Diploma in NIS2/IMO 2021 Compliance and Auditing
Online postgraduate diploma of 800 hours in NIS2/IMO 2021 compliance and auditing. 8 modules covering the maritime cyber regulatory framework, cyber risk management, technical and organisational measures, incident management and audits on board and at terminals under NIS2, MSC.428(98) and ISO/IEC 27001, with an assigned technical tutor.
Diploma in NIS2/IMO 2021 Compliance and Auditing — studying from South Africa
South Africa's coastline and ports make maritime engineering important, with the Port of Durban, the Port of Cape Town and the Port of Ngqura serving major trade flows. The South African Navy and Armscor support naval procurement, and shipbuilding and repair businesses operate along the coast. Offshore energy and marine services create additional demand, and the sports nautical sector serves recreational boating. The South African Maritime Safety Authority regulates shipping and marine safety.
Fees for South Africa: R 27 900 (South African rand), with instalments and employer sponsorship available.
Relevant bodies in South Africa
Typical roles
Questions from South Africa
Will a SEIUM qualification be recognised by the professional bodies in South Africa for this area?
SEIUM qualifications are private, not official state degrees, and are not accredited by any South African body. Marine and offshore work may involve bodies such as the South African Maritime Safety Authority (SAMSA) and ECSA for engineering registration. Recognition of a private qualification is decided by employers or the relevant body, so confirm this with them directly.
How might this qualification be used by employers in South Africa in naval and offshore industries?
Shipyards, offshore energy firms and marine design consultancies look mainly for certified competence, relevant experience and regulatory knowledge. A private qualification may complement these but will not replace formal certification. Its usefulness depends on each employer's assessment, so ask prospective employers how they would weigh it.
Can I study this programme alongside full-time work from South Africa, and is there a time zone or language issue?
Yes, the programme is 100% online and in English, so you can study from home without a student visa. Master's programmes total 1,900 hours, postgraduate diplomas 800 hours and specialist courses 300 hours. You receive an assigned technical tutor, can pay in instalments, and may seek employer sponsorship. Confirm time-zone and workload expectations with SEIUM before committing.
Take the controls.
Run a real engineering trade-off from this field. Move the sliders, watch the model react in real time and beat the challenge.
What you will be able to do
Interpret the maritime cybersecurity regulatory framework.
Manage cyber risk on ships and ashore.
Implement appropriate technical and organisational measures.
Respond to and report incidents in line with NIS2.
Plan and carry out compliance audits.
Audit systems on board and at terminals.
Govern cybersecurity through continuous improvement.
Who it's for
- Maritime cybersecurity auditors looking to deepen their NIS2 and IMO 2021 expertise.
- NIS2 compliance managers in shipping companies, port authorities and terminals.
- Shipping company CISOs responsible for fleet cyber governance.
- OT security consultants working with maritime clients.
- Company security officers who need to integrate cyber risk into their role.
- Risk analysts moving into maritime cybersecurity.
- Engineering or science graduates seeking to enter the shipping industry.
What you'll work with
- Directive (EU) 2022/2555 (NIS2) (EU directive on a high common level of cybersecurity)
- Resolution MSC.428(98) (IMO resolution on maritime cyber risk management in safety management systems)
- ISO/IEC 27001 (information security management systems)
- MSC-FAL.1/Circ.3/Rev.2 (IMO guidelines on maritime cyber risk management)
- IACS UR E26 (cyber resilience of ships)
- ISO 19011 (guidelines for auditing management systems)
- ISO/IEC 27005 (information security risk management)
- ISPS Code (International Ship and Port Facility Security Code)
- Microsoft Purview Compliance Manager
- Nessus
- Wireshark
- Eramba
8 modules
1.1Resolution MSC.428(98) and its entry into force in 20211.2IMO guidelines MSC-FAL.1/Circ.3/Rev.21.3Integrating cyber risk into the ISM Code1.4The NIS2 Directive and maritime transport entities1.5Spanish transposition of NIS21.6IACS UR E26 and E27 requirements1.7ISPS Code and port facility security1.8Incident reporting obligations1.9Senior management responsibilities1.10Case study: regulatory map of a shipping company
2.1IT and OT asset inventory2.2Identifying threats and vulnerabilities2.3Risk analysis methodologies2.4NIST Cybersecurity Framework 2.02.5ISO/IEC 270052.6Risk tolerance and criteria2.7Risk treatment plans2.8Third-party and supplier risk2.9Risk monitoring and review2.10Practical exercise: risk analysis of a fleet
3.1ISO/IEC 27001 Annex A controls3.2Network segmentation on board3.3Access and privilege management3.4Patch management on ships3.5Backup and recovery3.6Malware protection3.7Email and remote access security3.8Crew training and awareness3.9Supply chain security3.10Workshop: measures plan for a typical ship
4.1Incident detection and classification4.2Incident response plan4.3Timely notification to authorities4.4Coordination with national CSIRTs4.5Communication with flag and class4.6Recovery of critical systems4.7Basic forensic analysis4.8Lessons learned after incidents4.9Cyber incident drills4.10Case study: responding to ransomware at a shipping company
5.1ISO 19011 auditing principles5.2Auditing ISO/IEC 27001 management systems5.3Auditing NIS2 requirements5.4Planning the audit programme5.5Collecting technical evidence5.6Interviewing crew and shore staff5.7Classifying non-conformities5.8Writing audit reports5.9Following up corrective actions5.10Practical exercise: documentary audit of a shipping company
6.1Preparing audits on board6.2Verifying segmentation and access6.3Reviewing equipment configurations6.4Auditing ECDIS and communication systems6.5Auditing port terminals6.6Assessing service providers6.7Class and flag audits6.8Auditor support tools6.9Evidence in OT environments6.10Lab: simulated technical audit of a ship
7.1Corporate cybersecurity policies7.2Roles and responsibilities7.3Compliance indicators7.4Reporting to the board of directors7.5Management review7.6Document management7.7ISO/IEC 27001 certification7.8Maturity and roadmap7.9Sector maturity benchmark7.10Case study: compliance dashboard
8.1Selecting the maritime organisation8.2Analysing applicable requirements8.3Risk assessment8.4Designing security measures8.5Audit programme8.6Conducting a pilot audit8.7Corrective action plan8.8Conclusions and recommendations8.9Report and presentation8.10Final project: final review with the tutor
How you'll learn
100% online training on SEIUM's campus, with downloadable materials, recorded classes and an assigned technical tutor. There are no fixed timetables: you progress at your own pace within the intake, so you can combine the programme with work.
Each module combines theory, guided reading of the original standard and applied exercises. The working software is Microsoft Purview Compliance Manager, Nessus, Wireshark and Eramba, in free, academic or evaluation versions. Real procedures are studied, including fleet cyber risk analyses, NIS2 and ISM compliance audits and incident response drills. Assessment is continuous by module, plus the final capstone project.
Standards covered: Directive (EU) 2022/2555 (NIS2), Resolution MSC.428(98), ISO/IEC 27001, MSC-FAL.1/Circ.3/Rev.2, IACS UR E26, ISO 19011, ISO/IEC 27005, ISPS Code.
Build it end to end
Your final project follows the real engineering workflow, step by step, reviewed by your tutor.
Where this takes you
Requirements
- Prior technical training or professional experience in the sector. No university degree is required.
- An internet connection and a computer capable of running the programme software.
- English sufficient to read technical standards.
Ready to start?
Send your application today. Our admissions team replies within 72 hours with your study plan and funding options.
Frequently asked questions
The programme totals 800 hours over 6–8 months. You set your own pace within each intake, and your tutor helps you plan the workload around your job.
You work with Microsoft Purview Compliance Manager, Nessus, Wireshark and Eramba, using free, academic or evaluation versions. Your tutor indicates the free alternative wherever one exists.
A SEIUM Institute diploma, awarded on passing the continuous assessment and the final project. It is SEIUM's own qualification, not an official state degree; its recognition depends on the programme completed and the regulations of each country.
Yes. Modules passed are recognised in a higher programme in the same area (postgraduate diploma or master's). Ask about the recognition policy when you enrol.
Prior technical training or professional experience in the sector (no university degree required), and English sufficient to read technical standards.
Start dates are set by SEIUM's faculty for each intake. Our admissions team will confirm the next available date when you apply.
Related programmes
Diploma in Salvage, Lightering and Pollution Control
Online postgraduate diploma of 800 hours in salvage, lightering and pollution control. 8 modules covering the legal framework of salvage, technical assessment of casualties, salvage and…
Diploma in Sail Aerodynamics and Coupled CFD
Online postgraduate diploma of 800 hours in sail aerodynamics and coupled CFD. 8 modules covering flow around sails, fast aerodynamic models, CFD for sails, sail and…
Postgraduate Diploma in Hull-Propeller Interaction and Numerical Wake
Online 800-hour Postgraduate Diploma in Hull-Propeller Interaction and Numerical Wake. 8 modules with the ITTC 1978 Power Prediction Method, ITTC CFD Procedures (7.5-03 series) and STAR-CCM+.…
More in Naval, Offshore & Sports Nautical
All Naval, Offshore & Sports Nautical programmes → · How to apply · Fees & financing · Scholarships