CourseInsurance, Risk & Actuarial Data Applications open

Course on Ransomware Attack Coverage in ITS

Online 300-hour course on ransomware attack coverage in ITS. 6 modules covering Directive (EU) 2022/2555 (NIS2), IEC 62443 (security for industrial automation and control systems) and Wireshark. Assigned tutor and open enrolment.

Duration300 h
ModeOnline
LanguageEnglish
Start datesSet by the faculty
AwardSEIUM Institute certificate

Course on Ransomware Attack Coverage in ITS — studying from the United States

Insurance and risk analysis are central to the American financial system, with major hubs in Hartford, New York, Chicago and Des Moines. Insurers, reinsurers and consulting firms rely on actuarial models, catastrophe modeling and data analytics to price risk and manage capital. Engineers with quantitative skills contribute to underwriting, claims analysis and risk assessment for sectors such as automotive, aviation and property. State insurance regulators and professional credentialing bodies shape the profession's standards.

Fees for the United States: 720 US$ (US Dollars), with instalments and employer sponsorship available.

Relevant bodies in the United States

  • National Association of Insurance Commissioners (NAIC)
  • Society of Actuaries (SOA)
  • Casualty Actuarial Society (CAS)
  • American Academy of Actuaries

Typical roles

  • Actuarial Analyst
  • Risk Engineer
  • Catastrophe Modeling Analyst
  • Underwriting Data Analyst

Questions from the United States

Which US bodies govern actuarial and risk credentials, and is SEIUM recognized?

Actuarial credentials in the US are overseen by the Society of Actuaries and the Casualty Actuarial Society, with professional standards linked to the American Academy of Actuaries. Enrolment-based actuarial and state insurance regulators set the rules for practice. SEIUM's qualifications are private and not accredited by any national body, so recognition for professional actuarial roles is decided by employers or those bodies.

What roles in US insurance and risk management might this training support?

Typical roles include risk analyst, data scientist in insurance, reliability or catastrophe modelling specialist, and underwriting analytics. Insurers, reinsurers, brokers, and consultancies hire for these skills. Whether a private qualification carries weight depends on the employer, so reviewing job descriptions and asking hiring managers is the most reliable way to judge fit.

How is the programme delivered for someone working in US time zones?

Programmes are fully online and taught in English, with an assigned technical tutor and a final project. Because the study is asynchronous to a degree, you can often fit sessions around US working hours, though you should confirm schedule details with the institute. Instalment payment plans are available, and employer sponsorship may be possible for eligible students.

Virtual lab · try it before you enrol

Take the controls.

Run a real engineering trade-off from this field. Move the sliders, watch the model react in real time and beat the challenge.

SIM · LIVE ●
Learning outcomes

What you will be able to do

01

Describe the architecture of intelligent transport systems.

02

Analyse the threat of ransomware to IT and OT systems in transport.

03

Apply prevention and resilience measures in line with NIS2 and IEC 62443.

04

Design insurance coverage for ransomware incidents.

05

Plan incident response and service recovery.

06

Assess cybersecurity maturity as an underwriting criterion.

07

Develop an integrative project for a cyber coverage programme for ITS.

Profile

Who it's for

  • Cyber insurance underwriter wishing to specialise in Ransomware Attack Coverage in ITS.
  • Cybersecurity manager of transport infrastructure wishing to specialise in Ransomware Attack Coverage in ITS.
  • Incident response analyst wishing to specialise in Ransomware Attack Coverage in ITS.
  • Business continuity manager wishing to specialise in Ransomware Attack Coverage in ITS.
  • Technology risk consultant wishing to specialise in Ransomware Attack Coverage in ITS.
  • Cyber claims adjuster wishing to specialise in Ransomware Attack Coverage in ITS.
  • Engineering or science graduates seeking to enter transport infrastructure.
Standards & tools

What you'll work with

  • Directive (EU) 2022/2555 (NIS2)
  • IEC 62443 (security for industrial automation and control systems)
  • ISO/IEC 27001 (information security)
  • ISO/IEC 27035 (security incident management)
  • Directive 2010/40/EU (intelligent transport systems)
  • Royal Decree 311/2022 (National Security Framework, Esquema Nacional de Seguridad)
  • ISO 22301 (business continuity)
Syllabus

6 modules · 300 h

  1. 1.1What an intelligent transport system comprises
  2. 1.2Traffic lights, signage and road sensors
  3. 1.3Traffic control centres
  4. 1.4Tolls and access control
  5. 1.5Public transport and its management
  6. 1.6Vehicle-to-infrastructure communications
  7. 1.7Sector vocabulary and acronyms
  8. 1.8Critical system dependencies
  9. 1.9Consequences of a system outage
  10. 1.10Exercise: component map of a city
  1. 2.1How this type of attack operates
  2. 2.2Common entry points
  3. 2.3Propagation across operational networks
  4. 2.4Impact on service availability
  5. 2.5Data exfiltration and double extortion
  6. 2.6Actors and their motivations
  7. 2.7Documented cases in infrastructure
  8. 2.8Observed recovery times
  9. 2.9Direct and indirect costs
  10. 2.10Practical: attack scenario on a control centre
  1. 3.1Segmentation between management and operational networks
  2. 3.2Remote access management
  3. 3.3Isolated backups and their testing
  4. 3.4Vulnerability and patch management
  5. 3.5Supplier and remote maintenance control
  6. 3.6Detection and continuous monitoring
  7. 3.7Degraded mode and manual operation
  8. 3.8Service continuity plans
  9. 3.9Training and awareness
  10. 3.10Practical: resilience plan for a control centre
  1. 4.1First-party coverage
  2. 4.2Service interruption and its calculation
  3. 4.3Liability towards users and third parties
  4. 4.4Response and investigation costs
  5. 4.5Ransom payment: debate and legal limits
  6. 4.6Applicable international sanctions
  7. 4.7Common exclusions
  8. 4.8Security requirements imposed on the insured
  9. 4.9Accumulation in infrastructure portfolios
  10. 4.10Practical: coverage design for an operator
  1. 5.1Plan and team activation
  2. 5.2Critical decisions in the first hours
  3. 5.3Isolation and evidence preservation
  4. 5.4Communication to authorities and the public
  5. 5.5Phased service restoration
  6. 5.6Negotiation and its management
  7. 5.7Forensic investigation
  8. 5.8Damage quantification
  9. 5.9Lessons learned and improvement
  10. 5.10Practical: incident response script
  1. 6.1Choice of operator and system
  2. 6.2Dependency map and scenarios
  3. 6.3Prevention and resilience plan
  4. 6.4Insurance programme design
  5. 6.5Incident response script
  6. 6.6Service continuity plan
  7. 6.7Monitoring indicators
  8. 6.8Training plan and drills
  9. 6.9Project report
  10. 6.10Project defence
Methodology, software & labs

How you'll learn

100% online training on the SEIUM campus, with downloadable material, recorded classes and an assigned technical tutor. No fixed timetables: students progress at their own pace within the intake, making it easy to combine with work.

Each module combines theory, guided reading of the original standard and applied exercises. The working software is Wireshark, Splunk, Microsoft Sentinel, advanced Excel, in free, academic or evaluation versions. Tests are studied using real procedures from ransomware attack simulation exercises, cybersecurity maturity assessments and service interruption coverage analysis. Assessment is continuous, module by module, plus the final integrative project.

Accreditable laboratories(EN ISO/IEC 17025) with a rotor test rig, EMC/Lightning pre-compliance, HIL/SIL, vibration/acoustics.
Evidence-oriented final project:safety case, test plan, compliance dossier and operational limits.
Industry mentoring:teaching staff with experience in training, , eVTOL/UAM and flight test.
Flexible format(hybrid/online), international cohorts and support from SEIUM Career Services.
Ethics and safety:a safety-by-design approach, with OT cybersecurity, DIH and compliance as its pillars.
Capstone project

Build it end to end

Your final project follows the real engineering workflow, step by step, reviewed by your tutor.

Choice of operator and system

Describe the architecture of intelligent transport systems.

Dependency map and scenarios

Analyse the threat of ransomware to IT and OT systems in transport.

Prevention and resilience plan

Apply prevention and resilience measures in line with NIS2 and IEC 62443.

Insurance programme design

Design insurance coverage for ransomware incidents.

Incident response script

Plan incident response and service recovery.

Career opportunities

Where this takes you

Cyber insurance underwriterTransport infrastructure cybersecurity managerIncident response analystBusiness continuity managerTechnology risk consultantCyber claims adjuster
Admissions & scholarships

Requirements

  • No prior qualification required.
  • Internet connection and a computer capable of running the programme's software.
  • Sufficient level of Spanish to follow technical regulatory reading.

Ready to start?

Send your application today. Our admissions team replies within 72 hours with your study plan and funding options.

FAQ

Frequently asked questions

The programme totals 300 hours, spread over 3 to 5 months. That is an average of 10 to 15 hours per week, compatible with a full-time job.

You will work with Wireshark, Splunk, Microsoft Sentinel and advanced Excel. Free, academic or evaluation versions are used, and the tutor will indicate the free alternative where one exists.

A SEIUM own diploma upon passing the continuous assessment and the integrative project. This is in-house training, not an official Ministry qualification.

Yes. Modules passed in a course or postgraduate diploma in the same area count towards the higher programme. Check the recognition policy when you enrol.

Course on Ransomware Attack Coverage in ITSEnrol
Scroll to Top
SEIUM – Institute of Advanced Engineering
Privacy Overview

This website uses cookies so that we can provide you with the best user experience possible. Cookie information is stored in your browser and performs functions such as recognising you when you return to our website and helping our team to understand which sections of the website you find most interesting and useful.