Master'sMotorcycles & 2-Wheelers Applications open

Master’s in Charging Cybersecurity and PKI

Online master's programme of 1,900 hours in EV charging cybersecurity and PKI. 12 modules covering threat modelling, applied cryptography, public key infrastructure, ISO 15118 Plug & Charge, OCPP security, charger hardware and backend security, European regulation, penetration testing and secure operations, with an assigned technical tutor.

Duration12–14 months
ModeOnline
LanguageEnglish
Start datesSet by the faculty
AwardSEIUM Institute diploma

Master’s in Charging Cybersecurity and PKI — studying from Malta

Malta has a strong culture of two-wheeled transport, with scooters and motorcycles widely used given the island's dense traffic and limited parking. This has created a steady market for dealerships, workshops and parts suppliers serving riders. Engineers interested in 2-wheelers can find roles in servicing, technical support and the importation of vehicles and components. Opportunities also arise in electric scooter and light mobility, which are gaining attention in urban policy discussions.

Fees for Malta: €5,920 (Euro), with instalments and employer sponsorship available.

Relevant bodies in Malta

  • Transport Malta
  • Malta Motor Trade Association
  • Malta Chamber of Commerce, Enterprise and Industry

Typical roles

  • Motorcycle Service Technician
  • 2-Wheeler Technical Specialist
  • Dealership Technical Manager
  • Light Electric Vehicle Engineer

Questions from Malta

Does a SEIUM qualification count for regulated vehicle engineering in Malta?

Vehicle type approval and homologation in Malta follow EU frameworks administered through the Transport Malta authority. SEIUM Institute's qualifications are private and not official state degrees or accredited by any national body. Whether they are recognised for particular roles is decided by employers or the relevant body, so it is worth confirming before enrolling.

What career opportunities for 2-wheeler engineers exist in Malta?

Malta has a small market for motorcycles and two-wheelers, mainly through dealerships, importers, servicing and parts supply. Opportunities are limited compared with larger countries, so many professionals work in adjacent areas such as electronics or design. Employers decide how much value they place on a private online qualification, so direct conversations with them are advisable.

Is the programme workload manageable alongside work, and is employer funding possible?

The programmes are fully online and taught in English. Hours range from 300 for specialist courses to 1,900 for master's programmes, so choose according to the time you can commit. Fees are payable in instalments, employer sponsorship is possible, and each student has an assigned technical tutor for guidance.

Virtual lab · try it before you enrol

Take the controls.

Run a real engineering trade-off from this field. Move the sliders, watch the model react in real time and beat the challenge.

SIM · LIVE ●
Learning outcomes

What you will be able to do

01

Identify the threats to the electric vehicle charging ecosystem.

02

Apply cryptography and TLS to charging communications.

03

Design and operate public key infrastructures.

04

Implement Plug & Charge in accordance with ISO 15118.

05

Secure chargers, OCPP protocols and backends.

06

Comply with European cybersecurity regulation.

07

Carry out penetration tests and manage incidents.

Profile

Who it's for

  • Charging cybersecurity engineers at operators and charger manufacturers.
  • PKI specialists moving into the V2G and Plug & Charge ecosystem.
  • Embedded systems pentesters targeting chargers and their protocols.
  • Cloud security architects responsible for CPMS backends.
  • Compliance managers preparing for NIS2, the CRA and IEC 62443.
  • SOC analysts monitoring charging networks.
  • Engineering or science graduates seeking to work with charge point operators.
Standards & tools

What you'll work with

  • ISO 15118-20 (vehicle-to-grid communication, Plug & Charge and PKI)
  • IEC 62443-4-2 (technical security requirements for industrial automation components)
  • OCPP 2.0.1 (Open Charge Point Protocol with security profiles)
  • Directive (EU) 2022/2555 – NIS2 (cybersecurity of essential and important entities)
  • Regulation (EU) 2024/2847 – CRA (Cyber Resilience Act for products with digital elements)
  • ISO/IEC 27001 (information security management systems)
  • UNECE R155 (vehicle cybersecurity management system)
  • ISO/SAE 21434 (road vehicle cybersecurity engineering)
  • OpenSSL
  • EJBCA
  • Wireshark
  • Burp Suite
  • Scapy
Syllabus

12 modules

  1. 1.1Attack surface of the charging ecosystem
  2. 1.2Actors: vehicle, charger, CPMS and grid
  3. 1.3Public incidents involving chargers
  4. 1.4Attacks on the power grid through charging
  5. 1.5Charging session fraud
  6. 1.6User data privacy
  7. 1.7STRIDE threat modelling
  8. 1.8TARA risk analysis
  9. 1.9Attacker motivations
  10. 1.10Case study: threat modelling of a charging station
  1. 2.1Symmetric cryptography and AES
  2. 2.2Asymmetric cryptography: RSA and ECC
  3. 2.3Hash functions and digital signatures
  4. 2.4Key exchange
  5. 2.5TLS 1.2 and 1.3
  6. 2.6Random number generation
  7. 2.7Secure key storage
  8. 2.8Post-quantum cryptography and migration
  9. 2.9Performance on embedded systems
  10. 2.10Lab: TLS handshake with OpenSSL
  1. 3.1X.509 certificate structure
  2. 3.2Root and intermediate certificate authorities
  3. 3.3Chains of trust
  4. 3.4Revocation with CRL and OCSP
  5. 3.5Certificate policies
  6. 3.6Certificate life cycle
  7. 3.7HSMs for root keys
  8. 3.8PKI audits
  9. 3.9PKI on embedded systems
  10. 3.10Practical exercise: deployment of a hierarchical PKI
  1. 4.1V2G Root CA roles
  2. 4.2Contract certificates
  3. 4.3OEM and charger certificates
  4. 4.4Plug & Charge and provisioning
  5. 4.5Hubject services and other ecosystems
  6. 4.6Interoperability between PKIs
  7. 4.7Certificate installation and renewal
  8. 4.8Revocation management
  9. 4.9What is new in ISO 15118-20
  10. 4.10Case study: Plug & Charge flow
  1. 5.1OCPP security profiles
  2. 5.2Basic and certificate-based authentication
  3. 5.3TLS between charger and backend
  4. 5.4Certificate management in OCPP 2.0.1
  5. 5.5Security event logging
  6. 5.6Secure firmware updates
  7. 5.7Common configuration errors
  8. 5.8Protocol security testing
  9. 5.9OCPP 2.1 and new capabilities
  10. 5.10Lab: secure OCPP connection with certificates
  1. 6.1Secure firmware boot
  2. 6.2Secure elements and TPM
  3. 6.3Protection of debug ports
  4. 6.4Physical tamper protection
  5. 6.5Supply chain security
  6. 6.6Firmware signing
  7. 6.7Protection of RFID readers
  8. 6.8Hardware testing
  9. 6.9Firmware vulnerability management
  10. 6.10Practical exercise: secure boot verification
  1. 7.1Cloud CPMS architecture
  2. 7.2Identity and access management
  3. 7.3Network segmentation
  4. 7.4API security
  5. 7.5Denial-of-service protection
  6. 7.6Logging and monitoring
  7. 7.7Incident response
  8. 7.8Backup and recovery
  9. 7.9Compliance with cloud standards
  10. 7.10Case study: audit of a backend
  1. 8.1NIS2 Directive requirements
  2. 8.2Cyber Resilience Act (CRA)
  3. 8.3Delegated regulation under the Radio Equipment Directive (RED)
  4. 8.4UNECE R155 in the vehicle
  5. 8.5IEC 62443 for industrial systems
  6. 8.6ISO/IEC 27001 management systems
  7. 8.7AFIR Regulation requirements
  8. 8.8National cybersecurity frameworks
  9. 8.9Product certification
  10. 8.10Workshop: regulatory compliance matrix
  1. 9.1Testing methodology
  2. 9.2Reconnaissance of exposed chargers
  3. 9.3Firmware analysis
  4. 9.4Protocol fuzzing
  5. 9.5Attacks on PLC communication
  6. 9.6Testing ISO 15118
  7. 9.7Testing OCPP
  8. 9.8Reporting and prioritisation
  9. 9.9Responsible vulnerability disclosure
  10. 9.10Lab: fuzzing OCPP messages
  1. 10.1Security operations centre
  2. 10.2Intrusion detection
  3. 10.3Patch management
  4. 10.4Asset inventory
  5. 10.5Vulnerability management
  6. 10.6Threat intelligence
  7. 10.7Incident drills
  8. 10.8Cybersecurity indicators
  9. 10.9Coordination with CSIRTs
  10. 10.10Case study: incident in a charger network
  1. 11.1Policies and standards
  2. 11.2Corporate risk analysis
  3. 11.3Security across the life cycle
  4. 11.4Supplier management
  5. 11.5Training and awareness
  6. 11.6Cyber risk insurance
  7. 11.7Incident communication
  8. 11.8Internal security audits
  9. 11.9Maturity roadmap
  10. 11.10Workshop: cybersecurity master plan
  1. 12.1Definition of the system under study
  2. 12.2Threat analysis
  3. 12.3Security requirements
  4. 12.4PKI design
  5. 12.5Charger and backend measures
  6. 12.6Security testing
  7. 12.7Operations plan
  8. 12.8Compliance assessment
  9. 12.9Thesis report
  10. 12.10Master's Thesis: defence before a panel
Methodology, software & labs

How you'll learn

100% online training on the SEIUM campus, with downloadable material, recorded classes and an assigned technical tutor. There are no fixed timetables: you progress at your own pace within each intake, so the programme is compatible with full-time work.

Each module combines theory, guided reading of the original standard and applied exercises. The working software is OpenSSL, EJBCA, Wireshark, Burp Suite and Scapy, in free, academic or evaluation versions. Practical work is based on real procedures for PKI deployment for Plug & Charge, penetration testing of chargers and backends, and threat analysis of charging stations. Assessment is continuous by module, plus the final Master's Thesis.

Standards covered: ISO 15118-20, IEC 62443-4-2, OCPP 2.0.1, Directive (EU) 2022/2555 (NIS2), Regulation (EU) 2024/2847 (CRA), ISO/IEC 27001, UNECE R155, ISO/SAE 21434.

Assigned technical tutor:every module ends with a deliverable that your tutor marks individually.
Standards-based learning:guided reading of ISO 15118-20, IEC 62443-4-2, OCPP 2.0.1 and NIS2 applied to real cases, not as a theoretical annex.
Industry software:OpenSSL, EJBCA, Wireshark, Burp Suite and Scapy, in free, academic or evaluation versions.
Master's Thesis with defence:a complete security design for a charging system, from threat analysis and PKI design to testing and compliance assessment, defended before a panel.
Flexible format:100% online, no fixed timetables, compatible with full-time work.
Capstone project

Build it end to end

Your final project follows the real engineering workflow, step by step, reviewed by your tutor.

Threat modelling
Model the threats to a charging station and its ecosystem using STRIDE and TARA.
PKI design
Deploy a hierarchical PKI and implement the Plug & Charge certificate flow.
Securing charger and backend
Set up secure OCPP connections, secure boot and backend protections.
Penetration testing
Fuzz OCPP messages and test ISO 15118 to find and prioritise vulnerabilities.
Master's Thesis
Integrate threat analysis, PKI, testing and compliance into a complete security project, defended before a panel.
Career opportunities

Where this takes you

Charging Cybersecurity EngineerPKI SpecialistEmbedded Systems PentesterCloud Security ArchitectCompliance ManagerSOC Analyst
Admissions & scholarships

Requirements

  • University degree in engineering, science or architecture, or equivalent demonstrable professional experience.
  • Internet connection and a computer capable of running the programme software.
  • English sufficient to read technical standards.

Ready to start?

Send your application today. Our admissions team replies within 72 hours with your study plan and funding options.

FAQ

Frequently asked questions

The programme totals 1,900 hours over 12–14 months. You set your own pace within each intake, and your tutor helps you plan the workload around your job.

You work with OpenSSL, EJBCA, Wireshark, Burp Suite and Scapy, using free, academic or evaluation versions. Your tutor indicates the free alternative wherever one exists.

A SEIUM Institute diploma, awarded on passing the continuous assessment and the Master's Thesis. It is SEIUM's own qualification, not an official state degree; its recognition depends on the programme completed and the regulations of each country.

Yes. Modules passed in a course or postgraduate diploma in the same area are recognised in the higher programme. Ask about the recognition policy when you enrol.

A university degree in engineering, science or architecture (or equivalent professional experience), a computer able to run the software and English sufficient to read technical standards.

Start dates are set by SEIUM's faculty for each intake. Our admissions team will confirm the next available date when you apply.

Master’s in Charging Cybersecurity and PKIEnrol
Scroll to Top
SEIUM – Institute of Advanced Engineering
Privacy Overview

This website uses cookies so that we can provide you with the best user experience possible. Cookie information is stored in your browser and performs functions such as recognising you when you return to our website and helping our team to understand which sections of the website you find most interesting and useful.