International Encryption Regulation Course
Online 300 h course in international encryption regulation. 6 modules covering the Wassenaar Arrangement (category 5, part 2), Regulation (EU) 2021/821 (dual-use product control) and OpenSSL. Assigned tutor and open enrolment.
International Encryption Regulation Course — studying from the United Kingdom
The United Kingdom maintains a substantial defence industry, with prime contractors such as BAE Systems and Babcock, and a wide supply chain across the Midlands, the North West, Bristol and Scotland. Land systems, armoured vehicles, munitions and military engineering programmes provide long-term employment for engineers in design, integration, test and sustainment. The Ministry of Defence, Defence Equipment and Support and the Defence Science and Technology Laboratory oversee procurement and research. Security clearance requirements shape recruitment, and professional standards are maintained through UK defence engineering frameworks.
Fees for the United Kingdom: £455 (Pound sterling), with instalments and employer sponsorship available.
Relevant bodies in the United Kingdom
Typical roles
Questions from the United Kingdom
Which UK bodies and regulators are relevant to defence and military land systems engineering?
In the UK, the Ministry of Defence sets its own engineering standards and the Engineering Council regulates professional registration. Professional bodies such as the Institution of Mechanical Engineers (IMechE) and the Royal Engineers' professional structures are relevant. SEIUM's qualifications are private and not accredited by these bodies, so recognition for security-cleared or MOD roles is decided by the employer and the relevant authority.
Will a private qualification help with UK defence industry careers?
UK defence employers, including primes and suppliers, often prioritise security clearance eligibility, relevant experience and formal qualifications recognised by the MOD or industry bodies. A private qualification may support your profile but is unlikely to replace these requirements. Ask prospective employers how they would assess it before enrolling.
Is it practical to study this online while working in the UK, and what about language and funding?
Online study means you can continue working in the UK, and no student visa is needed to study from home. Teaching is in English, so good technical English is essential. Fees can be paid in instalments, and some employers offer training sponsorship, though policies vary. Each programme has a fixed number of hours and an assigned technical tutor. Confirm the workload and costs before enrolling.
Take the controls.
Run a real engineering trade-off from this field. Move the sliders, watch the model react in real time and beat the challenge.
What you will be able to do
Understand why cryptography is subject to international regulation.
Analyse the export controls of Wassenaar, the EU and the United States.
Evaluate lawful access proposals and their impact on security.
Apply sector-specific cryptographic requirements of the GDPR, eIDAS and PCI DSS.
Plan the transition to standardised post-quantum algorithms.
Assess the tensions between security, privacy and public policy.
Prepare a cryptographic compliance report for an organisation.
Who it's for
- Cryptography regulation consultant who wants to specialise in international encryption regulation.
- Cybersecurity compliance manager who wants to specialise in international encryption regulation.
- Cryptographic security architect who wants to specialise in international encryption regulation.
- Technology policy analyst who wants to specialise in international encryption regulation.
- Legal adviser in digital law who wants to specialise in international encryption regulation.
- Post-quantum migration manager who wants to specialise in international encryption regulation.
- Engineering or science graduates seeking to enter banking and payment systems.
What you'll work with
- Wassenaar Arrangement (category 5, part 2)
- Regulation (EU) 2021/821 (dual-use product control)
- Export Administration Regulations (15 CFR 730-774)
- Regulation (EU) 910/2014 (eIDAS) and Regulation (EU) 2024/1183
- Regulation (EU) 2016/679 (GDPR), Article 32
- FIPS 203 (ML-KEM, post-quantum cryptography)
- PCI DSS v4.0 (payment card data security)
6 modules · 300 h
1.1Why states regulate cryptography1.2History: from classified material to common technology1.3Strong cryptography and its current availability1.4Conflicting interests: security, trade and privacy1.5Actors: states, industry, academia and civil society1.6Minimum technical vocabulary required1.7International overview of regulatory approaches1.8Regulatory sources and how to monitor them1.9Common myths in public debate1.10Exercise: mapping the interests in a debate
2.1Multilateral regimes and control lists2.2Classification of products containing cryptography2.3Exemptions for mass-market software2.4Common authorisations and licences2.5Intangible transfers and publication of source code2.6Academic research and its exclusion2.7US legislation and its extraterritorial scope2.8European dual-use regulation2.9Common infringements in technology companies2.10Practice: classifying a product containing cryptography
3.1Interception obligations imposed on operators3.2Technical assistance orders to manufacturers3.3End-to-end encryption and its effect3.4Proposals for exceptional access and their variants3.5Key escrow and its history3.6Client-side scanning and the debate around it3.7Position of the technical community3.8Systemic risks of exceptional access3.9Decryption obligations placed on users3.10Debate: evaluating a specific proposal
4.1Data protection and encryption as a security measure4.2Encryption obligations in regulated sectors4.3Certification of cryptographic products4.4Electronic signature and digital identity rules4.5Evidential validity of encrypted and signed documents4.6Cryptocurrencies and their regulatory framework4.7Applicable telecommunications regulation4.8Requirements in public procurement4.9Technological sovereignty and national cryptography4.10Practice: mapping an organisation's obligations
5.1Crypto-agility and managing obsolescence5.2Standardisation of post-quantum cryptography5.3Regulatory migration deadlines5.4Cryptographic inventory of an organisation5.5Harvest now, decrypt later risk5.6International cooperation on standardisation5.7The role of open research5.8Responsible disclosure of weaknesses5.9Foreseeable regulatory agenda5.10Practice: migration and compliance plan
6.1Choosing the organisation or policy6.2Inventory of cryptographic uses6.3Product classification and export obligations6.4Analysis of the applicable regulatory framework6.5Analysis of the lawful access debate and its impact6.6Compliance and certification plan6.7Cryptographic migration plan6.8Reasoned position on a regulatory proposal6.9Analysis report6.10Project defence
How you'll learn
Fully 100 % online training on the SEIUM campus, with downloadable material, recorded classes and an assigned technical tutor. No fixed timetables: students progress at their own pace within the intake, which makes it possible to combine it with work.
Each module combines theory, guided reading of the original standard and applied exercises. The working software is OpenSSL, CrypTool 2, Python (cryptography), Wireshark, in free, academic or evaluation versions. The case studies draw on real procedures: comparative analysis of national legislation, cryptographic inventories for post-quantum migration, and sector compliance audits. Assessment is continuous per module plus the final integrative project.
Build it end to end
Your final project follows the real engineering workflow, step by step, reviewed by your tutor.
Understand why cryptography is subject to international regulation.
Analyse the export controls of Wassenaar, the EU and the United States.
Evaluate lawful access proposals and their impact on security.
Apply sector-specific cryptographic requirements of the GDPR, eIDAS and PCI DSS.
Plan the transition to standardised post-quantum algorithms.
Where this takes you
Requirements
- No prior degree is required.
- Internet connection and a computer capable of running the programme's software.
- Sufficient level of Spanish to follow technical regulatory texts.
Ready to start?
Send your application today. Our admissions team replies within 72 hours with your study plan and funding options.
Frequently asked questions
The programme totals 300 hours spread over 3 to 5 months. That is an average of 10 to 15 hours a week, compatible with a full-time job.
The course uses OpenSSL, CrypTool 2, Python (cryptography), Wireshark. Free, academic or evaluation versions are used, and the tutor indicates the free alternative where one exists.
An own diploma from SEIUM upon passing the continuous assessment and the integrative project. It is in-house training, not an official qualification from the Ministry.
Yes. Modules passed in a course or postgraduate diploma in the same area are recognised in the advanced programme. Check the recognition policy when you enrol.
Related programmes
Course in Ethics in the Development of Rotor Drones
Online 300 h course in ethics in the development of rotor drones. 6 modules with Delegated Regulation (EU) 2019/945 (UAS classes), Implementing Regulation (EU) 2019/947 and…
Course in Ethics in Infrastructure Testing
Online 300-hour course in ethics in infrastructure testing. 6 modules covering ISO 13822 (assessment of existing structures), EN 1990 (Eurocode: basis of structural design) and SAP2000.…
Course in Ethics in AI for Cyber Defence
Online course of 300 hours in AI ethics for cyber defence. 6 modules covering AI in cyber defence, international law and cyber operations, risks of defensive…
More in Defense, Military Engineering & Land Systems
All Defense, Military Engineering & Land Systems programmes → · How to apply · Fees & financing · Scholarships