Ethics in Simulated Cyber Attacks Course
Online 300-hour course in ethics in simulated cyber attacks. 6 modules covering NIST SP 800-84 (test, training and exercise programmes), NIST SP 800-115 (technical guide to security testing) and MITRE ATT&CK Navigator. Assigned tutor and open enrolment.
Ethics in Simulated Cyber Attacks Course — studying from the United Kingdom
The United Kingdom maintains a substantial defence industry, with prime contractors such as BAE Systems and Babcock, and a wide supply chain across the Midlands, the North West, Bristol and Scotland. Land systems, armoured vehicles, munitions and military engineering programmes provide long-term employment for engineers in design, integration, test and sustainment. The Ministry of Defence, Defence Equipment and Support and the Defence Science and Technology Laboratory oversee procurement and research. Security clearance requirements shape recruitment, and professional standards are maintained through UK defence engineering frameworks.
Fees for the United Kingdom: £537 (Pound sterling), with instalments and employer sponsorship available.
Relevant bodies in the United Kingdom
Typical roles
Questions from the United Kingdom
Which UK bodies and regulators are relevant to defence and military land systems engineering?
In the UK, the Ministry of Defence sets its own engineering standards and the Engineering Council regulates professional registration. Professional bodies such as the Institution of Mechanical Engineers (IMechE) and the Royal Engineers' professional structures are relevant. SEIUM's qualifications are private and not accredited by these bodies, so recognition for security-cleared or MOD roles is decided by the employer and the relevant authority.
Will a private qualification help with UK defence industry careers?
UK defence employers, including primes and suppliers, often prioritise security clearance eligibility, relevant experience and formal qualifications recognised by the MOD or industry bodies. A private qualification may support your profile but is unlikely to replace these requirements. Ask prospective employers how they would assess it before enrolling.
Is it practical to study this online while working in the UK, and what about language and funding?
Online study means you can continue working in the UK, and no student visa is needed to study from home. Teaching is in English, so good technical English is essential. Fees can be paid in instalments, and some employers offer training sponsorship, though policies vary. Each programme has a fixed number of hours and an assigned technical tutor. Confirm the workload and costs before enrolling.
Take the controls.
Run a real engineering trade-off from this field. Move the sliders, watch the model react in real time and beat the challenge.
What you will be able to do
Explain the purpose and types of cybersecurity exercises.
Define authorisation, scope and rules of engagement for an exercise.
Analyse the ethical dilemmas of simulated attacks.
Apply measures to protect third-party data and systems during the exercise.
Conduct exercises safely and proportionately.
Produce reports that support organisational learning.
Design a cybersecurity exercise with its ethical and legal framework.
Who it's for
- Cybersecurity exercise coordinators who want to specialise in Ethics in Simulated Cyber Attacks.
- Ethical red team leads who want to specialise in Ethics in Simulated Cyber Attacks.
- Cybersecurity risk managers who want to specialise in Ethics in Simulated Cyber Attacks.
- Security auditors who want to specialise in Ethics in Simulated Cyber Attacks.
- Legal advisers in cybersecurity who want to specialise in Ethics in Simulated Cyber Attacks.
- Cybersecurity trainers who want to specialise in Ethics in Simulated Cyber Attacks.
- Engineering or science graduates looking to enter cybersecurity.
What you'll work with
- NIST SP 800-84 (test, training and exercise programmes)
- NIST SP 800-115 (technical guide to security testing)
- TIBER-EU Framework (threat-led penetration testing)
- ISO 22398 (guidelines for exercises)
- Regulation (EU) 2022/2554 (DORA)
- Budapest Convention on Cybercrime (2001)
- Spanish Criminal Code, Article 197 bis (unlawful access to systems)
6 modules · 300 h
1.1Types of exercise: tabletop, functional and technical1.2Vulnerability assessment and authorised penetration testing1.3Red, blue and purple team exercises1.4Legitimate objectives of an exercise1.5What an exercise is not, and where the limit lies1.6Legal framework: authorisation and its requirements1.7Computer crimes and grounds for exclusion1.8Recognised standards and methodological guides1.9Field vocabulary1.10Exercise: define the purpose of an exercise
2.1Authorisation document and its signatories2.2Precise definition of scope2.3Excluded assets and critical systems2.4Time windows and schedules2.5Rules of engagement and escalation2.6Criteria for immediate halt2.7Communication with informed staff2.8Affected third parties: cloud, suppliers and customers2.9Insurance and liability for damage2.10Practice: draft the rules of engagement for an exercise
3.1Deceiving staff and its justification3.2Social engineering and respect for the individual3.3Personal data found during the exercise3.4Findings outside the scope3.5Discovery of irregular conduct3.6Risk of collateral damage to the service3.7Client pressure for spectacular results3.8Publication of results and reputation3.9Disclosure of vulnerabilities to third parties3.10Debate: three cases with blurred boundaries
4.1Planning and risk management of the exercise4.2Test environment versus production environment4.3Logging of all actions performed4.4Custody and encryption of evidence4.5Minimising access to real data4.6Handling of obtained credentials4.7Clean-up of the environment at completion4.8Real-time communication of critical findings4.9Coordination with the defending team4.10Practice: plan the conduct of an exercise
5.1Report structure and its audience5.2Prioritisation of findings by risk5.3Actionable recommendations5.4Closing meeting and just culture5.5Avoiding blame of staff5.6Monitoring remediation5.7Continuous programme versus one-off exercise5.8Contracting services and key clauses5.9Team competence and certification5.10Practice: write the report on a finding
6.1Choice of organisation and objective6.2Analysis of the applicable legal framework6.3Authorisation document and scope6.4Rules of engagement and halt criteria6.5Analysis of foreseeable dilemmas6.6Evidence and data management plan6.7Reporting and follow-up plan6.8Team code of conduct6.9Plan report6.10Project defence
How you'll learn
Fully 100 % online training on the SEIUM campus, with downloadable material, recorded classes and an assigned technical tutor. No fixed timetables: students progress at their own pace within the intake, which makes it possible to combine study with work.
Each module combines theory, guided reading of the original standard and applied exercises. The working software is MITRE ATT&CK Navigator, Wireshark, Microsoft Project, Advanced Excel, in free, academic or evaluation versions. Case studies cover tabletop cybersecurity exercise procedures, drafting rules of engagement for exercises, and reviews of post-exercise reports. Assessment is continuous by module, plus the final integrative project.
Build it end to end
Your final project follows the real engineering workflow, step by step, reviewed by your tutor.
Explain the purpose and types of cybersecurity exercises.
Define authorisation, scope and rules of engagement for an exercise.
Analyse the ethical dilemmas of simulated attacks.
Apply measures to protect third-party data and systems during the exercise.
Conduct exercises safely and proportionately.
Where this takes you
Requirements
- No previous degree is required.
- Internet connection and a computer capable of running the programme's software.
- Sufficient Spanish to follow technical regulatory texts.
Ready to start?
Send your application today. Our admissions team replies within 72 hours with your study plan and funding options.
Frequently asked questions
The programme comprises 300 hours in total, spread over 3 to 5 months. That is an average of 10 to 15 hours per week, compatible with a full-time job.
You work with MITRE ATT&CK Navigator, Wireshark, Microsoft Project and Advanced Excel. Free, academic or evaluation versions are used, and the tutor indicates the free alternative where one exists.
An SEIUM own diploma on passing the continuous assessment and the integrative project. It is in-house training, not an official Ministry title.
Yes. Modules passed in a course or postgraduate diploma in the same area are credited towards the advanced programme. Check the credit transfer policy when you enrol.
Related programmes
Digitalisation in Shipyards and Defence Factories Course
300-hour online course in digitalisation in shipyards and defence factories. 6 modules covering ISO 23247 (digital twin framework for manufacturing), IEC 62264 (ISA-95) and FORAN. Assigned…
ISO Course in Air Conditioning for Military Bases
Online 300 h Course in ISO in air conditioning for military bases. 6 modules covering RITE (Real Decreto 1027/2007), EN 16798-1 (indoor environment parameters) and EnergyPlus.…
Course in Ethics in CBRN Sensor Development
Online 300-hour course in ethics in CBRN sensor development. 6 modules covering the Chemical Weapons Convention (1993), the Biological and Toxin Weapons Convention (1972) and MATLAB.…
More in Defense, Military Engineering & Land Systems
All Defense, Military Engineering & Land Systems programmes → · How to apply · Fees & financing · Scholarships