Postgraduate Diploma in CSMS and In-Plant Segmentation
800-hour online Postgraduate Diploma in CSMS and In-Plant Segmentation. 8 modules covering IEC 62443-2-1, IEC 62443-3-2 and Wireshark. Assigned tutor and enrolment open.
Postgraduate Diploma in CSMS and In-Plant Segmentation — studying from New Zealand
Robotics and automation are increasingly important in New Zealand, especially in dairy processing, food manufacturing, forestry, horticulture and logistics. Research groups at the University of Auckland and the University of Canterbury lead in robotics and control engineering, and firms in these regions develop automated systems for primary industries. Engineers work on process control, industrial automation and robotic integration for manufacturers and technology providers.
Fees for New Zealand: NZ$2,550 (New Zealand dollar), with instalments and employer sponsorship available.
Relevant bodies in New Zealand
Typical roles
Questions from New Zealand
Which New Zealand bodies recognise robotics and control engineering?
Engineering New Zealand is the professional body, and the Chartered Professional Engineer pathway is the recognised route to professional status. Universities such as the University of Auckland and the University of Canterbury offer accredited engineering degrees. SEIUM's qualifications are private and not accredited by any national body, so their recognition rests with employers or the relevant body.
Do robotics and automation employers in New Zealand value this training?
New Zealand has demand for automation skills in dairy processing, food manufacturing, forestry, and advanced manufacturing. Employers generally value practical project experience and programming ability highly. A SEIUM qualification can strengthen a CV, but whether it counts is for each employer to decide.
Is the programme workable alongside a full-time job in New Zealand?
Yes. The programme is 100% online and taught in English, so you can study from anywhere in New Zealand without a student visa. Master's programmes total 1,900 hours, postgraduate diplomas 800 hours and specialist courses 300 hours. You have an assigned technical tutor, and fees are payable in instalments or sponsored by an employer where possible.
Take the controls.
Run a real engineering trade-off from this field. Move the sliders, watch the model react in real time and beat the challenge.
What you will be able to do
Explain the particularities of cybersecurity in industrial control systems.
Implement a cybersecurity management system in line with IEC 62443-2-1.
Carry out risk assessments and define zones and conduits.
Design network segmentation architectures for the plant floor.
Assign technical requirements according to the target security level.
Implement monitoring and detection capabilities in OT networks.
Assess compliance with NIS2 and the IEC 62443 series.
Who it's for
- OT cybersecurity manager looking to specialise in CSMS and In-Plant Segmentation.
- Industrial network architect looking to specialise in CSMS and In-Plant Segmentation.
- Industrial SOC analyst looking to specialise in CSMS and In-Plant Segmentation.
- IEC 62443 compliance consultant looking to specialise in CSMS and In-Plant Segmentation.
- Control systems security engineer looking to specialise in CSMS and In-Plant Segmentation.
- Industrial cybersecurity auditor looking to specialise in CSMS and In-Plant Segmentation.
- Engineering or science graduates looking to enter the energy sector.
What you'll work with
- IEC 62443-2-1
- IEC 62443-3-2
- IEC 62443-3-3
- IEC 62443-2-4
- Directive (EU) 2022/2555 NIS2
- ISO/IEC 27001:2022
- NIST SP 800-82 Rev. 3
- NIST Cybersecurity Framework 2.0
8 modules · 800 h
1.1Differences between IT and OT security1.2Availability, integrity and confidentiality on the plant floor1.3Reference incidents in industrial environments1.4OT assets, threats and vulnerabilities1.5Structure of the IEC 62443 series1.6Roles of owner, integrator and manufacturer1.7Security levels SL-T, SL-C and SL-A1.8Foundational requirements FR1 to FR71.9NIST CSF framework applied to OT1.10Case study: analysis of a published industrial incident
2.1Security programme requirements under IEC 62443-2-12.2Policy, scope and organisation2.3High-level risk analysis2.4Asset inventory and criticality2.5Personnel management and awareness2.6Change and configuration management2.7Relationship with ISO/IEC 270012.8Indicators and continuous improvement2.9Internal CSMS audit2.10Workshop: draft OT cybersecurity policy
3.1IEC 62443-3-2 methodology3.2System under consideration (SuC)3.3Partitioning into zones and conduits3.4Initial and detailed risk assessment3.5Assignment of target SL by zone3.6Zone and conduit diagrams3.7Functional safety considerations3.8Documentation of cybersecurity requirements3.9Periodic review of the assessment3.10Practical: zones and conduits of a packaging plant
4.1The Purdue model and its levels4.2Industrial demilitarised zone (IDMZ)4.3Industrial firewalls and rules4.4VLANs and access control lists4.5Data diodes and unidirectional gateways4.6Microsegmentation in OT networks4.7Deep inspection of industrial protocols4.8Secure remote access via jump hosts4.9Segmentation in wireless networks4.10Laboratory: configuring firewalls between levels 2 and 3
5.1Identification and authentication FR15.2Use control and authorisation FR25.3System integrity FR35.4Data confidentiality FR45.5Restricted data flow FR55.6Timely response to events FR65.7Resource availability FR75.8Requirement enhancements by SL level5.9Compensating measures5.10Workshop: IEC 62443-3-3 requirements matrix for a zone
6.1Passive asset inventory6.2OT intrusion detection systems6.3Analysis of Modbus, S7 and PROFINET traffic6.4Event correlation with SIEM6.5Communication baselines6.6Alert management and false positives6.7OT security operations centres6.8Integration of PLC and HMI logs6.9Industrial indicators of compromise6.10Practical: packet capture analysis with Zeek and Wireshark
7.1NIS2 Directive and its transposition7.2Spanish National Security Framework (ENS) and essential operators7.3IEC 62443-2-1 maturity levels7.4Compliance audits7.5System and component certification7.6Supplier and integrator management7.7IEC 62443-2-4 requirements for integrators7.8Improvement roadmap7.9Communication with management7.10Case study: maturity diagnosis of a plant
8.1Definition of scope and critical assets8.2Plant risk assessment8.3Design of zones and conduits8.4Proposed segmentation architecture8.5Technical requirements by zone8.6Monitoring plan8.7CSMS roadmap8.8Assessment of compliance achieved8.9Report and presentation8.10Final review with the tutor
How you'll learn
100% online training on the SEIUM campus, with downloadable material, recorded classes and an assigned technical tutor. There are no fixed timetables: students progress at their own pace within the intake period, which makes it possible to combine the programme with work.
Each module combines theory, guided reading of the original standard and applied exercises. The working software is Wireshark, Zeek, Nozomi Guardian, Claroty, Fortinet FortiGate, in free, academic or evaluation versions. Practical work is based on real procedures for designing zones and conduits for an actual plant, analysing industrial traffic to detect anomalies, and diagnosing the maturity of a CSMS. Assessment is continuous across each module, plus a final integrating project.
Build it end to end
Your final project follows the real engineering workflow, step by step, reviewed by your tutor.
Explain the particularities of cybersecurity in industrial control systems.
Implement a cybersecurity management system in line with IEC 62443-2-1.
Carry out risk assessments and define zones and conduits.
Design network segmentation architectures for the plant floor.
Assign technical requirements according to the target security level.
Where this takes you
Requirements
- Prior technical training or professional experience in the sector. A university degree is not required.
- Internet connection and a computer capable of running the programme's software.
- A sufficient level of Spanish to follow technical standards documentation.
Ready to start?
Send your application today. Our admissions team replies within 72 hours with your study plan and funding options.
Frequently asked questions
The programme totals 800 hours, spread over 6 to 8 months. That is an average of 10 to 15 hours per week, compatible with a full-time job.
The programme uses Wireshark, Zeek, Nozomi Guardian, Claroty and Fortinet FortiGate. Free, academic or evaluation versions are used, and the tutor indicates the free alternative where one exists.
An SEIUM Institute diploma on passing the continuous assessment and the final integrating project. It is in-house training, not an official qualification from the Ministry.
Yes. Modules passed in a course or postgraduate diploma in the same area can be credited towards the advanced programme. Please check the credit transfer policy when you enrol.
Related programmes
Postgraduate Diploma in KUKA/ABB/FANUC/Yaskawa Programming Standards
Online 800-hour Postgraduate Diploma in KUKA/ABB/FANUC/Yaskawa Programming Standards. 8 modules covering ISO 10218-1:2025, ISO 9787:2013 and KUKA WorkVisual. Dedicated tutor and open enrolment.
Postgraduate Diploma in Advanced Control and Process Optimisation
Online 800 h Postgraduate Diploma in Advanced Control and Process Optimisation. 8 modules covering IEC 61511, IEC 61131-3 and AspenTech DMC3. Dedicated tutor and open enrolment.
Postgraduate Diploma in PL/SIL Validation and Safe Stops
Online 800-hour Postgraduate Diploma in PL/SIL Validation and Safe Stops. 8 modules covering ISO 13849-1:2023, ISO 13849-2:2012 and IFA SISTEMA. Assigned tutor and open enrolment.
More in Robotics, Automation & Control
All Robotics, Automation & Control programmes → · How to apply · Fees & financing · Scholarships