Professional Diploma in Cyber Security of Onboard Ship Systems
This professional diploma prepares you to protect the systems that keep a ship moving against growing digital threats. You will learn to identify vulnerabilities in navigation, propulsion, steering, cargo and communication systems, to apply robust security measures to onboard IT and OT networks and to respond effectively to cyber incidents at sea, working with the international rules and standards and the specific cyber risks of the maritime environment.
Prior knowledge check
These are the skills this program gives you. Tick the ones you already master and we will tell you which part of the syllabus is for you.
You are starting from scratch in this subject. The program is designed precisely for that.
What is the Professional Diploma in Cyber Security of Onboard Ship Systems?
This professional diploma looks at cyber security from inside the ship. You will study the maritime threat landscape and the regulatory framework, from IMO resolution MSC.428(98) and the industry guidelines to IEC 62443, NIS 2 and classification society requirements; onboard network architecture, IT/OT segmentation and protocols such as NMEA 0183, NMEA 2000, Modbus and CAN bus; vulnerabilities in ECDIS, GNSS, AIS, radar, the integrated navigation system and the VDR; the protection of integrated automation, PLCs, engine and steering control, dynamic positioning and power management; ethical hacking and penetration testing adapted to live OT networks; incident response and digital forensics on board; and supply chain, remote access and autonomous ship risks.
What sets this diploma apart: its focus on operational technology on board rather than on corporate or port IT, with attention to how an attack on GNSS, AIS, ECDIS, steering or engine control affects the safety of navigation; practical attack and defense exercises, including OT-safe vulnerability scanning and reverse engineering of unauthenticated marine protocols; fail-safe, air-gapping and manual fallback strategies; cyber drills and awareness programs for seafarers; and an integrating project in which you carry out an IT/OT risk assessment, design a secure network architecture and implement an incident response plan for a commercial ship or fleet.
Program highlights
- Regulatory framework: IMO MSC.428(98), IEC 62443, NIST, NIS 2, ISPS and classification society requirements.
- Onboard networks: IT/OT segmentation, a maritime Purdue model and NMEA, Modbus and CAN bus security.
- Bridge systems: ECDIS tampering, GNSS spoofing and jamming, false AIS targets and VDR protection.
- Machinery and control: PLCs, SCADA, engine and steering control, dynamic positioning and power management.
- Offensive and defensive skills: OT penetration testing, incident response, forensics and recovery.
- Integrating project: an IT/OT risk assessment, secure architecture and response plan for a ship or fleet.
Syllabus of the Professional Diploma in Cyber Security of Onboard Ship Systems
8 modules. Select a module to see its content.
Fundamentals of maritime cyber security and the regulatory framework
- 1.1. The cyber threat landscape in the maritime sector: attack vectors, ransomware, industrial sabotage and cyber espionage
- 1.2. IMO guidance on maritime cyber risk management (Resolution MSC.428(98) and MSC-FAL.1/Circ.3)
- 1.3. Industrial cyber security standards and frameworks applied to ships: ISO/IEC 27001, IEC 62443 and the NIST Framework
- 1.4. International guidelines on cyber security on board (BIMCO, ICS, INTERTANKO, CLIA and IALA)
- 1.5. Requirements of classification societies (DNV, ABS, Lloyd's Register) and class notations for cyber security
- 1.6. Regional and international regulations: the EU NIS 2 Directive, US Coast Guard (USCG) requirements and the ISPS Code
- 1.7. Legal liability, insurance arrangements (P&I, H&M) and cyber attack exclusion clauses (CL380 and LMA5403)
- 1.8. IMO and BIMCO guidelines
Onboard network architecture: IT/OT integration and attack surface
- 2.1. Fundamental differences between information technology (IT) and operational technology (OT) in maritime environments
- 2.2. Mapping the attack surface on board: navigation, propulsion, steering, cargo management and satellite communication systems
- 2.3. Segregation and segmentation of onboard networks (VLANs, DMZ, micro-segmentation) according to a maritime Purdue model
- 2.4. Industrial communication protocols and marine interfaces: NMEA 0183, NMEA 2000, Modbus TCP/RTU, CAN bus and industrial Ethernet
- 2.5. Security assessment of ship-shore connectivity links: satellite communications (VSAT, Starlink, Inmarsat), coastal 4G/5G and port Wi-Fi
- 2.6. Marinised IoT devices, onboard sensors and telemetry gateways: risks of unauthorised access and unsigned firmware
- 2.7. Physical access control to onboard data centers, network cabinets, bridges and engine control consoles
- 2.8. Segmentation of onboard networks
Vulnerabilities in navigation, positioning and bridge systems (IT/OT)
- 3.1. Cyber security of electronic charts and ECDIS: tampering with chart files, software manipulation and USB or network vectors
- 3.2. Threats to satellite positioning (GNSS, GPS, GLONASS, Galileo): spoofing and jamming attacks
- 3.3. Vulnerabilities in the Automatic Identification System (AIS): injection of false targets, message manipulation and remote shutdown
- 3.4. Cyber security of radar/ARPA consoles, echo sounders and satellite and gyro compasses
- 3.5. Attacks on the Integrated Navigation System (INS) and the Bridge Navigational Watch Alarm System (BNWAS)
- 3.6. Protection of the Voyage Data Recorder (VDR, the black box): tampering with records and unauthorised access to audio and sensor data
- 3.7. Anomaly detection techniques and cross-validation of sensor data to detect false data injection (FDI) attacks
- 3.8. Attacks on GNSS, AIS and ECDIS
Cyber security of propulsion, steering and machinery automation systems
- 4.1. Security architecture of Integrated Automation Systems (IAS) and Alarm Monitoring Systems (AMS)
- 4.2. Vulnerabilities in programmable logic controllers (PLC), remote terminal units (RTU) and SCADA systems on board
- 4.3. Attack vectors against the steering gear and the main Engine Control System (ECS)
- 4.4. Cyber security of dynamic positioning (DP) systems and azimuth and tunnel thrusters
- 4.5. Protection of Power Management Systems (PMS) and onboard electrical distribution networks
- 4.6. Cyber security of cargo management systems, tank manifolds, ballast pumps and ballast water treatment systems (BWTS)
- 4.7. Air-gapping strategies, fail-safe modes and switching to manual control in the event of critical intrusions
- 4.8. Protection of PLCs and control systems
Ethical hacking, vulnerability analysis and penetration testing in maritime environments
- 5.1. Penetration testing methodologies adapted to ships and operational marine systems
- 5.2. Vulnerability scanning without service interruption on sensitive OT networks and fieldbuses (NMEA/CAN)
- 5.3. Firmware signature analysis and source code audits of marinised components and embedded devices
- 5.4. Exploitation and reverse engineering of unencrypted or unauthenticated marine protocols
- 5.5. Security assessment of onboard wireless networks: passenger, crew and operational Wi-Fi
- 5.6. Social engineering aimed at the maritime environment: phishing and spear phishing targeting officers, crew members and ship agents
- 5.7. Preparation of vulnerability reports, cyber risk matrices and remediation recommendations
- 5.8. Penetration testing methodologies
Incident response, forensic analysis and resilience on board
- 6.1. Design and implementation of the Cyber Incident Response Plan (CIRP) on board and its integration with the SMS/ISM
- 6.2. Real-time intrusion detection: marinised intrusion detection and prevention systems (IDS/IPS) and SIEM
- 6.3. Protocols for containing and isolating cyber attacks on board without compromising the safety of navigation
- 6.4. Digital forensics in maritime environments (DFIR): collection of evidence while preserving the chain of custody on board
- 6.5. Forensic analysis of system logs in ECDIS, VDR, firewalls, satellite routers and industrial controllers (PLCs)
- 6.6. Isolated backup strategies, restoration of system images and continuity of operations (disaster recovery)
- 6.7. Coordination between the shore-based cyber emergency response team (CSIRT/CERT) and the crew at sea
- 6.8. Incident response plan
Supply chain risk management and cyber security of autonomous ships (MASS)
- 7.1. Cyber security risk assessment in the supply chain: marine software suppliers, shipyards and service technicians
- 7.2. Secure remote access procedures for manufacturer (OEM) maintenance: encrypted VPNs, MFA authentication and session control
- 7.3. Cyber security at the ship-port interface: connection to the European Maritime Single Window environment (EMSWe), terminal networks and crane systems
- 7.4. Attack vectors in Maritime Autonomous Surface Ships (MASS): hijacking of the command and control (C2) link and attacks on onboard AI
- 7.5. Protection of low-latency satellite broadband data links (LEO/GEO) and end-to-end encryption
- 7.6. Cyber security of shore-based support infrastructure: Remote Operations Centers (ROC) and centralized fleet management
- 7.7. Implementation of Zero Trust Architecture models in the digital maritime ecosystem
- 7.8. Supplier risks and remote maintenance
Audits, human factor awareness and integrating project
- 8.1. Internal audits and preparation for port state control (PSC) cyber security inspections and vetting
- 8.2. Development of cyber security awareness and culture programs for seafarers
- 8.3. Simulation of cyber attacks and cyber drills on board and interaction with senior management ashore
- 8.4. Management of security patches and software and firmware updates on ships at sea without interrupting operations
- 8.5. Governance of maritime cyber security: policies on personal devices (BYOD) and removable media (USB)
- 8.6. Crisis communication protocols for data breaches, ransomware extortion or loss of operational control
- 8.7. Presentation of the integrating project
- 8.8. Integrating project: a comprehensive IT/OT cyber security risk assessment, design of a secure network architecture and implementation of the incident response plan for a commercial ship or a specific fleet
Duration and format of the Professional Diploma in Cyber Security of Onboard Ship Systems
It is 800 hours. Tell us how many you can study each week and we will tell you when you will really finish.
This is the pace at which most students finish. It fits well with the installment plan.
Academic leadership and faculty
The Navalis teaching team: working professionals who teach and supervise the programs.
Dr. Marina AlcoverAcademic Director and Head of Quality Assurance
Eng. Diego CifuentesSenior Lecturer in Naval Welding and Non-Destructive Testing; Head of QA/QC for Welded Joints
Capt. Javier Abaroa (MCA)Senior Lecturer in Ship Handling, Electronic Navigation (ECDIS/Radar/ARPA) and GMDSS; STCW Compliance and Bridge Resource Management Coordinator
Dr. Pau FerrerSenior Lecturer in Naval Architecture and Simulation; Director of the Hydrodynamics and CFD Laboratory
Dr. Nuria LlobregatSenior Lecturer in Marine Meteorology, SAR and Operational Safety; Navigation Risk Management Coordinator
Eng. Javier BañulsSenior Lecturer in Electrical Engineering, Automation and ETO Engineering; Electronic Integration and Engine Alarms Coordinator
Eng. Sofía MarquinaSenior Lecturer in Materials, Composites and Corrosion Protection; Coordinator of the Advanced Paints and Coatings Line
Eng. Tomás RieraSenior Lecturer in Propulsion, Alternative Energy and Hybrid Systems; Energy Performance and Vibration CoordinatorObjectives of the Professional Diploma in Cyber Security of Onboard Ship Systems
Career opportunities after the Professional Diploma in Cyber Security of Onboard Ship Systems
Questions about the Professional Diploma in Cyber Security of Onboard Ship Systems
The maritime sector, with a focus on the systems installed on board ships: bridge and navigation equipment, machinery automation, propulsion, steering, cargo systems and ship-shore links.
It concentrates on operational technology on board: ECDIS, GNSS, AIS, PLCs, engine and steering control, dynamic positioning and onboard networks, and on how an attack on them affects the safety of navigation.
A solid grounding in networks, operating systems and communication protocols is recommended. Familiarity with ISO 27001 or NIST helps, and maritime knowledge can be built during the program.
Yes. The modules include simulated attack and defense exercises, OT-safe vulnerability scanning, analysis of marine protocols, incident response scenarios and cyber drills.
Yes. A full module deals with vulnerabilities in ECDIS, GNSS, AIS, radar, the integrated navigation system and the VDR, and with techniques to detect false data injection.
Yes. The supply chain module covers attack vectors in autonomous surface ships, command and control links, remote operations centers and Zero Trust architectures.
Through practical exercises and case studies in each module and an integrating project with an IT/OT risk assessment, a secure network architecture and an incident response plan for a ship or fleet.
Fully online, with materials on a virtual campus available 24/7, discussion forums, live sessions that are recorded and tutorials. It comprises 800 hours across 8 modules of about 100 hours each.
More programs in Machinery and electrics
Admission process
No waiting for a call back. If your documents are in order, you can enroll in the same session.
- Profile: aimed at merchant navy officers, naval engineers and maintenance technicians responsible for onboard electronic and navigation systems, fleet managers and IT staff at shipping companies, security consultants and auditors moving into the maritime field, marine equipment manufacturers and STEM graduates; a degree in computer engineering, telecommunications, electronics or a similar field, or proven experience in network and systems security, is recommended, and knowledge of radar, ECDIS or marine communications is an advantage.
- Language: sufficient command of English to follow the classes and the technical documentation.
- Technical resources: a computer with a camera and microphone, a stable broadband internet connection, up-to-date software and basic office skills.
- Admission: online application, review of your profile and a short interview with the academic team.
- 01ApplicationYour details, background and documents.
- 02Instant reviewWe check that everything is complete and in order.
- 03EnrollmentChoose full payment or instalments and reserve your place.
Admission is provisional until the committee validates the documents provided. If you do not meet the requirements, the full amount is refunded.
Ask us before you enroll
Leave your details and admissions will write to you to answer any questions. If you are already sure, you can apply and pay in the same session.