Master’s in Charging Cybersecurity and PKI
Online master's programme of 1,900 hours in EV charging cybersecurity and PKI. 12 modules covering threat modelling, applied cryptography, public key infrastructure, ISO 15118 Plug & Charge, OCPP security, charger hardware and backend security, European regulation, penetration testing and secure operations, with an assigned technical tutor.
Master’s in Charging Cybersecurity and PKI — studying from Malta
Malta has a strong culture of two-wheeled transport, with scooters and motorcycles widely used given the island's dense traffic and limited parking. This has created a steady market for dealerships, workshops and parts suppliers serving riders. Engineers interested in 2-wheelers can find roles in servicing, technical support and the importation of vehicles and components. Opportunities also arise in electric scooter and light mobility, which are gaining attention in urban policy discussions.
Fees for Malta: €5,920 (Euro), with instalments and employer sponsorship available.
Relevant bodies in Malta
Typical roles
Questions from Malta
Does a SEIUM qualification count for regulated vehicle engineering in Malta?
Vehicle type approval and homologation in Malta follow EU frameworks administered through the Transport Malta authority. SEIUM Institute's qualifications are private and not official state degrees or accredited by any national body. Whether they are recognised for particular roles is decided by employers or the relevant body, so it is worth confirming before enrolling.
What career opportunities for 2-wheeler engineers exist in Malta?
Malta has a small market for motorcycles and two-wheelers, mainly through dealerships, importers, servicing and parts supply. Opportunities are limited compared with larger countries, so many professionals work in adjacent areas such as electronics or design. Employers decide how much value they place on a private online qualification, so direct conversations with them are advisable.
Is the programme workload manageable alongside work, and is employer funding possible?
The programmes are fully online and taught in English. Hours range from 300 for specialist courses to 1,900 for master's programmes, so choose according to the time you can commit. Fees are payable in instalments, employer sponsorship is possible, and each student has an assigned technical tutor for guidance.
Take the controls.
Run a real engineering trade-off from this field. Move the sliders, watch the model react in real time and beat the challenge.
What you will be able to do
Identify the threats to the electric vehicle charging ecosystem.
Apply cryptography and TLS to charging communications.
Design and operate public key infrastructures.
Implement Plug & Charge in accordance with ISO 15118.
Secure chargers, OCPP protocols and backends.
Comply with European cybersecurity regulation.
Carry out penetration tests and manage incidents.
Who it's for
- Charging cybersecurity engineers at operators and charger manufacturers.
- PKI specialists moving into the V2G and Plug & Charge ecosystem.
- Embedded systems pentesters targeting chargers and their protocols.
- Cloud security architects responsible for CPMS backends.
- Compliance managers preparing for NIS2, the CRA and IEC 62443.
- SOC analysts monitoring charging networks.
- Engineering or science graduates seeking to work with charge point operators.
What you'll work with
- ISO 15118-20 (vehicle-to-grid communication, Plug & Charge and PKI)
- IEC 62443-4-2 (technical security requirements for industrial automation components)
- OCPP 2.0.1 (Open Charge Point Protocol with security profiles)
- Directive (EU) 2022/2555 – NIS2 (cybersecurity of essential and important entities)
- Regulation (EU) 2024/2847 – CRA (Cyber Resilience Act for products with digital elements)
- ISO/IEC 27001 (information security management systems)
- UNECE R155 (vehicle cybersecurity management system)
- ISO/SAE 21434 (road vehicle cybersecurity engineering)
- OpenSSL
- EJBCA
- Wireshark
- Burp Suite
- Scapy
12 modules
1.1Attack surface of the charging ecosystem1.2Actors: vehicle, charger, CPMS and grid1.3Public incidents involving chargers1.4Attacks on the power grid through charging1.5Charging session fraud1.6User data privacy1.7STRIDE threat modelling1.8TARA risk analysis1.9Attacker motivations1.10Case study: threat modelling of a charging station
2.1Symmetric cryptography and AES2.2Asymmetric cryptography: RSA and ECC2.3Hash functions and digital signatures2.4Key exchange2.5TLS 1.2 and 1.32.6Random number generation2.7Secure key storage2.8Post-quantum cryptography and migration2.9Performance on embedded systems2.10Lab: TLS handshake with OpenSSL
3.1X.509 certificate structure3.2Root and intermediate certificate authorities3.3Chains of trust3.4Revocation with CRL and OCSP3.5Certificate policies3.6Certificate life cycle3.7HSMs for root keys3.8PKI audits3.9PKI on embedded systems3.10Practical exercise: deployment of a hierarchical PKI
4.1V2G Root CA roles4.2Contract certificates4.3OEM and charger certificates4.4Plug & Charge and provisioning4.5Hubject services and other ecosystems4.6Interoperability between PKIs4.7Certificate installation and renewal4.8Revocation management4.9What is new in ISO 15118-204.10Case study: Plug & Charge flow
5.1OCPP security profiles5.2Basic and certificate-based authentication5.3TLS between charger and backend5.4Certificate management in OCPP 2.0.15.5Security event logging5.6Secure firmware updates5.7Common configuration errors5.8Protocol security testing5.9OCPP 2.1 and new capabilities5.10Lab: secure OCPP connection with certificates
6.1Secure firmware boot6.2Secure elements and TPM6.3Protection of debug ports6.4Physical tamper protection6.5Supply chain security6.6Firmware signing6.7Protection of RFID readers6.8Hardware testing6.9Firmware vulnerability management6.10Practical exercise: secure boot verification
7.1Cloud CPMS architecture7.2Identity and access management7.3Network segmentation7.4API security7.5Denial-of-service protection7.6Logging and monitoring7.7Incident response7.8Backup and recovery7.9Compliance with cloud standards7.10Case study: audit of a backend
8.1NIS2 Directive requirements8.2Cyber Resilience Act (CRA)8.3Delegated regulation under the Radio Equipment Directive (RED)8.4UNECE R155 in the vehicle8.5IEC 62443 for industrial systems8.6ISO/IEC 27001 management systems8.7AFIR Regulation requirements8.8National cybersecurity frameworks8.9Product certification8.10Workshop: regulatory compliance matrix
9.1Testing methodology9.2Reconnaissance of exposed chargers9.3Firmware analysis9.4Protocol fuzzing9.5Attacks on PLC communication9.6Testing ISO 151189.7Testing OCPP9.8Reporting and prioritisation9.9Responsible vulnerability disclosure9.10Lab: fuzzing OCPP messages
10.1Security operations centre10.2Intrusion detection10.3Patch management10.4Asset inventory10.5Vulnerability management10.6Threat intelligence10.7Incident drills10.8Cybersecurity indicators10.9Coordination with CSIRTs10.10Case study: incident in a charger network
11.1Policies and standards11.2Corporate risk analysis11.3Security across the life cycle11.4Supplier management11.5Training and awareness11.6Cyber risk insurance11.7Incident communication11.8Internal security audits11.9Maturity roadmap11.10Workshop: cybersecurity master plan
12.1Definition of the system under study12.2Threat analysis12.3Security requirements12.4PKI design12.5Charger and backend measures12.6Security testing12.7Operations plan12.8Compliance assessment12.9Thesis report12.10Master's Thesis: defence before a panel
How you'll learn
100% online training on the SEIUM campus, with downloadable material, recorded classes and an assigned technical tutor. There are no fixed timetables: you progress at your own pace within each intake, so the programme is compatible with full-time work.
Each module combines theory, guided reading of the original standard and applied exercises. The working software is OpenSSL, EJBCA, Wireshark, Burp Suite and Scapy, in free, academic or evaluation versions. Practical work is based on real procedures for PKI deployment for Plug & Charge, penetration testing of chargers and backends, and threat analysis of charging stations. Assessment is continuous by module, plus the final Master's Thesis.
Standards covered: ISO 15118-20, IEC 62443-4-2, OCPP 2.0.1, Directive (EU) 2022/2555 (NIS2), Regulation (EU) 2024/2847 (CRA), ISO/IEC 27001, UNECE R155, ISO/SAE 21434.
Build it end to end
Your final project follows the real engineering workflow, step by step, reviewed by your tutor.
Where this takes you
Requirements
- University degree in engineering, science or architecture, or equivalent demonstrable professional experience.
- Internet connection and a computer capable of running the programme software.
- English sufficient to read technical standards.
Ready to start?
Send your application today. Our admissions team replies within 72 hours with your study plan and funding options.
Frequently asked questions
The programme totals 1,900 hours over 12–14 months. You set your own pace within each intake, and your tutor helps you plan the workload around your job.
You work with OpenSSL, EJBCA, Wireshark, Burp Suite and Scapy, using free, academic or evaluation versions. Your tutor indicates the free alternative wherever one exists.
A SEIUM Institute diploma, awarded on passing the continuous assessment and the Master's Thesis. It is SEIUM's own qualification, not an official state degree; its recognition depends on the programme completed and the regulations of each country.
Yes. Modules passed in a course or postgraduate diploma in the same area are recognised in the higher programme. Ask about the recognition policy when you enrol.
A university degree in engineering, science or architecture (or equivalent professional experience), a computer able to run the software and English sufficient to read technical standards.
Start dates are set by SEIUM's faculty for each intake. Our admissions team will confirm the next available date when you apply.
Related programmes
Master’s in PEM Fuel Cells for Transport
Online master's programme of 1,900 hours in PEM fuel cells for transport. 12 modules covering PEM electrochemistry, stack components, balance of plant, on-board hydrogen storage, hybridisation…
Master’s in Reliability, RAMS and Warranty Analytics Engineering
Online master's programme of 1,900 hours in reliability, RAMS and warranty analytics engineering, structured in 12 modules covering RAMS concepts, applied life data statistics, warranty data…
Master’s in Risk Psychology and Advanced Training Engineering
Online master's programme of 1,900 hours in risk psychology and advanced rider training engineering, with 12 modules covering motorcyclist psychology, risk perception, attention and mental workload,…
More in Motorcycles & 2-Wheelers
All Motorcycles & 2-Wheelers programmes → · How to apply · Fees & financing · Scholarships