Postgraduate Diploma in OT Vulnerability and Patch Management
Online 800-hour Postgraduate Diploma in OT Vulnerability and Patch Management. 8 modules with IEC TR 62443-2-3, IEC 62443-2-1 and Tenable OT Security. Assigned tutor and open enrolment.
Take the controls.
Run a real engineering trade-off from this field. Move the sliders, watch the model react in real time and beat the challenge.
What you will be able to do
Identify and characterise vulnerabilities in industrial components.
Maintain an OT asset inventory that is useful for vulnerability management.
Prioritise vulnerabilities according to operational context and exploitability.
Design a patch management process in line with IEC 62443-2-3.
Apply compensating measures when patching is not feasible.
Assess the secure development practices of manufacturers.
Govern a continuous programme with remediation indicators.
Who it's for
- OT vulnerability analyst who wants to specialise in OT Vulnerability and Patch Management.
- Industrial cybersecurity manager who wants to specialise in OT Vulnerability and Patch Management.
- Control systems maintenance engineer who wants to specialise in OT Vulnerability and Patch Management.
- Industrial patch manager who wants to specialise in OT Vulnerability and Patch Management.
- OT security consultant who wants to specialise in OT Vulnerability and Patch Management.
- PSIRT team member who wants to specialise in OT Vulnerability and Patch Management.
- Engineering or science graduates looking to move into the energy sector.
What you'll work with
- IEC TR 62443-2-3
- IEC 62443-2-1
- IEC 62443-4-1
- IEC 62443-3-3
- NIST SP 800-40 Rev. 4
- NIST SP 800-82 Rev. 3
- Regulation (EU) 2024/2847 on Cyber Resilience
- Directive (EU) 2022/2555 NIS2
8 modules · 800 h
1.1Types of vulnerabilities in PLCs, HMIs and SCADA1.2Vulnerability lifecycle1.3CVE identifiers and databases1.4CVSS scoring and its limitations in OT1.5CISA ICS and manufacturer advisories1.6Vulnerabilities in protocols without authentication1.7Legacy systems without support1.8Coordinated vulnerability disclosure1.9Real versus theoretical exploitability1.10Case study: analysis of an ICS advisory for a PLC
2.1Inventory as the basis of management2.2Passive versus active discovery2.3Firmware and software versions2.4Criticality and function of each asset2.5SBOM for industrial components2.6Integration with CMDB2.7Continuous inventory updating2.8Third-party assets and integrators2.9Inventory quality and completeness2.10Practical exercise: building an inventory from network traffic
3.1Correlating vulnerabilities with the inventory3.2Operational context and exposure3.3Prioritisation with SSVC and EPSS3.4Known Exploited Vulnerabilities (KEV)3.5Impact on functional safety and production3.6Risk matrices for decision-making3.7Active scanning with caution in OT3.8Vulnerability assessment tools3.9Communicating results to operations3.10Workshop: prioritising fifty real vulnerabilities
4.1Patch management process in IACS4.2Roles of the asset owner and the manufacturer4.3Patch qualification by the supplier4.4Test and replica environments4.5Maintenance windows and shutdowns4.6Staged deployment and verification4.7Rollback procedures4.8Change logging and traceability4.9Patch compliance indicators4.10Laboratory: testing a patch on a test bench
5.1When patching is not possible5.2Segmentation and isolation of the asset5.3Application allowlisting5.4Configuration hardening5.5Disabling unnecessary services5.6Enhanced monitoring5.7Virtual patching with IPS5.8Removable media control5.9Replacement plans for obsolete systems5.10Case study: protecting an unsupported SCADA system
6.1IEC 62443-4-1 requirements for manufacturers6.2Vulnerability management in the development lifecycle6.3Security testing and fuzzing6.4Support and end-of-life policies6.5Firmware and update signing6.6Cyber Resilience Act and notification obligations6.7Manufacturer PSIRT teams6.8Communication with customers6.9Contracts and support clauses6.10Practical exercise: assessing a manufacturer's process against IEC 62443-4-1
7.1Governance of the vulnerability programme7.2Integration with the CSMS7.3Exposure and remediation time metrics7.4Workflow automation7.5Coordination between IT, OT and maintenance7.6Exception management and risk acceptance7.7Programme audit7.8Training plant teams7.9Continuous improvement and lessons learned7.10Case study: redesigning a utility's patch programme
8.1Scope and system assets8.2Inventory and information sources8.3Vulnerability assessment and prioritisation8.4Patch plan and testing8.5Proposed compensating measures8.6Indicators and programme governance8.7Phased implementation plan8.8Residual risk analysis8.9Report and presentation8.10Final review with the tutor
How you'll learn
100 % online training on the SEIUM campus, with downloadable material, recorded classes and an assigned technical tutor. There are no fixed timetables: students progress at their own pace within the intake, which makes it possible to combine study with work.
Each module combines theory, guided reading of the original standard and applied exercises. The working software is Tenable OT Security, Claroty xDome, Nozomi Guardian, OpenVAS, Microsoft Defender for IoT, in free, academic or evaluation versions. The exercises draw on real vulnerability prioritisation procedures using CVSS, EPSS and SSVC, patch testing in a replica environment, and the design of compensating measures for legacy systems. Assessment is continuous per module, plus the final integrative project.
Build it end to end
Your final project follows the real engineering workflow, step by step, reviewed by your tutor.
Identify and characterise vulnerabilities in industrial components.
Maintain an OT asset inventory that is useful for vulnerability management.
Prioritise vulnerabilities according to operational context and exploitability.
Design a patch management process in line with IEC 62443-2-3.
Apply compensating measures when patching is not feasible.
Where this takes you
Requirements
- Prior technical training or professional experience in the sector. A university degree is not required.
- Internet connection and a computer capable of running the programme's software.
- Sufficient Spanish to follow technical standards documentation.
Ready to start?
Send your application today. Our admissions team replies within 72 hours with your study plan and funding options.
Frequently asked questions
The programme comprises 800 hours in total, spread over 6 to 8 months. That is an average of 10 to 15 hours per week, compatible with a full-time job.
You will work with Tenable OT Security, Claroty xDome, Nozomi Guardian, OpenVAS, Microsoft Defender for IoT. Free, academic or evaluation versions are used, and the tutor indicates the free alternative where one exists.
SEIUM's own diploma upon passing the continuous assessment and the integrative project. It is in-house training, not an official qualification from the Ministry.
Yes. Modules passed in a course or postgraduate diploma in the same area are recognised towards the advanced programme. Check the credit recognition policy when you enrol.
Related programmes
Diploma in Ethics and Governance of Collaborative Systems
Online postgraduate diploma of 800 hours in ethics and governance of collaborative systems: 8 modules covering the ethics of collaborative automation, labour and social impact, the…
Diploma in Cladding/Laser Cutting and Optical Safety
Online postgraduate diploma of 800 hours in laser cladding/cutting and optical safety: 8 modules covering industrial lasers, laser cutting, cladding and directed energy deposition, process monitoring,…
Postgraduate Diploma in Safety Case and Compliance Dossier
Online 800-hour Postgraduate Diploma in Safety Case and Compliance Dossier. 8 modules covering Regulation (EU) 2023/1230 on machinery, ISO 12100:2010 and Adelard ASCE. Assigned tutor and…
More in Robotics, Automation & Control
All Robotics, Automation & Control programmes → · How to apply · Fees & financing · Scholarships