CSMS (Cybersecurity Management System) Audit Course
Online 300-hour course in CSMS (Cybersecurity Management System) auditing. 6 modules covering UN Regulation R155 (cybersecurity and CSMS), ISO/SAE 21434 (cybersecurity engineering) and Jira. Assigned tutor and enrolment open.
CSMS (Cybersecurity Management System) Audit Course — studying from Malta
Regulation and safety engineering are important in Malta because many industries, including aviation, maritime, gaming and financial services, operate under strict national and European rules. Engineers specialising in reliability, availability, maintainability and safety, along with homologation and conformity assessment, are needed by manufacturers, operators and regulators alike. The Malta Standards Authority and sectoral regulators set requirements that shape product approval and operational safety. Professionals in this field often bridge technical work and compliance, supporting audits, certification and documentation.
Fees for Malta: €448 (Euro), with instalments and employer sponsorship available.
Relevant bodies in Malta
Typical roles
Questions from Malta
Which Maltese bodies handle regulation and homologation, and how are they relevant here?
Malta applies EU frameworks for product and vehicle homologation, with Transport Malta, the Malta Standards Authority and the Occupational Health and Safety Authority among the key bodies. Reliability, availability, maintainability and safety (RAMS) work is often tied to such standards. SEIUM's qualifications are private, not official state degrees and not accredited by any national body, so recognition is decided by employers or the relevant authority.
Do employers in Malta hire for RAMS and safety roles, and would this qualification help?
Safety and RAMS specialists are needed across Malta's industrial, maritime, aviation-related and public sectors. Employers typically look for demonstrable competence, experience and recognised standards knowledge. Whether a private online qualification is accepted is up to each employer, so it is wise to check job requirements and talk with hiring managers first.
Can I manage this online alongside work, and what support is included?
The programmes are 100% online and taught in English, so no student visa is needed to study from home. Hours range from 300 for specialist courses to 1,900 for master's programmes, and you can plan around your job. Each student is assigned a technical tutor, fees can be paid in instalments, and employer sponsorship is possible.
Take the controls.
Run a real engineering trade-off from this field. Move the sliders, watch the model react in real time and beat the challenge.
What you will be able to do
Interpret the requirements of UN Regulation R155 on the CSMS.
Describe the processes of a CSMS in accordance with ISO/SAE 21434.
Prepare an audit programme following ISO 19011 and ISO/PAS 5112.
Technically assess threat and risk analyses (TARA).
Formulate findings, non-conformities and action plans.
Monitor the closure of findings and continuous improvement.
Carry out a complete audit of a CSMS.
Who it's for
- Automotive cybersecurity auditor who wants to specialise in CSMS (Cybersecurity Management System) Auditing.
- CSMS manager who wants to specialise in CSMS (Cybersecurity Management System) Auditing.
- R155 compliance consultant who wants to specialise in CSMS (Cybersecurity Management System) Auditing.
- Cybersecurity engineer who wants to specialise in CSMS (Cybersecurity Management System) Auditing.
- Technical service assessor who wants to specialise in CSMS (Cybersecurity Management System) Auditing.
- Cybersecurity risk manager who wants to specialise in CSMS (Cybersecurity Management System) Auditing.
- Engineering or science graduates looking to enter the automotive industry.
What you'll work with
- UN Regulation R155 (cybersecurity and CSMS)
- ISO/SAE 21434 (cybersecurity engineering)
- ISO/PAS 5112 (cybersecurity engineering audit)
- ISO 19011 (guidelines for auditing)
- ISO/IEC 27001 (information security)
- VDA ISA (TISAX assessment)
- UN Regulation R156 (software updates)
6 modules · 300 h
1.1UNECE R155 Regulation1.2Type approval requirements1.3CSMS compliance certificate1.4ISO/SAE 21434 as a reference1.5WP.29 interpretations1.6Annex 5: threats and mitigations1.7Relationship with R156 and SUMS1.8Application in the EU since 20241.9Technical services and authorities1.10Practical case: scope of a manufacturer's CSMS
2.1Cybersecurity governance and culture2.2Organisational-level risk management2.3TARA throughout the lifecycle2.4Supplier management and interface agreements2.5Monitoring and incident response2.6Vulnerability management2.7End of cybersecurity support2.8Competencies and training2.9Document management2.10Workshop: process map against R155
3.1Audit planning3.2Evidence selection3.3Audit criteria3.4Interviews with managers3.5Project sampling3.6Supplier audit3.7Use of VDA ACSMS3.8TISAX as a complement3.9Remote audits3.10Practice: R155 audit checklist
4.1TARA review of a vehicle4.2Assessment of mitigation measures4.3Penetration testing4.4Key management and PKI4.5Back-end and cloud security4.6Vehicle security operations centre (VSOC)4.7Real incident management4.8OTA update security4.9Security event logging4.10Laboratory: TARA review
5.1Classification of non-conformities5.2Audit report5.3Action plans5.4Follow-up and verification5.5Certificate renewal5.6Changes in the organisation5.7Market surveillance5.8Lessons from the first audits5.9Maturity metrics5.10Practical case: action plan after an audit
6.1Selecting the organisation6.2Scope and criteria6.3Audit plan6.4Document review6.5Process assessment6.6Technical assessment6.7Writing findings6.8Improvement recommendations6.9Report and presentation6.10Final review with the tutor
How you'll learn
Fully 100 % online training on the SEIUM campus, with downloadable material, recorded classes and assigned technical tutor. No fixed timetables: the learner progresses at their own pace within the intake, which makes it compatible with work.
Each module combines theory, guided reading of the original standard and applied exercises. The working software is Jira, Confluence, ThreatGet, Advanced Excel, in free, academic or evaluation versions. The exercises are based on real procedures from documentary compliance audits, audit interviews with engineering teams and TARA reviews. Assessment is continuous per module plus the final integrative project.
Build it end to end
Your final project follows the real engineering workflow, step by step, reviewed by your tutor.
Interpret the requirements of UN Regulation R155 on the CSMS.
Describe the processes of a CSMS in accordance with ISO/SAE 21434.
Prepare an audit programme following ISO 19011 and ISO/PAS 5112.
Technically assess threat and risk analyses (TARA).
Formulate findings, non-conformities and action plans.
Where this takes you
Requirements
- No prior degree required.
- Internet connection and a computer capable of running the programme's software.
- Sufficient Spanish to follow technical regulatory texts.
Ready to start?
Send your application today. Our admissions team replies within 72 hours with your study plan and funding options.
Frequently asked questions
The programme totals 300 hours spread over 3 to 5 months. That is between 10 and 15 hours per week on average, compatible with full-time work.
You work with Jira, Confluence, ThreatGet, Advanced Excel. Free, academic or evaluation versions are used, and the tutor indicates the free alternative where one exists.
An SEIUM own diploma upon passing the continuous assessment and the integrative project. It is in-house training, not an official Ministry qualification.
Yes. Modules passed in a course or Postgraduate Diploma in the same area are recognised in the advanced programme. Check the recognition policy when you enrol.
Related programmes
DO-254 Course for Aeronautical Hardware
Online 300-hour course in DO-254 for aeronautical hardware. 6 modules covering DO-254 (aeronautical electronic hardware), AC 20-152A (acceptance of DO-254) and Questa. Assigned tutor and open…
Fatigue Testing of Metallic Components Course
Online 300-hour course in fatigue testing of metallic components. 6 modules covering ASTM E466 (constant amplitude fatigue), ASTM E606 (strain-controlled fatigue) and nCode DesignLife. Assigned tutor…
RID Course in Rail Freight Transport
Online 300-hour course in RID for rail freight transport. 6 modules covering RID (International Carriage of Dangerous Goods by Rail), COTIF (Convention concerning International Carriage by…
More in Regulation, Safety, RAMS & Homologation
All Regulation, Safety, RAMS & Homologation programmes → · How to apply · Fees & financing · Scholarships