ISO/IEC 15408 (Common Criteria) Course in Defence
Online 300-hour course in ISO/IEC 15408 (Common Criteria) in defence. 6 modules covering ISO/IEC 15408-1 (common criteria: introduction and model), ISO/IEC 15408-3 (assurance requirements) and IBM Engineering Requirements Management DOORS. Assigned tutor and open enrolment.
ISO/IEC 15408 (Common Criteria) Course in Defence — studying from the United Kingdom
The United Kingdom maintains a substantial defence industry, with prime contractors such as BAE Systems and Babcock, and a wide supply chain across the Midlands, the North West, Bristol and Scotland. Land systems, armoured vehicles, munitions and military engineering programmes provide long-term employment for engineers in design, integration, test and sustainment. The Ministry of Defence, Defence Equipment and Support and the Defence Science and Technology Laboratory oversee procurement and research. Security clearance requirements shape recruitment, and professional standards are maintained through UK defence engineering frameworks.
Fees for the United Kingdom: £373 (Pound sterling), with instalments and employer sponsorship available.
Relevant bodies in the United Kingdom
Typical roles
Questions from the United Kingdom
Which UK bodies and regulators are relevant to defence and military land systems engineering?
In the UK, the Ministry of Defence sets its own engineering standards and the Engineering Council regulates professional registration. Professional bodies such as the Institution of Mechanical Engineers (IMechE) and the Royal Engineers' professional structures are relevant. SEIUM's qualifications are private and not accredited by these bodies, so recognition for security-cleared or MOD roles is decided by the employer and the relevant authority.
Will a private qualification help with UK defence industry careers?
UK defence employers, including primes and suppliers, often prioritise security clearance eligibility, relevant experience and formal qualifications recognised by the MOD or industry bodies. A private qualification may support your profile but is unlikely to replace these requirements. Ask prospective employers how they would assess it before enrolling.
Is it practical to study this online while working in the UK, and what about language and funding?
Online study means you can continue working in the UK, and no student visa is needed to study from home. Teaching is in English, so good technical English is essential. Fees can be paid in instalments, and some employers offer training sponsorship, though policies vary. Each programme has a fixed number of hours and an assigned technical tutor. Confirm the workload and costs before enrolling.
Take the controls.
Run a real engineering trade-off from this field. Move the sliders, watch the model react in real time and beat the challenge.
What you will be able to do
Explain the evaluation model of the common criteria.
Define the target of evaluation and write a security target.
Select functional requirements suited to the security problem.
Prepare the developer's assurance evidence.
Describe the evaluation and certification process within a national and European scheme.
Plan the maintenance of a certificate.
Prepare a complete evaluation file.
Who it's for
- Common criteria evaluator looking to specialise in ISO/IEC 15408 (Common Criteria) in defence.
- Security certification consultant looking to specialise in ISO/IEC 15408 (Common Criteria) in defence.
- Product security engineer looking to specialise in ISO/IEC 15408 (Common Criteria) in defence.
- Certification manager looking to specialise in ISO/IEC 15408 (Common Criteria) in defence.
- ICT security auditor looking to specialise in ISO/IEC 15408 (Common Criteria) in defence.
- Vulnerability analyst looking to specialise in ISO/IEC 15408 (Common Criteria) in defence.
- Graduates in engineering or science seeking to enter the defence industry.
What you'll work with
- ISO/IEC 15408-1 (common criteria: introduction and model)
- ISO/IEC 15408-3 (assurance requirements)
- ISO/IEC 18045 (evaluation methodology)
- Implementing Regulation (EU) 2024/482 (EUCC scheme)
- CCRA Arrangement (mutual recognition of certificates)
- ISO/IEC TR 15446 (guidance on protection profiles)
- ISO/IEC 17025 (evaluation laboratories)
6 modules · 300 h
1.1Origin and purpose of the common criteria scheme1.2International mutual recognition and its arrangements1.3Actors: sponsor, developer, laboratory and certification body1.4National evaluation and certification scheme1.5What an evaluation does and does not certify1.6Relationship with other certification schemes1.7Cost, timelines and realistic planning1.8Scheme vocabulary and acronyms1.9Normative documents of the family1.10Exercise: deciding whether a product fits the scheme
2.1Defining the target of evaluation2.2Operational environment and assumptions2.3Threats and organisational security policies2.4Security objectives for the target and its environment2.5Rationale for the objectives against the threats2.6Security functional requirements and their selection2.7Assurance requirements and levels2.8Protection profiles and conformance to them2.9Target summary and specification of functions2.10Practice: writing a security target
3.1Identification and authentication3.2Access control and information flow3.3Security audit and logging3.4Cryptographic support3.5Protection of user data3.6Protection of security functions3.7Security management and roles3.8Communication and trusted channels3.9Privacy and anonymity3.10Practice: selecting functional components for a case
4.1Assurance classes and their content4.2Design documentation by level4.3Functional representation and interfaces4.4Security architecture design4.5Configuration management and delivery4.6Operational and preparative guidance4.7Developer testing and its coverage4.8Vulnerability analysis and attack resistance4.9Development lifecycle and its measurement4.10Practice: drawing up the list of deliverables for a level
5.1Common evaluation methodology5.2Planning and entry into evaluation5.3Evaluator activities by class5.4Independent and penetration testing5.5Technical reports and observations5.6Issuing the certificate and its scope5.7Certificate maintenance and minor changes5.8Recertification and new versions5.9Use of the certificate in public procurement5.10Practice: project plan for a certification
6.1Choice of product and market6.2Defining the target of evaluation6.3Threat and objective analysis6.4Complete security target6.5Selection of functional and level requirements6.6Deliverables and evidence plan6.7Evaluation plan and schedule6.8Cost and return analysis6.9Project report6.10Project defence
How you'll learn
100% online training on the SEIUM campus, with downloadable material, recorded classes and an assigned technical tutor. No fixed timetable: students progress at their own pace within the intake, which makes it compatible with work.
Each module combines theory, guided reading of the original standard and applied exercises. The working software is IBM Engineering Requirements Management DOORS, Ghidra, Coverity, Jira, in free, academic or evaluation versions. Practical work is based on real procedures for writing security targets, evaluations in accredited laboratories and reviews of developer evidence. Assessment is continuous per module plus the final integrative project.
Build it end to end
Your final project follows the real engineering workflow, step by step, reviewed by your tutor.
Explain the evaluation model of the common criteria.
Define the target of evaluation and write a security target.
Select functional requirements suited to the security problem.
Prepare the developer's assurance evidence.
Describe the evaluation and certification process within a national and European scheme.
Where this takes you
Requirements
- No prior degree is required.
- Internet connection and a computer capable of running the programme's software.
- Level of Spanish sufficient to follow the reading of technical regulations.
Ready to start?
Send your application today. Our admissions team replies within 72 hours with your study plan and funding options.
Frequently asked questions
The programme consists of 300 hours in total, spread over 3 to 5 months. That is between 10 and 15 hours a week on average, compatible with a full-time job.
You will work with IBM Engineering Requirements Management DOORS, Ghidra, Coverity, Jira. Free, academic or evaluation versions are used, and the tutor indicates the free alternative where one exists.
An in-house SEIUM diploma, awarded on passing the continuous assessment and the integrative project. It is in-house training, not an official Ministry qualification.
Yes. Modules passed in a course or postgraduate diploma in the same area can be credited towards the advanced programme. Check the credit transfer policy when you enrol.
Related programmes
Course in Environmental Impact Assessment in CBRN Areas
Online 300-hour course in environmental impact assessment in CBRN areas. 6 modules covering Directive 2011/92/EU (environmental impact assessment), Law 21/2013 on environmental assessment and RESRAD (Argonne).…
Course in International Law and Weapons of Mass Destruction
Online 300-hour course in international law and weapons of mass destruction. 6 modules covering the Treaty on the Non-Proliferation of Nuclear Weapons (1968), the Chemical Weapons…
Course in NATO Interoperability Standards for SATCOM
Online course of 300 h in NATO interoperability standards for SATCOM. 6 modules covering STANAG 4484 (military SATCOM in SHF), MIL-STD-188-164 (SATCOM terminals in SHF) and…
More in Defense, Military Engineering & Land Systems
All Defense, Military Engineering & Land Systems programmes → · How to apply · Fees & financing · Scholarships