Diploma in NIS2/IMO 2021 Compliance and Auditing
Online postgraduate diploma of 800 hours in NIS2/IMO 2021 compliance and auditing. 8 modules covering the maritime cyber regulatory framework, cyber risk management, technical and organisational measures, incident management and audits on board and at terminals under NIS2, MSC.428(98) and ISO/IEC 27001, with an assigned technical tutor.
Diploma in NIS2/IMO 2021 Compliance and Auditing — studying from Singapore
Singapore is one of the world's busiest ports and a major centre for marine and offshore engineering, including ship repair, shipbuilding for specialised vessels and offshore platform services. The Maritime and Port Authority of Singapore regulates shipping, port operations and marine safety. Engineers work on naval architecture, marine systems, offshore structures and vessel design. Employers include shipyards and offshore engineering firms clustered in the Tuas and Benoi areas.
Fees for Singapore: S$2,130 (Singapore dollar), with instalments and employer sponsorship available.
Relevant bodies in Singapore
Typical roles
Questions from Singapore
Will this qualification be recognised by professional bodies in Singapore?
SEIUM's qualifications are private, not official state degrees, and are not accredited by any national body in Singapore. Singapore's maritime and offshore sectors are regulated by the Maritime and Port Authority of Singapore, and engineers may seek Professional Engineer status through the Professional Engineers Board. Recognition of a private qualification rests with employers or the relevant body.
How might this training be used by employers in Singapore?
Singapore is a major maritime and offshore hub, with shipyards, offshore engineering firms and marine service providers. A naval or offshore engineering programme may support technical roles, but it does not guarantee employment. Employers will typically look at certifications, sea or project experience and your final project to judge your suitability.
Can I study this alongside a full-time job, and can my employer help fund it?
Because the course is fully online and in English, you can study from Singapore without relocating, and no student visa is needed for online study. Plan for the hours involved: 300 hours for a specialist course up to 1,900 hours for a master's. Fees can be paid in instalments, and employer sponsorship is possible, so raise it with your company's training team.
Take the controls.
Run a real engineering trade-off from this field. Move the sliders, watch the model react in real time and beat the challenge.
What you will be able to do
Interpret the maritime cybersecurity regulatory framework.
Manage cyber risk on ships and ashore.
Implement appropriate technical and organisational measures.
Respond to and report incidents in line with NIS2.
Plan and carry out compliance audits.
Audit systems on board and at terminals.
Govern cybersecurity through continuous improvement.
Who it's for
- Maritime cybersecurity auditors looking to deepen their NIS2 and IMO 2021 expertise.
- NIS2 compliance managers in shipping companies, port authorities and terminals.
- Shipping company CISOs responsible for fleet cyber governance.
- OT security consultants working with maritime clients.
- Company security officers who need to integrate cyber risk into their role.
- Risk analysts moving into maritime cybersecurity.
- Engineering or science graduates seeking to enter the shipping industry.
What you'll work with
- Directive (EU) 2022/2555 (NIS2) (EU directive on a high common level of cybersecurity)
- Resolution MSC.428(98) (IMO resolution on maritime cyber risk management in safety management systems)
- ISO/IEC 27001 (information security management systems)
- MSC-FAL.1/Circ.3/Rev.2 (IMO guidelines on maritime cyber risk management)
- IACS UR E26 (cyber resilience of ships)
- ISO 19011 (guidelines for auditing management systems)
- ISO/IEC 27005 (information security risk management)
- ISPS Code (International Ship and Port Facility Security Code)
- Microsoft Purview Compliance Manager
- Nessus
- Wireshark
- Eramba
8 modules
1.1Resolution MSC.428(98) and its entry into force in 20211.2IMO guidelines MSC-FAL.1/Circ.3/Rev.21.3Integrating cyber risk into the ISM Code1.4The NIS2 Directive and maritime transport entities1.5Spanish transposition of NIS21.6IACS UR E26 and E27 requirements1.7ISPS Code and port facility security1.8Incident reporting obligations1.9Senior management responsibilities1.10Case study: regulatory map of a shipping company
2.1IT and OT asset inventory2.2Identifying threats and vulnerabilities2.3Risk analysis methodologies2.4NIST Cybersecurity Framework 2.02.5ISO/IEC 270052.6Risk tolerance and criteria2.7Risk treatment plans2.8Third-party and supplier risk2.9Risk monitoring and review2.10Practical exercise: risk analysis of a fleet
3.1ISO/IEC 27001 Annex A controls3.2Network segmentation on board3.3Access and privilege management3.4Patch management on ships3.5Backup and recovery3.6Malware protection3.7Email and remote access security3.8Crew training and awareness3.9Supply chain security3.10Workshop: measures plan for a typical ship
4.1Incident detection and classification4.2Incident response plan4.3Timely notification to authorities4.4Coordination with national CSIRTs4.5Communication with flag and class4.6Recovery of critical systems4.7Basic forensic analysis4.8Lessons learned after incidents4.9Cyber incident drills4.10Case study: responding to ransomware at a shipping company
5.1ISO 19011 auditing principles5.2Auditing ISO/IEC 27001 management systems5.3Auditing NIS2 requirements5.4Planning the audit programme5.5Collecting technical evidence5.6Interviewing crew and shore staff5.7Classifying non-conformities5.8Writing audit reports5.9Following up corrective actions5.10Practical exercise: documentary audit of a shipping company
6.1Preparing audits on board6.2Verifying segmentation and access6.3Reviewing equipment configurations6.4Auditing ECDIS and communication systems6.5Auditing port terminals6.6Assessing service providers6.7Class and flag audits6.8Auditor support tools6.9Evidence in OT environments6.10Lab: simulated technical audit of a ship
7.1Corporate cybersecurity policies7.2Roles and responsibilities7.3Compliance indicators7.4Reporting to the board of directors7.5Management review7.6Document management7.7ISO/IEC 27001 certification7.8Maturity and roadmap7.9Sector maturity benchmark7.10Case study: compliance dashboard
8.1Selecting the maritime organisation8.2Analysing applicable requirements8.3Risk assessment8.4Designing security measures8.5Audit programme8.6Conducting a pilot audit8.7Corrective action plan8.8Conclusions and recommendations8.9Report and presentation8.10Final project: final review with the tutor
How you'll learn
100% online training on SEIUM's campus, with downloadable materials, recorded classes and an assigned technical tutor. There are no fixed timetables: you progress at your own pace within the intake, so you can combine the programme with work.
Each module combines theory, guided reading of the original standard and applied exercises. The working software is Microsoft Purview Compliance Manager, Nessus, Wireshark and Eramba, in free, academic or evaluation versions. Real procedures are studied, including fleet cyber risk analyses, NIS2 and ISM compliance audits and incident response drills. Assessment is continuous by module, plus the final capstone project.
Standards covered: Directive (EU) 2022/2555 (NIS2), Resolution MSC.428(98), ISO/IEC 27001, MSC-FAL.1/Circ.3/Rev.2, IACS UR E26, ISO 19011, ISO/IEC 27005, ISPS Code.
Build it end to end
Your final project follows the real engineering workflow, step by step, reviewed by your tutor.
Where this takes you
Requirements
- Prior technical training or professional experience in the sector. No university degree is required.
- An internet connection and a computer capable of running the programme software.
- English sufficient to read technical standards.
Ready to start?
Send your application today. Our admissions team replies within 72 hours with your study plan and funding options.
Frequently asked questions
The programme totals 800 hours over 6–8 months. You set your own pace within each intake, and your tutor helps you plan the workload around your job.
You work with Microsoft Purview Compliance Manager, Nessus, Wireshark and Eramba, using free, academic or evaluation versions. Your tutor indicates the free alternative wherever one exists.
A SEIUM Institute diploma, awarded on passing the continuous assessment and the final project. It is SEIUM's own qualification, not an official state degree; its recognition depends on the programme completed and the regulations of each country.
Yes. Modules passed are recognised in a higher programme in the same area (postgraduate diploma or master's). Ask about the recognition policy when you enrol.
Prior technical training or professional experience in the sector (no university degree required), and English sufficient to read technical standards.
Start dates are set by SEIUM's faculty for each intake. Our admissions team will confirm the next available date when you apply.
Related programmes
Postgraduate Diploma in Structural Repairs and Critical Welding
Online 800-hour Postgraduate Diploma in Structural Repairs and Critical Welding. 8 modules covering ISO 15614-1 (welding procedure qualification), ISO 9606-1 (welder qualification) and ANSYS Mechanical. Assigned…
Diploma in Plant Refrigeration Systems and Cold Rooms
Online postgraduate diploma of 800 hours in plant refrigeration systems and cold rooms. 8 modules covering refrigeration thermodynamics, refrigerants and F-gas regulations, plant components, cold room…
Postgraduate Diploma in Premium Materials, Acoustics and Lighting
Online 800 h Postgraduate Diploma in Premium Materials, Acoustics and Lighting. 8 modules with the Code on Noise Levels on Board Ships (Res. MSC.337(91)), ISO 2923…
More in Naval, Offshore & Sports Nautical
All Naval, Offshore & Sports Nautical programmes → · How to apply · Fees & financing · Scholarships