Master's in Maritime Cybersecurity
This master's programme gives you specialised tools and knowledge to protect critical maritime infrastructure and operations. You will work on risk analysis, network architecture, standards and incident response, with exercises covering ships, ports and administration.
Prior knowledge check
These are the skills this programme gives you. Tick the ones you already master and we will tell you which part of the syllabus is for you.
You are starting from scratch in this subject. The programme is designed precisely for that.
What is the Master's in Maritime Cybersecurity?
This master's degree gives you specialised tools and knowledge to protect critical maritime infrastructure and operations against cyber threats. You will learn to detect vulnerabilities, apply defence in depth and respond to incidents in the global maritime environment.
The programme ranges from the protection of ICS/OT systems on board ships to the security of ports and offshore facilities, and includes compliance with international regulations and analysis of trends in maritime cyberattacks. What sets it apart: a practical approach with simulations and incident-response exercises, and coverage running from supply-chain security to data protection in the cloud.
Programme highlights
- Proactive defence: anticipate and neutralise cyberattacks specific to the maritime sector.
- Regulation and compliance: command of standards such as the IMO guidelines and ISO 27001, to avoid penalties.
- Real-time simulations: practice in controlled environments that replicate real scenarios.
- Comprehensive protection: keeping ships, ports and critical infrastructure operational.
- Professional development: position yourself as a reference in protecting the digital maritime environment.
Syllabus of the Master's in Maritime Cybersecurity
11 modules. Select a module to see its content.
Fundamentals of Maritime Cybersecurity
- 1.1. Threat landscape in the maritime sector
- 1.2. IT and OT systems on board and in port
- 1.3. IMO Guidelines MSC-FAL.1/Circ.3
- 1.4. Cases of maritime cyberattacks
- 1.5. Concepts of confidentiality, integrity and availability
- 1.6. Threat actors in the maritime sector
- 1.7. The ship's attack surface
- 1.8. IT/OT convergence
- 1.9. Economic impact of cyber incidents
- 1.10. NIST Cybersecurity Framework
Ship Systems Architecture
- 2.1. Integrated bridge, ECDIS, AIS and GNSS
- 2.2. Machinery and cargo control systems
- 2.3. Satellite communications
- 2.4. Crew and passenger networks
- 2.5. Critical asset map
- 2.6. Ship data networks
- 2.7. Ballast and fuel management systems
- 2.8. Third-party equipment and remote maintenance
- 2.9. IoT devices on board
- 2.10. Software and firmware inventory
Risk Analysis and Management
- 3.1. Identification of assets and threats
- 3.2. Risk assessment methodologies
- 3.3. Vulnerability management
- 3.4. Integration into the ISM Code SMS
- 3.5. Risk treatment plan
- 3.6. Risk matrices
- 3.7. Business impact analysis
- 3.8. Penetration testing
- 3.9. Supplier assessment
- 3.10. Periodic risk review
Regulations and Standards
- 4.1. IACS UR E26 and E27 requirements
- 4.2. ISO/IEC 27001 applied to the sector
- 4.3. NIS2 Directive and ports
- 4.4. ISPS Code and port cybersecurity
- 4.5. Audits and certifications
- 4.6. BIMCO guidelines
- 4.7. IEC 62443 standard
- 4.8. EU Cyber Resilience Act
- 4.9. Classification society requirements
- 4.10. Incident reporting
Network and OT System Security
- 5.1. Network segmentation and firewalls
- 5.2. Protection of industrial systems
- 5.3. Remote access and maintenance management
- 5.4. Updates and patch management
- 5.5. Monitoring and intrusion detection
- 5.6. Secure network architecture
- 5.7. USB device control
- 5.8. System hardening
- 5.9. Communications encryption
- 5.10. Identity management
Threats to Navigation
- 6.1. GNSS spoofing and jamming
- 6.2. AIS and ECDIS manipulation
- 6.3. Ransomware at shipping companies and ports
- 6.4. Social engineering and phishing targeting crews
- 6.5. Insider threats
- 6.6. Attacks on cargo systems
- 6.7. Threats to ports and terminals
- 6.8. Supply chain attacks
- 6.9. Malware in OT systems
- 6.10. Threat intelligence
Incident Response and Continuity
- 7.1. Incident response plans
- 7.2. Basic forensic analysis
- 7.3. Recovery and backups
- 7.4. Continuity of operations
- 7.5. Communication with authorities
- 7.6. CSIRT response teams
- 7.7. Digital evidence management
- 7.8. Lessons learned
- 7.9. Tabletop exercises
- 7.10. Crisis communication
Cybersecurity Culture and Training
- 8.1. Crew awareness
- 8.2. Drills and exercises
- 8.3. Cybersecurity governance in the shipping company
- 8.4. Supplier management
- 8.5. Maturity indicators
- 8.6. Role-based training on board
- 8.7. Simulated phishing campaigns
- 8.8. Acceptable use policies
- 8.9. Company cybersecurity officer
- 8.10. Continuous improvement
Port and Maritime Supply Chain Cybersecurity
- 9.1. Port community systems
- 9.2. Container terminal cybersecurity
- 9.3. Crane control and automation systems
- 9.4. Maritime single window
- 9.5. Secure data exchange with customs
- 9.6. Attacks on the global supply chain
- 9.7. Cooperation between ports and national CERTs
- 9.8. NIS2 Directive in the port sector
- 9.9. Critical infrastructure protection plans
- 9.10. Case study of a port incident
Security of Communications, Satellite Navigation and Autonomous Ships
- 10.1. Security of VSAT and LEO communications
- 10.2. GNSS protection and backup systems
- 10.3. AIS message authentication
- 10.4. Security of ECDIS and electronic charts
- 10.5. Cybersecurity of autonomous ships
- 10.6. Remote control centres
- 10.7. Artificial intelligence in threat detection
- 10.8. Cryptography in maritime communications
- 10.9. Navigation resilience testing
- 10.10. Future trends in maritime cybersecurity
Master's Thesis: Cybersecurity Plan for a Ship or Port Terminal
- 11.1. Definition of the problem, objectives and scope of the project
- 11.2. Review of the state of the art and applicable regulatory framework
- 11.3. Methodology, resources and work planning
- 11.4. Technical development and analysis of results
- 11.5. Conclusions, feasibility and future lines of work
- 11.6. Writing of the thesis and defence before the examining panel
- 11.7. Choice of topic and definition of the research problem
- 11.8. Formulation of objectives, hypotheses and scope of the work
- 11.9. Analysis of the applicable regulatory and technical framework
- 11.10. Design of the methodology and work plan
Duration and format of the Master's in Maritime Cybersecurity
It is 1,500 hours. Tell us how many you can study each week and we will tell you when you will really finish.
This is the pace at which most students finish. It fits well with the instalment plan.
Academic leadership and faculty
The Navalis teaching team: working professionals who teach and supervise the programmes.
Dra. Marina AlcoverAcademic Director and Head of Quality Assurance
Ing. Diego CifuentesSenior Lecturer in Naval Welding and Non-Destructive Testing; Head of QA/QC for Welded Joints
Cap. Javier Abaroa (MCA)Senior Lecturer in Ship Handling, Electronic Navigation (ECDIS/Radar/ARPA) and GMDSS; STCW Compliance and Bridge Resource Management Coordinator
Dr. Pau FerrerSenior Lecturer in Naval Architecture and Simulation; Director of the Hydrodynamics and CFD Laboratory
Dra. Nuria LlobregatSenior Lecturer in Marine Meteorology, SAR and Operational Safety; Navigation Risk Management Coordinator
Ing. Javier BañulsSenior Lecturer in Electrical Engineering, Automation and ETO Engineering; Electronic Integration and Engine Alarms Coordinator
Ing. Sofía MarquinaSenior Lecturer in Materials, Composites and Corrosion Protection; Coordinator of the Advanced Paints and Coatings Line
Ing. Tomás RieraSenior Lecturer in Propulsion, Alternative Energy and Hybrid Systems; Energy Performance and Vibration CoordinatorObjectives of the Master's in Maritime Cybersecurity
Career opportunities after the Master's in Maritime Cybersecurity
Questions about the Master's in Maritime Cybersecurity
The maritime sector.
Yes. The pathway includes ECDIS/Radar-ARPA/BRM with port, ocean, fog, heavy-weather and SAR scenarios.
Online with live sessions; hybrid option for simulator stays/placements through partnership agreements.
The maritime industry.
Functional SMCP is recommended. We provide support materials for standard phraseology.
Yes, with a related qualification or experience in maritime/port operations. The admissions interview will confirm suitability.
Optional (3–6 months) through Companies & Partnerships and the Alumni Network.
Simulator exercises (rubrics), passage plans, SOPs, checklists, micro-tests and an applied master's thesis.
More programmes in Bridge and navigation
Admission process
No waiting for a call back. If your documents are in order, you can enrol in the same session.
- Academic or professional profile: a degree in computer science, engineering, telecommunications or similar, or demonstrable experience in cybersecurity or in the maritime sector.
- Technical knowledge: basic notions of networks, operating systems and information security. Some familiarity with maritime environments is valued.
- Documents: up-to-date CV, copy of degree certificate, identity document or passport and a motivation letter.
- Technical requirements for online study: a computer with camera and microphone, a high-speed internet connection and up-to-date software.
- 01ApplicationYour details, background and documents.
- 02Instant reviewWe check that everything is complete and in order.
- 03EnrolmentChoose full payment or instalments and reserve your place.
Admission is provisional until the committee validates the documents provided. If you do not meet the requirements, the full amount is refunded.
Ask us before you enrol
Leave your details and admissions will write to you to answer any questions. If you are already sure, you can apply and pay in the same session.