Cybersecurity Course in Urban Infrastructures
Online course of 300 hours in urban infrastructure cybersecurity: 6 modules covering IEC 62443, the NIS2 Directive and the Spanish National Security Framework (ENS) applied to real cases, with an assigned technical tutor.
Cybersecurity Course in Urban Infrastructures — studying from the United Kingdom
Civil and infrastructure engineering is a major employment sector in the United Kingdom, with significant activity in transport, water, energy and urban regeneration. Rail projects such as HS2 and ongoing network upgrades by Network Rail create demand for engineers in track, signalling, structures and systems. Smart city initiatives in cities including Manchester, Glasgow and Milton Keynes apply digital technologies to mobility, utilities and public services. Major contractors and consultancies including Balfour Beatty, Arup and AECOM employ civil and rail professionals across the country.
Fees for the United Kingdom: £664 (Pound sterling), with instalments and employer sponsorship available.
Relevant bodies in the United Kingdom
Typical roles
Questions from the United Kingdom
Which UK professional bodies are relevant to civil and rail engineering qualifications?
The Institution of Civil Engineers (ICE), the Institution of Engineering and Technology (IET) and, for rail, bodies such as the Permanent Way Institution and the Institution of Railway Signal Engineers are relevant in the UK. Chartered status is handled through the Engineering Council. SEIUM's qualifications are private and not accredited by these bodies, so you should confirm with ICE or the relevant institution how your study would be treated.
Do UK civil, rail and smart city employers recognise online private qualifications?
UK infrastructure employers, including consultancies, contractors, rail operators and local authorities, generally recruit based on competence, professional registration and project experience. A private qualification can add to your profile, but employers decide its relevance. Practical experience and progress towards professional registration usually carry more weight.
How does online study fit with a UK working schedule, and what about funding?
Online study lets you keep working in the UK, and no student visa is needed to study from home. Fees are payable in instalments, and some employers support job-related training, which is common practice in general terms but varies by employer. Each programme has a defined number of hours and an assigned technical tutor. Review the hours and funding options before enrolling.
Take the controls.
Run a real engineering trade-off from this field. Move the sliders, watch the model react in real time and beat the challenge.
What you will be able to do
Identify the attack surface of connected urban infrastructure.
Interpret the obligations under NIS2, CER, the ENS and Law 8/2011.
Apply the IEC 62443 series to the segmentation of urban control systems.
Assess the security of IoT devices and municipal platforms.
Carry out risk analyses using recognised methodologies.
Plan response and continuity in the event of cyber incidents.
Design a cybersecurity plan for a critical urban infrastructure.
Who it's for
- Municipal cybersecurity managers responsible for protecting city services.
- OT security engineers working on water, energy or traffic control systems.
- SOC analysts who need to monitor industrial and urban networks.
- Cybersecurity auditors reviewing public operators and utilities.
- Regulatory compliance consultants advising on NIS2, CER and the ENS.
- IoT security technicians deploying sensors and platforms in the public realm.
- Engineering or science graduates looking to move into local government.
What you'll work with
- IEC 62443 (security for industrial automation and control systems)
- Directive (EU) 2022/2555 (NIS2) (cybersecurity of essential and important entities)
- Royal Decree 311/2022 (ENS) (Spanish National Security Framework)
- Directive (EU) 2022/2557 (CER) (resilience of critical entities)
- Law 8/2011 (protection of critical infrastructure in Spain)
- ISO/IEC 27001 (information security management systems)
- ETSI EN 303 645 (cybersecurity baseline for consumer IoT)
- Regulation (EU) 2024/2847 (Cyber Resilience Act) (security requirements for products with digital elements)
- Wireshark
- Nozomi Guardian
- PILAR
- Wazuh
- Nmap
6 modules
1.1Critical infrastructure and local essential services1.2IT/OT convergence in urban services1.3Assets: water SCADA, traffic lights, street lighting1.4IoT devices on the public highway1.5Threat actors and motivations1.6Real incidents in cities and utilities1.7Taxonomy of attacks on control systems1.8Dependencies and cascading impact1.9NIST CSF 2.0 cybersecurity framework1.10Case study: critical asset map of a city
2.1NIS2 Directive and essential entities2.2CER Directive on the resilience of critical entities2.3Law 8/2011 on the protection of critical infrastructure2.4National Security Framework (ENS)2.5Cyber Resilience Act2.6Incident notification to CCN-CERT and INCIBE-CERT2.7Management responsibilities2.8Public procurement requirements2.9Supervision and penalty regime2.10Workshop: analysis of NIS2 applicability to an operator
3.1IEC 62443 series: structure and roles3.2Zones, conduits and security levels3.3OT network segmentation3.4Industrial protocols: Modbus, DNP3, BACnet3.5Secure remote access3.6Patch management in legacy systems3.7Passive monitoring of OT networks3.8Physical security of cabinets and facilities3.9Hardening of controllers and RTUs3.10Lab: segmentation of a remote control network
4.1ETSI EN 303 645 requirements4.2Secure boot and signed updates4.3Credential management and PKI4.4Encryption in LoRaWAN and NB-IoT4.5Security of APIs and brokers4.6Municipal cloud security4.7Anomaly detection in telemetry4.8Ethical penetration testing in IoT4.9Supply chain and SBOM4.10Practical exercise: security review of an urban sensor
5.1Risk analysis with MAGERIT5.2Risk assessment according to IEC 62443-3-25.3Service continuity plans5.4Security operations centres5.5Incident response in OT environments5.6Cyber incident exercises and drills5.7Cyber insurance and risk transfer5.8Awareness training for municipal staff5.9Cybersecurity maturity indicators5.10Case study: ransomware drill in a water service
6.1Selection of the urban infrastructure6.2Inventory of assets and flows6.3Threat and risk analysis6.4Design of zones and conduits6.5Technical and organisational measures6.6Incident response plan6.7Regulatory compliance requirements6.8Implementation plan and budget6.9Report and presentation6.10Final project: final review with the tutor
How you'll learn
100% online training on the SEIUM campus, with downloadable material, recorded classes and an assigned technical tutor. No fixed timetables: you progress at your own pace within the intake, making it compatible with work.
Each module combines theory, guided reading of the original standard and applied exercises. The working software is Wireshark, Nozomi Guardian, PILAR, Wazuh and Nmap, in free, academic or evaluation versions. Real procedures are studied: risk analysis of an urban remote control system, OT network segmentation according to IEC 62443 and an incident response drill in an essential service. Assessment is continuous by module plus the final integrating project.
Standards covered: IEC 62443, Directive (EU) 2022/2555 (NIS2), Royal Decree 311/2022 (ENS), Directive (EU) 2022/2557 (CER), Law 8/2011, ISO/IEC 27001, ETSI EN 303 645, Regulation (EU) 2024/2847 (Cyber Resilience Act).
Build it end to end
Your final project follows the real engineering workflow, step by step, reviewed by your tutor.
Where this takes you
Requirements
- No prior qualification is required.
- Internet connection and a computer capable of running the programme software.
- English sufficient to read technical standards.
Ready to start?
Send your application today. Our admissions team replies within 72 hours with your study plan and funding options.
Frequently asked questions
The programme totals 300 hours over 3 months. You set your own pace within each intake, and your tutor helps you plan the workload around your job.
You work with Wireshark, Nozomi Guardian, PILAR, Wazuh and Nmap, using free, academic or evaluation versions. Your tutor indicates the free alternative wherever one exists.
A SEIUM Institute certificate, awarded on passing the continuous assessment and the final project. It is SEIUM's own qualification, not an official state degree; its recognition depends on the programme completed and the regulations of each country.
Yes. Modules passed are recognised in a higher programme in the same area (postgraduate diploma or master's). Ask about the recognition policy when you enrol.
No prior qualification is required; you need a computer able to run the programme software and English sufficient to read technical standards.
Start dates are set by SEIUM's faculty for each intake. Our admissions team will confirm the next available date when you apply.
Related programmes
KPIs in Smart Cities and Impact Measurement Course
Online course of 300 hours in smart city KPIs and impact measurement: 6 modules covering urban measurement, standardised indicator systems (ISO 37120, ISO 37122, ISO 37123),…
Introduction to Smart Cities and their Technological Ecosystem Course
Online course of 300 hours introducing smart cities and their technology ecosystem, structured in 6 modules covering the city as a complex system, the reference technology…
Course in Environmental Impact in Urban Ports
Online 300-hour course in Environmental Impact in Urban Ports. 6 modules covering Law 21/2013 on environmental assessment, Directive 2011/92/UE, environmental impact assessment of projects and AERMOD.…
More in Civil, Rail & Smart Cities
All Civil, Rail & Smart Cities programmes → · How to apply · Fees & financing · Scholarships