Apply now
CourseDefense, Military Engineering & Land Systems Applications open

ISO/IEC 15408 (Common Criteria) Course in Defence

Online 300-hour course in ISO/IEC 15408 (Common Criteria) in defence. 6 modules covering ISO/IEC 15408-1 (common criteria: introduction and model), ISO/IEC 15408-3 (assurance requirements) and IBM Engineering Requirements Management DOORS. Assigned tutor and open enrolment.

Duration300 h
ModeOnline
Start datesSet by the faculty
AwardSEIUM Institute certificate
Enrol now View syllabus Ask an advisor
Virtual lab · try it before you enrol

Take the controls.

Run a real engineering trade-off from this field. Move the sliders, watch the model react in real time and beat the challenge.

SIM · LIVE ●
Learning outcomes

What you will be able to do

01

Explain the evaluation model of the common criteria.

02

Define the target of evaluation and write a security target.

03

Select functional requirements suited to the security problem.

04

Prepare the developer's assurance evidence.

05

Describe the evaluation and certification process within a national and European scheme.

06

Plan the maintenance of a certificate.

07

Prepare a complete evaluation file.

Profile

Who it's for

  • Common criteria evaluator looking to specialise in ISO/IEC 15408 (Common Criteria) in defence.
  • Security certification consultant looking to specialise in ISO/IEC 15408 (Common Criteria) in defence.
  • Product security engineer looking to specialise in ISO/IEC 15408 (Common Criteria) in defence.
  • Certification manager looking to specialise in ISO/IEC 15408 (Common Criteria) in defence.
  • ICT security auditor looking to specialise in ISO/IEC 15408 (Common Criteria) in defence.
  • Vulnerability analyst looking to specialise in ISO/IEC 15408 (Common Criteria) in defence.
  • Graduates in engineering or science seeking to enter the defence industry.
Standards & tools

What you'll work with

  • ISO/IEC 15408-1 (common criteria: introduction and model)
  • ISO/IEC 15408-3 (assurance requirements)
  • ISO/IEC 18045 (evaluation methodology)
  • Implementing Regulation (EU) 2024/482 (EUCC scheme)
  • CCRA Arrangement (mutual recognition of certificates)
  • ISO/IEC TR 15446 (guidance on protection profiles)
  • ISO/IEC 17025 (evaluation laboratories)
Syllabus

6 modules · 300 h

  1. 1.1Origin and purpose of the common criteria scheme
  2. 1.2International mutual recognition and its arrangements
  3. 1.3Actors: sponsor, developer, laboratory and certification body
  4. 1.4National evaluation and certification scheme
  5. 1.5What an evaluation does and does not certify
  6. 1.6Relationship with other certification schemes
  7. 1.7Cost, timelines and realistic planning
  8. 1.8Scheme vocabulary and acronyms
  9. 1.9Normative documents of the family
  10. 1.10Exercise: deciding whether a product fits the scheme
  1. 2.1Defining the target of evaluation
  2. 2.2Operational environment and assumptions
  3. 2.3Threats and organisational security policies
  4. 2.4Security objectives for the target and its environment
  5. 2.5Rationale for the objectives against the threats
  6. 2.6Security functional requirements and their selection
  7. 2.7Assurance requirements and levels
  8. 2.8Protection profiles and conformance to them
  9. 2.9Target summary and specification of functions
  10. 2.10Practice: writing a security target
  1. 3.1Identification and authentication
  2. 3.2Access control and information flow
  3. 3.3Security audit and logging
  4. 3.4Cryptographic support
  5. 3.5Protection of user data
  6. 3.6Protection of security functions
  7. 3.7Security management and roles
  8. 3.8Communication and trusted channels
  9. 3.9Privacy and anonymity
  10. 3.10Practice: selecting functional components for a case
  1. 4.1Assurance classes and their content
  2. 4.2Design documentation by level
  3. 4.3Functional representation and interfaces
  4. 4.4Security architecture design
  5. 4.5Configuration management and delivery
  6. 4.6Operational and preparative guidance
  7. 4.7Developer testing and its coverage
  8. 4.8Vulnerability analysis and attack resistance
  9. 4.9Development lifecycle and its measurement
  10. 4.10Practice: drawing up the list of deliverables for a level
  1. 5.1Common evaluation methodology
  2. 5.2Planning and entry into evaluation
  3. 5.3Evaluator activities by class
  4. 5.4Independent and penetration testing
  5. 5.5Technical reports and observations
  6. 5.6Issuing the certificate and its scope
  7. 5.7Certificate maintenance and minor changes
  8. 5.8Recertification and new versions
  9. 5.9Use of the certificate in public procurement
  10. 5.10Practice: project plan for a certification
  1. 6.1Choice of product and market
  2. 6.2Defining the target of evaluation
  3. 6.3Threat and objective analysis
  4. 6.4Complete security target
  5. 6.5Selection of functional and level requirements
  6. 6.6Deliverables and evidence plan
  7. 6.7Evaluation plan and schedule
  8. 6.8Cost and return analysis
  9. 6.9Project report
  10. 6.10Project defence
Methodology, software & labs

How you'll learn

100% online training on the SEIUM campus, with downloadable material, recorded classes and an assigned technical tutor. No fixed timetable: students progress at their own pace within the intake, which makes it compatible with work.

Each module combines theory, guided reading of the original standard and applied exercises. The working software is IBM Engineering Requirements Management DOORS, Ghidra, Coverity, Jira, in free, academic or evaluation versions. Practical work is based on real procedures for writing security targets, evaluations in accredited laboratories and reviews of developer evidence. Assessment is continuous per module plus the final integrative project.

Accreditable laboratories(EN ISO/IEC 17025) with rotor test rig, EMC/Lightning pre-compliance, HIL/SIL, vibration/acoustics.
Evidence-oriented Master's Thesis:safety case, test plan, compliance dossier and operational limits.
Industry-led mentoring:lecturers with experience in training, , eVTOL/UAM and flight test.
Flexible format(hybrid/online), international cohorts and support from SEIUM Career Services.
Ethics and safety:a safety-by-design approach, with OT cyber security, DIH and compliance as its pillars.
Capstone project

Build it end to end

Your final project follows the real engineering workflow, step by step, reviewed by your tutor.

Choice of product and market

Explain the evaluation model of the common criteria.

Defining the target of evaluation

Define the target of evaluation and write a security target.

Threat and objective analysis

Select functional requirements suited to the security problem.

Complete security target

Prepare the developer's assurance evidence.

Selection of functional and level requirements

Describe the evaluation and certification process within a national and European scheme.

Career opportunities

Where this takes you

Common criteria evaluatorSecurity certification consultantProduct security engineerCertification managerICT security auditorVulnerability analyst
Admissions & scholarships

Requirements

  • No prior degree is required.
  • Internet connection and a computer capable of running the programme's software.
  • Level of Spanish sufficient to follow the reading of technical regulations.

Ready to start?

Send your application today. Our admissions team replies within 72 hours with your study plan and funding options.

Apply now Scholarships
FAQ

Frequently asked questions

The programme consists of 300 hours in total, spread over 3 to 5 months. That is between 10 and 15 hours a week on average, compatible with a full-time job.

You will work with IBM Engineering Requirements Management DOORS, Ghidra, Coverity, Jira. Free, academic or evaluation versions are used, and the tutor indicates the free alternative where one exists.

An in-house SEIUM diploma, awarded on passing the continuous assessment and the integrative project. It is in-house training, not an official Ministry qualification.

Yes. Modules passed in a course or postgraduate diploma in the same area can be credited towards the advanced programme. Check the credit transfer policy when you enrol.

Keep exploring

Related programmes

See all in Defense, Military Engineering & Land Systems
Course830 $

Cybersecurity Course in Military Helicopter Avionics

Online 300-hour course in cybersecurity in military helicopter avionics. 6 modules covering DO-326A / ED-202A (airworthiness security process), DO-356A / ED-203A (airworthiness security methods) and Wireshark.…

300 hOnlineDefense, Military Engineering & Land Systems
Course610 $

ISO Standards Course in Hydrogen Storage

Online 300-hour course in ISO standards for hydrogen storage. 6 modules covering ISO/TR 15916 (hydrogen system safety), ISO 19881 (gaseous hydrogen fuel containers for vehicles) and…

300 hOnlineDefense, Military Engineering & Land Systems
Course830 $

ISO/IEC 27001 Course in Military Environments

Online course of 300 h in ISO/IEC 27001 in military environments. 6 modules covering ISO/IEC 27001:2022 (information security management), ISO/IEC 27002:2022 (security controls) and PILAR (CCN).…

300 hOnlineDefense, Military Engineering & Land Systems
ISO/IEC 15408 (Common Criteria) Course in DefenceEnrol
Related programmes

More in Defense, Military Engineering & Land Systems

Ethics Course in University Defence LaboratoriesView programme →Course in Ethics Standards in University Defence ResearchView programme →Course in Ethics in Military Air Evacuation SystemsView programme →Course on Offset and Cooperation RegulationsView programme →Course in Ethics in the Development of Rotary-Wing AircraftView programme →ISO/IEC 27701 Course in Defence Data PrivacyView programme →

All Defense, Military Engineering & Land Systems programmes → · How to apply · Fees & financing · Scholarships

Scroll to Top
SEIUM – Institute of Advanced Engineering
Powered by  GDPR Cookie Compliance
Privacy Overview

This website uses cookies so that we can provide you with the best user experience possible. Cookie information is stored in your browser and performs functions such as recognising you when you return to our website and helping our team to understand which sections of the website you find most interesting and useful.