Master’s in Cybersecurity for Energy Systems (NIS2/NERC CIP)
Online master's programme of 1,900 hours in cybersecurity for energy systems (NIS2/NERC CIP) — CSMS, OT SOC and incident response. 12 modules covering energy systems as critical infrastructure, the NIS2 Directive, NERC CIP, the network code on cybersecurity, substation and telecontrol security, renewables and DER, risk management, detection and response, supply chain, and governance and compliance, with Directive (EU) 2022/2555 (NIS2), NERC CIP-005-7 and Delegated Regulation (EU) 2024/1366 and an assigned technical tutor.
Master’s in Cybersecurity for Energy Systems (NIS2/NERC CIP) — studying from the United Kingdom
Energy engineering in the United Kingdom spans offshore wind, nuclear, gas, grid infrastructure and energy storage, with regional hubs in Aberdeen, Teesside, Humberside and the South West. The transition to net zero drives investment in transmission and distribution networks, renewable generation and digital grid management. Operators such as National Grid, SSE and Scottish Power employ engineers in planning, operations and asset management. The energy regulator Ofgem and the National Energy System Operator shape market rules and system planning.
Fees for the United Kingdom: £4,930 (Pound sterling), with instalments and employer sponsorship available.
Relevant bodies in the United Kingdom
Typical roles
Questions from the United Kingdom
Which UK bodies are relevant to energy and networks engineering qualifications?
In the UK, the Institution of Engineering and Technology (IET) and the Energy Institute are the main professional bodies for energy and networks, and the Engineering Council handles chartered registration. Regulation of the sector is by Ofgem and the National Energy System Operator. SEIUM's qualifications are private and not accredited by these bodies, so recognition is for the relevant body and employers to decide.
Do UK energy and network operators value private online qualifications?
UK energy utilities, network operators and grid contractors typically hire on the basis of competence, safety training, professional registration and project experience. A private qualification may support your profile, but its relevance is decided by each employer. Demonstrated practical work and progress towards professional registration usually matter most.
How does online study fit a UK working life, and what about funding?
Programmes are fully online, so you can study around your UK job and no student visa is needed to study from home. Teaching is in English, and an assigned technical tutor supports your progress. Fees are payable in instalments, and some employers sponsor job-related training, which varies by employer. Check the programme hours and funding options before enrolling.
Take the controls.
Run a real engineering trade-off from this field. Move the sliders, watch the model react in real time and beat the challenge.
What you will be able to do
Understand the threats to energy systems.
Apply NIS2 requirements in the energy sector.
Implement NERC CIP standards.
Apply the European network code on cybersecurity.
Protect substations and telecontrol systems.
Manage cyber risk in the energy sector.
Organise incident detection and response.
Who it's for
- Energy sector cybersecurity managers.
- Energy SOC analysts.
- NERC CIP auditors.
- NIS2 consultants.
- Substation security engineers.
- OT security architects.
- Engineering or science graduates seeking to enter electricity transmission.
What you'll work with
- Directive (EU) 2022/2555 — NIS2 (high common level of cybersecurity across the EU)
- NERC CIP-005-7 (electronic security perimeters)
- Delegated Regulation (EU) 2024/1366 (network code on cybersecurity for cross-border electricity flows)
- IEC 62351 (security for power system communication protocols)
- ISO/IEC 27019 (information security controls for the energy utility industry)
- IEC 62443-3-3 (system security requirements and security levels)
- NERC CIP-007-6 (systems security management)
- Spanish Law 8/2011 (protection of critical infrastructure)
- Wireshark
- Dragos Platform
- Splunk
- Nozomi Networks
- Zeek
12 modules
1.1Architecture of the power system1.2Energy control systems1.3EMS, DMS and SCADA1.4Digital substations and automation1.5Grid-connected distributed generation1.6Control centres1.7Interdependencies with telecommunications1.8The 2015 and 2016 Ukraine incidents1.9Threat landscape1.10Case study: critical asset map of a utility
2.1Scope and essential entities2.2Risk management measures2.3Incident notification2.4Management body accountability2.5Supply chain2.6Supervision and penalties2.7Transposition in Spain2.8Relationship with other regulations2.9Practical implementation in a utility2.10Workshop: NIS2 gap analysis
3.1The North American regulatory framework3.2Asset categorisation (CIP-002)3.3Security management controls (CIP-003)3.4Personnel and training (CIP-004)3.5Electronic security perimeters (CIP-005)3.6Physical security (CIP-006)3.7Systems security management (CIP-007)3.8Incident response (CIP-008)3.9Recovery plans (CIP-009)3.10Practical exercise: CIP-002 asset categorisation
4.1Delegated Regulation (EU) 2024/13664.2EU-wide risk assessment4.3High-impact critical functions4.4Minimum and advanced controls4.5Supplier management4.6Relationship with NIS24.7Application timelines4.8Implications for operators4.9Supervision by competent authorities4.10Case study: impact on a distribution system operator
5.1IEC 61850 and its vulnerabilities5.2IEC 62351 for security5.3Protection of GOOSE and SV5.4Security of protection relays5.5IED access management5.6Secure time synchronisation5.7Substation network segmentation5.8Substation monitoring5.9Secure equipment maintenance5.10Lab: GOOSE traffic analysis
6.1Secure IEC 60870-5-1046.2DNP3 Secure Authentication6.3Communications with RTUs6.4Utility communication networks6.5Communications encryption6.6Certificate management6.7Remote maintenance access6.8Suppliers and maintenance6.9Security testing6.10Practical exercise: secure IEC 104 configuration
7.1Grid-connected renewable plants7.2Inverters and their cybersecurity7.3Power plant controllers7.4Resource aggregators7.5Charging points7.6Smart meter security7.7Systemic risks of DER7.8Requirements for manufacturers7.9Monitoring of distributed resources7.10Case study: threats to an inverter fleet
8.1Risk methodologies8.2Threat scenarios8.3System impact assessment8.4IEC 62443 in energy8.5ISO/IEC 27019 for the energy sector8.6Application of compensating controls8.7Vulnerability management8.8Risk indicators8.9Reporting to senior management8.10Workshop: risk assessment of a control centre
9.1OT monitoring in energy9.2SOC for utilities9.3Sector threat intelligence9.4Anomaly detection9.5Incident response9.6Coordination with the CERT9.7GridEx and Cyber Europe exercises9.8System recovery9.9Incident forensics9.10Practical exercise: incident response simulation
10.1Supply chain risks10.2Contractual security requirements10.3Supplier assessment10.4Software bill of materials (SBOM)10.5Update security10.6Acceptance testing10.7Product certification10.8The Cyber Resilience Act10.9Third-party management10.10Lab: security assessment of a supplier
11.1Cybersecurity governance11.2Organisation and roles11.3Policies and procedures11.4Compliance audits11.5Training and awareness11.6Security metrics11.7Relationship with regulators11.8Cyber risk insurance11.9Continuous improvement of the programme11.10Case study: NIS2 compliance programme
12.1Selection of the energy organisation12.2Regulatory context analysis12.3Risk assessment12.4Control design12.5Security architecture12.6Detection and response plan12.7Compliance plan12.8Roadmap12.9Master's Thesis report12.10Master's Thesis: defence before a panel
How you'll learn
Training is 100% online on the SEIUM campus, with downloadable material, recorded classes and an assigned technical tutor. There are no fixed timetables: you progress at your own pace within each intake, so you can combine the programme with your job.
Each module combines theory, guided reading of the original standard and applied exercises. The working software is Wireshark, Dragos Platform, Splunk, Nozomi Networks and Zeek, in free, academic or evaluation versions. Practical work is based on real procedures for substation traffic analysis, incident response exercises and regulatory compliance assessments. Assessment is continuous for each module, plus the final Master's Thesis.
Standards covered: Directive (EU) 2022/2555 (NIS2), NERC CIP-005-7, Delegated Regulation (EU) 2024/1366 (network code on cybersecurity), IEC 62351, ISO/IEC 27019, IEC 62443-3-3, NERC CIP-007-6 and Spanish Law 8/2011 on critical infrastructure protection.
Build it end to end
Your final project follows the real engineering workflow, step by step, reviewed by your tutor.
Where this takes you
Requirements
- University degree in engineering, science or architecture, or equivalent demonstrable professional experience.
- Internet connection and a computer capable of running the programme software.
- English sufficient to read technical standards.
Ready to start?
Send your application today. Our admissions team replies within 72 hours with your study plan and funding options.
Frequently asked questions
The programme totals 1,900 hours over 12–14 months. You set your own pace within each intake, and your tutor helps you plan the workload around your job.
You work with Wireshark, Dragos Platform, Splunk, Nozomi Networks and Zeek, using free, academic or evaluation versions. Your tutor indicates the free alternative wherever one exists.
A SEIUM Institute diploma, awarded on passing the continuous assessment and the Master's Thesis. It is SEIUM's own qualification, not an official state degree; its recognition depends on the programme completed and the regulations of each country.
Yes. Modules passed in a course or postgraduate diploma in the same area are recognised in the higher programme. Ask about the recognition policy when you enrol.
A university degree in engineering, science or architecture (or equivalent professional experience), a computer able to run the programme software and English sufficient to read technical standards.
Start dates are set by SEIUM's faculty for each intake. Our admissions team will confirm the next available date when you apply.
Related programmes
Master’s in Energy for Data Centres
Online master's programme of 1,900 hours in energy for data centres — UPS/STS, cooling, PUE and continuity. 12 modules covering data centres and energy consumption, power…
Master’s in Smart Metering and AMI Data Quality
Online master's programme of 1,900 hours in smart metering and AMI data quality — metering, fraud and analytics. 12 modules covering advanced metering infrastructure, smart meters,…
Demand Management and Flexibility Aggregation Engineering — DR, aggregators, dynamic pricing.
Online master's programme of 1,900 hours in demand-side management and flexibility aggregation engineering. 12 modules covering flexible loads, aggregator business models, flexibility markets, optimisation and control,…
More in Energy and Networks
All Energy and Networks programmes → · How to apply · Fees & financing · Scholarships