Postgraduate Diploma in CSMS/SUMS for the Connected Vehicle
Online 800-hour Postgraduate Diploma in CSMS/SUMS for the Connected Vehicle. 8 modules covering UN Regulation No. 155, UN Regulation No. 156 and Ansys medini analyze. Assigned tutor and enrolment open.
Take the controls.
Run a real engineering trade-off from this field. Move the sliders, watch the model react in real time and beat the challenge.
What you will be able to do
Interpret the cybersecurity and software update regulatory framework.
Implement a cybersecurity management system.
Carry out TARA analysis in accordance with ISO/SAE 21434.
Apply cybersecurity engineering to the product.
Design a software update management system.
Organise monitoring and incident response.
Prepare audits and type-approval processes.
Who it's for
- Product cybersecurity manager who wishes to specialise in CSMS/SUMS for the Connected Vehicle.
- Automotive cybersecurity engineer who wishes to specialise in CSMS/SUMS for the Connected Vehicle.
- CSMS auditor who wishes to specialise in CSMS/SUMS for the Connected Vehicle.
- Software update manager who wishes to specialise in CSMS/SUMS for the Connected Vehicle.
- Vehicle SOC analyst who wishes to specialise in CSMS/SUMS for the Connected Vehicle.
- Type-approval consultant who wishes to specialise in CSMS/SUMS for the Connected Vehicle.
- Engineering or science graduates looking to enter the automotive sector.
What you'll work with
- UN Regulation No. 155
- UN Regulation No. 156
- ISO/SAE 21434:2021
- ISO 24089:2023
- Regulation (EU) 2019/2144 (GSR)
- Regulation (EU) 2024/2847 (Cyber Resilience Act)
- ISO/IEC 27001:2022
- ISO/PAS 5112:2022
8 modules · 800 h
1.1UN Regulations No. 155 and No. 1561.2Type approval in the EU1.3Timetable of Regulation (EU) 2019/21441.4Relationship with ISO/SAE 21434 and ISO 240891.5WP.29 interpretative document1.6Manufacturer and supplier responsibilities1.7Cyber Resilience Act and its scope1.8Markets outside the EU1.9Multi-stage and small-series vehicles1.10Case study: regulatory map of a manufacturer
2.1Policies and governance2.2Culture and training2.3Supplier management2.4Lifecycle processes2.5Organisational risks2.6Internal audits2.7CSMS certificate of compliance2.8Continuous improvement2.9Cybersecurity interface agreements2.10Workshop: documentary structure of a CSMS
3.1TARA methodology3.2Asset identification3.3Threat scenarios with STRIDE3.4Attack paths and feasibility3.5Impact assessment3.6Risk treatment3.7Cybersecurity goals and requirements3.8Threats from Annex 5 of R1553.9CAL assurance levels3.10Lab: TARA of a telematics unit
4.1Cybersecurity concept4.2Secure architecture4.3Secure boot and HSM4.4Secure in-vehicle communications4.5Penetration testing4.6Interface fuzzing4.7Verification and validation4.8Cybersecurity case4.9Key management in production4.10Practice: penetration testing plan
5.1Requirements of UN Regulation No. 1565.2SUMS processes5.3RXSWIN and software identification5.4Impact of updates on type approval5.5Secure OTA5.6Uptane framework5.7Information to the user5.8Update failures5.9Workshop versus remote updates5.10Lab: update flow with Uptane
6.1Vehicle security operations centre6.2In-vehicle intrusion detection6.3Threat intelligence6.4Vulnerability management6.5Incident response6.6Coordinated vulnerability disclosure6.7Reporting to the type-approval authority6.8In-vehicle digital forensics6.9Software supply chain monitoring6.10Case study: response to a disclosed vulnerability
7.1Preparing for the CSMS audit7.2Evidence for the technical service7.3Vehicle type approval7.4SUMS audit7.5Common findings7.6Certificate renewal7.7Changes after type approval7.8Coordination with suppliers7.9Evidence sampling by the auditor7.10Workshop: CSMS audit simulation
8.1Organisational and product scope8.2Regulatory gaps8.3Proposed CSMS processes8.4TARA of the chosen system8.5Proposed SUMS8.6Monitoring and response8.7Evidence preparation8.8Implementation roadmap8.9Report and presentation8.10Final review with the tutor
How you'll learn
100% online training on the SEIUM campus, with downloadable material, recorded classes and an assigned technical tutor. No fixed timetables: students progress at their own pace within the intake, which makes it possible to combine the programme with work.
Each module combines theory, guided reading of the original standard and applied exercises. The working software is Ansys medini analyze, Vector CANoe, Wireshark, Aktualizr (Uptane), Splunk, in free, academic or evaluation versions. The labs are based on real procedures: TARA of a telematics control unit, design of a secure OTA update flow, and simulation of a CSMS audit. Assessment is continuous, module by module, plus the final integrative project.
Build it end to end
Your final project follows the real engineering workflow, step by step, reviewed by your tutor.
Interpret the cybersecurity and software update regulatory framework.
Implement a cybersecurity management system.
Carry out TARA analysis in accordance with ISO/SAE 21434.
Apply cybersecurity engineering to the product.
Design a software update management system.
Where this takes you
Requirements
- Prior technical training or professional experience in the sector. A university degree is not required.
- Internet connection and a computer capable of running the programme's software.
- Sufficient level of Spanish to follow technical regulatory texts.
Ready to start?
Send your application today. Our admissions team replies within 72 hours with your study plan and funding options.
Frequently asked questions
The programme comprises 800 total hours spread over 6 to 8 months. That is an average of 10 to 15 hours per week, compatible with a full-time job.
You work with Ansys medini analyze, Vector CANoe, Wireshark, Aktualizr (Uptane), Splunk. Free, academic or evaluation versions are used, and the tutor indicates the free alternative where one exists.
An SEIUM Institute diploma upon passing the continuous assessment and the integrative project. It is in-house training, not an official qualification from the Ministry.
Yes. Modules passed in a Course or Postgraduate Diploma in the same area are recognised towards the advanced programme. Check the recognition policy when you enrol.
Related programmes
Postgraduate Diploma in RL/IL for Driving: Safety Layers and Reward Shaping
Online 800-hour Postgraduate Diploma in RL/IL for Driving: Safety Layers and Reward Shaping. 8 modules covering ISO/PAS 8800:2024, ISO 21448:2022 (SOTIF) and CARLA. Assigned tutor and…
Postgraduate Diploma in MLOps for AD: Data Lake, Active Labelling and Drift
Online 800-hour Postgraduate Diploma in MLOps for AD: Data Lake, Active Labelling and Drift. 8 modules covering ISO/PAS 8800:2024, ISO/IEC 5259 and Apache Spark with Delta…
Postgraduate Diploma in Interaction Levels 2–4 and Handover
Online 800-hour Postgraduate Diploma in Interaction Levels 2–4 and Handover. 8 modules covering SAE J3016, UNECE R157 and SILAB. Assigned tutor and open enrolment.
More in Autonomous, ADAS & Software-Defined Vehicle
All Autonomous, ADAS & Software-Defined Vehicle programmes → · How to apply · Fees & financing · Scholarships