime cyber regulatory framework, cyber risk management, technical and organisational measures, incident management and audits on board and at terminals under NIS2, MSC.428(98) and ISO/IEC 27001, with an assigned technical tutor.
Diploma in NIS2/IMO 2021 Compliance and Auditing — studying from India
India has a long coastline and growing maritime ambitions, supported by shipbuilding and port development at Kochi, Mumbai, Visakhapatnam and Kolkata. Cochin Shipyard, Mazagon Dock Shipbuilders, Garden Reach Shipbuilders and Larsen & Toubro's offshore arm are important employers. The Directorate General of Shipping sets regulations for vessel safety and seafarers, while the Indian Register of Shipping provides classification services. Offshore oil and gas activity led by Oil and Natural Gas Corporation adds further demand. Engineers work on naval architecture, marine systems, offshore structures and recreational boat design.
Fees for India: ₹159,000 (Indian Rupee), with instalments and employer sponsorship available.
Relevant bodies in India
Typical roles
Questions from India
Which bodies regulate naval and offshore engineering in India?
The Directorate General of Shipping regulates shipping, and the Indian Register of Shipping is the classification society. Naval work is tied to the Indian Navy and shipyards. SEIUM's qualification is a private one and is not accredited by any national body, so recognition by these organisations is not automatic and must be checked with them.
Which employers in India use naval, offshore and nautical engineering skills?
Shipyards such as Mazagon Dock and Cochin Shipyard, offshore oil and gas service firms, marine consultancies, and sports boat builders are typical employers. Each decides its own hiring criteria. The programme can support your profile, but it does not secure a role or any particular recognition.
Can I study this online from India with a job, and what are the costs?
The programme is 100% online and taught in English, so you can study from anywhere in India and do not need a student visa. Workload depends on the programme length, with support from an assigned technical tutor and a final project. Fees are payable in instalments, and employer sponsorship is possible.
Take the controls.
Run a real engineering trade-off from this field. Move the sliders, watch the model react in real time and beat the challenge.
What you will be able to do
Interpret the maritime cybersecurity regulatory framework.
Manage cyber risk on ships and ashore.
Implement appropriate technical and organisational measures.
Respond to and report incidents in line with NIS2.
Plan and carry out compliance audits.
Audit systems on board and at terminals.
Govern cybersecurity through continuous improvement.
Who it's for
- Maritime cybersecurity auditors looking to deepen their NIS2 and IMO 2021 expertise.
- NIS2 compliance managers in shipping companies, port authorities and terminals.
- Shipping company CISOs responsible for fleet cyber governance.
- OT security consultants working with maritime clients.
- Company security officers who need to integrate cyber risk into their role.
- Risk analysts moving into maritime cybersecurity.
- Engineering or science graduates seeking to enter the shipping industry.
What you'll work with
- Directive (EU) 2022/2555 (NIS2) (EU directive on a high common level of cybersecurity)
- Resolution MSC.428(98) (IMO resolution on maritime cyber risk management in safety management systems)
- ISO/IEC 27001 (information security management systems)
- MSC-FAL.1/Circ.3/Rev.2 (IMO guidelines on maritime cyber risk management)
- IACS UR E26 (cyber resilience of ships)
- ISO 19011 (guidelines for auditing management systems)
- ISO/IEC 27005 (information security risk management)
- ISPS Code (International Ship and Port Facility Security Code)
- Microsoft Purview Compliance Manager
- Nessus
- Wireshark
- Eramba
8 modules
1.1Resolution MSC.428(98) and its entry into force in 20211.2IMO guidelines MSC-FAL.1/Circ.3/Rev.21.3Integrating cyber risk into the ISM Code1.4The NIS2 Directive and maritime transport entities1.5Spanish transposition of NIS21.6IACS UR E26 and E27 requirements1.7ISPS Code and port facility security1.8Incident reporting obligations1.9Senior management responsibilities1.10Case study: regulatory map of a shipping company
2.1IT and OT asset inventory2.2Identifying threats and vulnerabilities2.3Risk analysis methodologies2.4NIST Cybersecurity Framework 2.02.5ISO/IEC 270052.6Risk tolerance and criteria2.7Risk treatment plans2.8Third-party and supplier risk2.9Risk monitoring and review2.10Practical exercise: risk analysis of a fleet
3.1ISO/IEC 27001 Annex A controls3.2Network segmentation on board3.3Access and privilege management3.4Patch management on ships3.5Backup and recovery3.6Malware protection3.7Email and remote access security3.8Crew training and awareness3.9Supply chain security3.10Workshop: measures plan for a typical ship
4.1Incident detection and classification4.2Incident response plan4.3Timely notification to authorities4.4Coordination with national CSIRTs4.5Communication with flag and class4.6Recovery of critical systems4.7Basic forensic analysis4.8Lessons learned after incidents4.9Cyber incident drills4.10Case study: responding to ransomware at a shipping company
5.1ISO 19011 auditing principles5.2Auditing ISO/IEC 27001 management systems5.3Auditing NIS2 requirements5.4Planning the audit programme5.5Collecting technical evidence5.6Interviewing crew and shore staff5.7Classifying non-conformities5.8Writing audit reports5.9Following up corrective actions5.10Practical exercise: documentary audit of a shipping company
6.1Preparing audits on board6.2Verifying segmentation and access6.3Reviewing equipment configurations6.4Auditing ECDIS and communication systems6.5Auditing port terminals6.6Assessing service providers6.7Class and flag audits6.8Auditor support tools6.9Evidence in OT environments6.10Lab: simulated technical audit of a ship
7.1Corporate cybersecurity policies7.2Roles and responsibilities7.3Compliance indicators7.4Reporting to the board of directors7.5Management review7.6Document management7.7ISO/IEC 27001 certification7.8Maturity and roadmap7.9Sector maturity benchmark7.10Case study: compliance dashboard
8.1Selecting the maritime organisation8.2Analysing applicable requirements8.3Risk assessment8.4Designing security measures8.5Audit programme8.6Conducting a pilot audit8.7Corrective action plan8.8Conclusions and recommendations8.9Report and presentation8.10Final project: final review with the tutor
How you'll learn
100% online training on SEIUM's campus, with downloadable materials, recorded classes and an assigned technical tutor. There are no fixed timetables: you progress at your own pace within the intake, so you can combine the programme with work.
Each module combines theory, guided reading of the original standard and applied exercises. The working software is Microsoft Purview Compliance Manager, Nessus, Wireshark and Eramba, in free, academic or evaluation versions. Real procedures are studied, including fleet cyber risk analyses, NIS2 and ISM compliance audits and incident response drills. Assessment is continuous by module, plus the final capstone project.
Standards covered: Directive (EU) 2022/2555 (NIS2), Resolution MSC.428(98), ISO/IEC 27001, MSC-FAL.1/Circ.3/Rev.2, IACS UR E26, ISO 19011, ISO/IEC 27005, ISPS Code.
Build it end to end
Your final project follows the real engineering workflow, step by step, reviewed by your tutor.
Where this takes you
Requirements
- Prior technical training or professional experience in the sector. No university degree is required.
- An internet connection and a computer capable of running the programme software.
- English sufficient to read technical standards.
Ready to start?
Send your application today. Our admissions team replies within 72 hours with your study plan and funding options.
Frequently asked questions
The programme totals 800 hours over 6–8 months. You set your own pace within each intake, and your tutor helps you plan the workload around your job.
You work with Microsoft Purview Compliance Manager, Nessus, Wireshark and Eramba, using free, academic or evaluation versions. Your tutor indicates the free alternative wherever one exists.
A SEIUM Institute diploma, awarded on passing the continuous assessment and the final project. It is SEIUM's own qualification, not an official state degree; its recognition depends on the programme completed and the regulations of each country.
Yes. Modules passed are recognised in a higher programme in the same area (postgraduate diploma or master's). Ask about the recognition policy when you enrol.
Prior technical training or professional experience in the sector (no university degree required), and English sufficient to read technical standards.
Start dates are set by SEIUM's faculty for each intake. Our admissions team will confirm the next available date when you apply.
Related programmes
Diploma in Audits, PSC and Inspection Readiness
Online postgraduate diploma of 800 hours in audits, port state control (PSC) and inspection readiness. 8 modules covering the Paris MoU and THETIS, inspected conventions (SOLAS,…
Postgraduate Diploma in MRP/Planning and Component Traceability
Online 800-hour Postgraduate Diploma in MRP/Planning and Component Traceability. 8 modules covering ISO 9001 (quality management), SCOR Model (ASCM) and SAP S/4HANA. Personal tutor assigned and…
Postgraduate Diploma in Small Marine Batteries and Safety
Online 800-hour Postgraduate Diploma in Small Marine Batteries and Safety. 8 modules covering ISO 10133 (low-voltage direct current electrical installations on boats), ABYC E-13 (lithium-ion batteries)…
More in Naval, Offshore & Sports Nautical
All Naval, Offshore & Sports Nautical programmes → · How to apply · Fees & financing · Scholarships