Postgraduate Diploma in Plant Network Security
Online 800 h Postgraduate Diploma in Plant Network Security. 8 modules covering IEC 62443-3-3, IEC 62443-3-2 and Wireshark. Dedicated tutor and open enrolment.
Take the controls.
Run a real engineering trade-off from this field. Move the sliders, watch the model react in real time and beat the challenge.
What you will be able to do
Identify the attack surface of industrial networks.
Apply risk assessment and the zones and conduits model.
Design defensive network architectures with an industrial DMZ.
Harden control devices, HMIs and engineering workstations.
Implement monitoring and anomaly detection in OT.
Assess compliance with NIS2 and IEC 62443.
Plan safe and authorised security testing.
Who it's for
- OT cybersecurity engineer seeking to specialise in Plant Network Security.
- Industrial network architect seeking to specialise in Plant Network Security.
- Industrial SOC analyst seeking to specialise in Plant Network Security.
- IEC 62443 auditor seeking to specialise in Plant Network Security.
- Plant security manager seeking to specialise in Plant Network Security.
- NIS2 compliance consultant seeking to specialise in Plant Network Security.
- Engineering or science graduates looking to enter the energy sector.
What you'll work with
- IEC 62443-3-3
- IEC 62443-3-2
- IEC 62443-2-1
- NIST SP 800-82 Rev. 3
- Directive (EU) 2022/2555 (NIS2)
- IEC 62443-4-2
- ISO/IEC 27019
8 modules · 800 h
1.1Differences between IT and OT environments1.2Purdue model and functional levels1.3Modbus, DNP3, S7 and CIP protocols1.4Design weaknesses in field protocols1.5Reference incidents: Stuxnet and Triton1.6Remote access vectors and suppliers1.7Asset and communications inventory1.8Threat analysis in plants1.9IEC 62443 framework: structure and roles1.10Practical case: threat map of a plant
2.1Zones and conduits2.2Initial and detailed risk analysis2.3Security levels SL-T, SL-C and SL-A2.4Foundational requirements FR1 to FR72.5IEC 62443-3-3 system requirements2.6Documentation of zones and conduits2.7Tolerable risk and acceptance criteria2.8Alignment with physical security analysis2.9Periodic risk review2.10Workshop: defining zones for a plant
3.1Segmentation with VLANs and routing3.2Industrial firewalls and deep packet inspection3.3Industrial DMZ and jump servers3.4Data diodes and unidirectional gateways3.5Access control lists3.6Microsegmentation in OT3.7Secure third-party remote access3.8Secure industrial wireless networks3.9Redundancy and availability3.10Laboratory: configuring an industrial DMZ
4.1Hardening HMI and SCADA stations4.2Secure PLC configuration4.3Patch management in OT4.4Application allowlisting4.5Removable media control4.6Account and password management4.7IEC 62443-4-2 component requirements4.8Backup and recovery4.9Disabling unnecessary services4.10Practice: hardening an engineering workstation
5.1Passive monitoring of OT traffic5.2Protocol anomaly detection5.3IDS rules for industrial traffic5.4Analysis with Zeek and Suricata5.5SIEM integration5.6Correlation of plant events5.7Indicators of compromise in OT5.8Communications baseline5.9Alert management and false positives5.10Laboratory: IDS with Modbus rules
6.1NIS2 Directive and its obligations6.2NIST SP 800-82 Rev. 3 guidance6.3IEC 62443-2-1 security programme6.4Supplier requirements under IEC 62443-2-46.5Vulnerability and advisory management6.6Staff training and awareness6.7Maturity indicators6.8Plant security audits6.9Relationship with ISO/IEC 27001 and 270196.10Practical case: gap analysis against NIS2
7.1Passive versus active assessment7.2Testing on plant test benches and digital twins7.3Safe scanning of OT networks7.4Review of firewall configurations7.5Segmentation testing7.6Incident tabletop exercises7.7Reporting and prioritising findings7.8Ethics and authorisation in testing7.9Remediation plans7.10Practice: verifying segmentation rules
8.1Description of the target plant8.2Inventory and risk analysis8.3Design of zones and conduits8.4Secure network architecture8.5Monitoring plan8.6Regulatory compliance plan8.7Roadmap and budget8.8Monitoring indicators8.9Report and presentation8.10Final review with the tutor
How you'll learn
100 % online training on the SEIUM Institute campus, with downloadable material, recorded classes and a dedicated technical tutor. There are no fixed timetables: students progress at their own pace within the enrolment period, which makes it possible to combine study with work.
Each module combines theory, guided reading of the original standard and applied exercises. The working software is Wireshark, Zeek, Suricata, Nozomi Networks Guardian, Claroty, in free, academic or evaluation versions. Tests are studied using real procedures for verifying segmentation on a test bench, passive monitoring of OT traffic and tabletop incident exercises. Assessment is continuous per module plus the final integrative project.
Build it end to end
Your final project follows the real engineering workflow, step by step, reviewed by your tutor.
Identify the attack surface of industrial networks.
Apply risk assessment and the zones and conduits model.
Design defensive network architectures with an industrial DMZ.
Harden control devices, HMIs and engineering workstations.
Implement monitoring and anomaly detection in OT.
Where this takes you
Requirements
- Prior technical training or professional experience in the sector. A university degree is not required.
- Internet connection and a computer capable of running the programme's software.
- A level of Spanish sufficient to follow technical standards documentation.
Ready to start?
Send your application today. Our admissions team replies within 72 hours with your study plan and funding options.
Frequently asked questions
The programme totals 800 hours spread over 6 to 8 months. That is an average of 10 to 15 hours per week, compatible with full-time work.
The programme uses Wireshark, Zeek, Suricata, Nozomi Networks Guardian and Claroty. Free, academic or evaluation versions are used, and the tutor indicates the free alternative where one exists.
An own-brand diploma from SEIUM Institute upon passing the continuous assessment and the final integrative project. This is in-house training, not an official qualification from the Ministry.
Yes. Modules passed in a course or postgraduate diploma in the same area count towards the advanced programme. Check the recognition policy when you enrol.
Related programmes
Postgraduate Diploma in EtherCAT/Profinet/EtherNet-IP
Online Postgraduate Diploma of 800 h in EtherCAT/Profinet/EtherNet-IP. 8 modules with IEC 61158, IEC 61784-2 and Beckhoff TwinCAT 3. Assigned tutor and open enrolment.
Diploma in FOC/DTC and State Observers
Online postgraduate diploma of 800 hours in FOC/DTC and state observers. 8 modules covering electrical machine modelling, field-oriented control, direct torque control, modulation and inverters, state…
Diploma in Harmonics, Flicker and THD
Online postgraduate diploma of 800 hours in harmonics, flicker and THD. 8 modules covering power quality, harmonic analysis, THD and TDD, harmonic sources, effects and resonances,…
More in Electronics, Embedded Systems & Telecom
All Electronics, Embedded Systems & Telecom programmes → · How to apply · Fees & financing · Scholarships