CSMS (Cybersecurity Management System) Audit Course
Online 300-hour course in CSMS (Cybersecurity Management System) auditing. 6 modules covering UN Regulation R155 (cybersecurity and CSMS), ISO/SAE 21434 (cybersecurity engineering) and Jira. Assigned tutor and enrolment open.
CSMS (Cybersecurity Management System) Audit Course — studying from the United Kingdom
Regulation, safety and reliability engineering are central to many sectors in the United Kingdom, where RAMS (reliability, availability, maintainability and safety) and homologation requirements apply to transport, energy, defence and medical products. Regulators such as the Civil Aviation Authority, the Office of Rail and Road and the Health and Safety Executive set rules that engineers must meet. Certification bodies and testing laboratories support compliance and type approval. Demand is strong for professionals who can manage safety cases, standards compliance and technical assessment.
Fees for the United Kingdom: £373 (Pound sterling), with instalments and employer sponsorship available.
Relevant bodies in the United Kingdom
Typical roles
Questions from the United Kingdom
Which UK bodies govern RAMS and homologation, and is SEIUM training recognised by them?
Relevant UK bodies include the Health and Safety Executive for workplace safety, the Vehicle Certification Agency for vehicle type approval, and the Institution of Engineering and Technology for professional membership. SEIUM's private qualifications are not accredited by any of these bodies, so they do not confer regulatory authority or automatic recognition.
Do UK employers in safety and compliance roles recognise private online qualifications?
Compliance and safety roles in the UK often value recognised certifications, such as IOSH or IRCA auditor training, alongside experience. A private qualification may support an application if it demonstrates relevant RAMS or regulatory knowledge, but employers decide its weight. Check the specific certifications listed in job adverts you are targeting.
Is the course manageable alongside work, and is it taught in English?
Yes, the programmes are delivered entirely online in English. You receive an assigned technical tutor, and workload varies from 300 to 1,900 hours depending on the programme. Fees can be paid in instalments, and employer sponsorship is possible. You do not need a student visa to study from home in the UK.
Take the controls.
Run a real engineering trade-off from this field. Move the sliders, watch the model react in real time and beat the challenge.
What you will be able to do
Interpret the requirements of UN Regulation R155 on the CSMS.
Describe the processes of a CSMS in accordance with ISO/SAE 21434.
Prepare an audit programme following ISO 19011 and ISO/PAS 5112.
Technically assess threat and risk analyses (TARA).
Formulate findings, non-conformities and action plans.
Monitor the closure of findings and continuous improvement.
Carry out a complete audit of a CSMS.
Who it's for
- Automotive cybersecurity auditor who wants to specialise in CSMS (Cybersecurity Management System) Auditing.
- CSMS manager who wants to specialise in CSMS (Cybersecurity Management System) Auditing.
- R155 compliance consultant who wants to specialise in CSMS (Cybersecurity Management System) Auditing.
- Cybersecurity engineer who wants to specialise in CSMS (Cybersecurity Management System) Auditing.
- Technical service assessor who wants to specialise in CSMS (Cybersecurity Management System) Auditing.
- Cybersecurity risk manager who wants to specialise in CSMS (Cybersecurity Management System) Auditing.
- Engineering or science graduates looking to enter the automotive industry.
What you'll work with
- UN Regulation R155 (cybersecurity and CSMS)
- ISO/SAE 21434 (cybersecurity engineering)
- ISO/PAS 5112 (cybersecurity engineering audit)
- ISO 19011 (guidelines for auditing)
- ISO/IEC 27001 (information security)
- VDA ISA (TISAX assessment)
- UN Regulation R156 (software updates)
6 modules · 300 h
1.1UNECE R155 Regulation1.2Type approval requirements1.3CSMS compliance certificate1.4ISO/SAE 21434 as a reference1.5WP.29 interpretations1.6Annex 5: threats and mitigations1.7Relationship with R156 and SUMS1.8Application in the EU since 20241.9Technical services and authorities1.10Practical case: scope of a manufacturer's CSMS
2.1Cybersecurity governance and culture2.2Organisational-level risk management2.3TARA throughout the lifecycle2.4Supplier management and interface agreements2.5Monitoring and incident response2.6Vulnerability management2.7End of cybersecurity support2.8Competencies and training2.9Document management2.10Workshop: process map against R155
3.1Audit planning3.2Evidence selection3.3Audit criteria3.4Interviews with managers3.5Project sampling3.6Supplier audit3.7Use of VDA ACSMS3.8TISAX as a complement3.9Remote audits3.10Practice: R155 audit checklist
4.1TARA review of a vehicle4.2Assessment of mitigation measures4.3Penetration testing4.4Key management and PKI4.5Back-end and cloud security4.6Vehicle security operations centre (VSOC)4.7Real incident management4.8OTA update security4.9Security event logging4.10Laboratory: TARA review
5.1Classification of non-conformities5.2Audit report5.3Action plans5.4Follow-up and verification5.5Certificate renewal5.6Changes in the organisation5.7Market surveillance5.8Lessons from the first audits5.9Maturity metrics5.10Practical case: action plan after an audit
6.1Selecting the organisation6.2Scope and criteria6.3Audit plan6.4Document review6.5Process assessment6.6Technical assessment6.7Writing findings6.8Improvement recommendations6.9Report and presentation6.10Final review with the tutor
How you'll learn
Fully 100 % online training on the SEIUM campus, with downloadable material, recorded classes and assigned technical tutor. No fixed timetables: the learner progresses at their own pace within the intake, which makes it compatible with work.
Each module combines theory, guided reading of the original standard and applied exercises. The working software is Jira, Confluence, ThreatGet, Advanced Excel, in free, academic or evaluation versions. The exercises are based on real procedures from documentary compliance audits, audit interviews with engineering teams and TARA reviews. Assessment is continuous per module plus the final integrative project.
Build it end to end
Your final project follows the real engineering workflow, step by step, reviewed by your tutor.
Interpret the requirements of UN Regulation R155 on the CSMS.
Describe the processes of a CSMS in accordance with ISO/SAE 21434.
Prepare an audit programme following ISO 19011 and ISO/PAS 5112.
Technically assess threat and risk analyses (TARA).
Formulate findings, non-conformities and action plans.
Where this takes you
Requirements
- No prior degree required.
- Internet connection and a computer capable of running the programme's software.
- Sufficient Spanish to follow technical regulatory texts.
Ready to start?
Send your application today. Our admissions team replies within 72 hours with your study plan and funding options.
Frequently asked questions
The programme totals 300 hours spread over 3 to 5 months. That is between 10 and 15 hours per week on average, compatible with full-time work.
You work with Jira, Confluence, ThreatGet, Advanced Excel. Free, academic or evaluation versions are used, and the tutor indicates the free alternative where one exists.
An SEIUM own diploma upon passing the continuous assessment and the integrative project. It is in-house training, not an official Ministry qualification.
Yes. Modules passed in a course or Postgraduate Diploma in the same area are recognised in the advanced programme. Check the recognition policy when you enrol.
Related programmes
Course in Brake Testing on Roller Brake Testers
Online 300-hour course in brake testing on roller brake testers. 6 modules covering UN Regulation R13 (braking of heavy vehicles), UN Regulation R13-H (braking of passenger…
Maritime RAMS and IMO Regulations Course
Online 300-hour course in maritime RAMS and IMO regulations. 6 modules covering the SOLAS Convention, ISM Code and DNV Phast. Assigned tutor and open enrolment.
Course on Dataset Auditing for the AI Act in Mobility
Online 300-hour course in dataset auditing for the AI Act in mobility. 6 modules covering Regulation (EU) 2024/1689 (Artificial Intelligence Act), ISO/IEC 5259 (data quality for…
More in Regulation, Safety, RAMS & Homologation
All Regulation, Safety, RAMS & Homologation programmes → · How to apply · Fees & financing · Scholarships