ÌìÃÀÖ±²¥

This website uses cookies

The website of the Fundació Politècnica de Catalunya uses its own and third-party cookies to improve the browsing experience and for statistical purposes. For more information about cookies you can consult the

Manage cookies
Allow all cookies
Campus
MY_TECH_SPACE


Go
Campus in maintenance
User and / or password incorrect
You have no active environment
Your access has been restricted. Consultation with the department of administration
Due to technical problems, the virtual campus is inaccessible. We are working to solve it. Sorry for the inconvenience.
You are not authorized to make this call. You can consult webmaster.fpc@fpc.upc.edu
You have exceeded the maximum number of attempts. Your user is temporarily blocked. Check back in a little while.
You must enter your campus username, not an email
You have to perform the verification to verify that you are not a robot.
Home   >  Master's & postgraduate courses  >  Education  >  Postgraduate course in Cybersecurity Planning and Management
We advise you! Request information or admission
  • discount

    ENROL WITH A 15% DISCOUNT UNTIL DECEMBER 15!

relation
This postgraduate course is also part of the training track for the continuing education master's degree in Cybersecurity Management.

Presentation

Edition
14th
Credits
27 ECTS
Delivery method
Blended learning
Language of instruction
Spanish
Fee
€4,700 €3,995(ENROL WITH A 15% DISCOUNT UNTIL DECEMBER 15!)
Special conditions on payment of enrolment fee and 0,7% campaign

Finance your registration with Sabadell Consumer Sabadell Consumer Simulator and submit your application through your Program Advisor:

Isabel de la Fuente Larriba
(34) 93 115 57 51
isabel.delafuente@upcschool.upc.edu

">
. Use the simulator to easily calculate your fees and request it through your Program Advisor.

Registration open until the beginning of the programme or until end of vacancies.
Dates
Classes start: 23/03/2026
Classes end: 06/10/2026
Programme ends : 15/10/2026
Class schedule
Monday: 6:30 pm to 9:30 pm
Tuesday: 6:30 pm to 9:30 pm
Thursday: 6:30 pm to 9:30 pm
Taught at
UPC School
C/ de Badajoz, 73-77
Barcelona
Why this programme?
The identification, auditing and appropriate management of assets enables entities to minimize the risks related to possible cyberattacks.

A Burning Glass study concludes that the demand for information security professionals has increased 3.5 times faster than other IT professions, and 12 times faster than other professions.

Students who complete the postgraduate course in Cybersecurity Planning and Management will be able to plan, implement and manage of a company's security processes, in order to minimize risks and establish contingency policies in case of incidents.

The postgraduate course has an outstanding teaching team, with an excellent combination of practical professional experience and innovation, in the field of technology security from a technical perspective, as well as in the legal and policing field. We will also have contributions from internationally renowned speakers, who will tell us about their vision of the sector in the present and the future.
Promoted by:
Aims
  • Identify an institution's critical assets and determine the measures required to protect them.
  • Manage an institution's digital security, establishing the appropriate methodologies, designing an architecture based on its needs as a business, and minimizing the risks to which the different assets may be exposed.
  • Use the tools and protocols necessary to maintain the confidentiality, integrity and availability of data.
  • Identify the cybersecurity compliance needs of the organization and deploy the programs and plans to implement the management systems that provide the guarantees required by the market, and also by the administration.
Who is it for?
  • Computer or Telecommunications Engineering Graduates.
  • Engineers and scientific-technical graduates interested in obtaining an internationally recognized qualification demonstrating their knowledge of computer security and their ability to protect their installations from cyberattacks.
  • Computer systems administrators.
  • Members of the national security forces and bodies.
  • Consultants for computer security companies.
  • Consultants in security incident response teams.
  • Critical infrastructure technicians.
  • IT directors and managers.
  • Lawyers and criminologists wishing to specialise in computer crimes.
  • Professionals from related disciplines who require in-depth knowledge or specialization in cybersecurity to carry out their work activities.

Training Content

List of subjects
2 ECTS 15h
+
Blended learning
Blockchain and Authentication
  • Symmetric or secret key cryptography I.
  • Asymmetric or public-key cryptography. Public Key Infrastructure (PKI).
  • Security protocols.
  • Blockchain Distributed Ledger Technology.
  • Trust and digital identity services.
  • Federated identities.
1 ECTS 9h
+
Blended learning
Secure Software Development Life Cycle (SSDLC)
  • SSDLC methodology.
  • Security principles and design requirements.
  • Definition and planning of the test program (link with attack methods).
  • Automation of integration tests and the transition to CI/CD production.
3 ECTS 27h
+
Blended learning
Compliance
  • Compliance framework I and II.
  • Security policy and standards.
  • Management systems.
  • Privacy and the General Data Protection Regulation (GDPR) I and II.
  • National Security Framework.
2 ECTS 12h
+
Blended learning
Security Governance
  • Cybersecurity governance frameworks and models.
  • Strategic management of cybersecurity.
  • Optimisation of resources, obtaining benefits and reporting.
  • Cloud computing governance model.
3 ECTS 21h
+
Blended learning
Risk Analysis and Cyber Resilience
  • Cyber resilience.
  • Information security and privacy standards.
  • Analysis and management of risks and their methodologies.
  • Organisation of information security.
  • Security aspects of business continuity.
  • Cybercrime.
3 ECTS 18h
+
Blended learning
Design, Development and Implementation
  • Security architecture.
  • Control design (physical and logical).
  • Role management.
  • Network architecture.
  • Cloud controls and exposed services.
  • SAP architectures.
4 ECTS 30h
+
Blended learning
Information Systems Audit
  • Information systems audit process.
  • IT governance and management.
  • Acquisition, development and implementation of information systems.
  • Information systems operations and business resilience.
  • Protection of information assets.

2 ECTS 12h
+
Blended learning
Cybercrisis Management
  • Fundamentals of crisis management and complex crisis management systems and tools.
  • Cyber crisis management in public administration.
  • Cybercrisis management in the company.
1 ECTS 6h
+
Blended learning
Cybersecurity Trends II
  • Cybersecurity conferences.
6 ECTS 12h
+
Blended learning
Proyecto Final de Postgrado
  • Final project tutored by a project's director expert in the field.
Degree
University-specific Expert Diploma in Cybersecurity Planning and Management, Issued by the Universitat Politècnica de Catalunya. Issued in accordance with the provisions of Article 7.1 of Organic Law 2/2023, of 22 March, on the University System; Article 36 of Royal Decree 822/2021, of 28 September, which establishes the organisation of university education and the procedure for quality assurance; and Articles 2 and 8 of the Amendment to the Regulations for Continuing Education Programmes, approved by Agreement CG/2025/02/35, of 25 March, of the Governing Council of the UPC. To obtain this qualification, it is necessary to hold a prior university degree equivalent to level 2 of the Spanish Qualifications Framework for Higher Education (MECES). Otherwise, the student will receive a certificate of completion of the programme issued by the Fundació Politècnica de Catalunya. (See details appearing on the certificate).
Range of modules
This postgraduate course is part of the training track for the continuing education master's degree in Cybersecurity Management . The continuing education master's degree programme is organized into the following modules. If you don't wish to take the entire continuing education master's degree you can sign on one or several modules.
Postgraduate course:
relation Continuing education master's degrees:
relation Postgraduate courses:

Learning methodology

The teaching methodology of the programme facilitates the student's learning and the achievement of the necessary competences.



Learning tools
Participatory lectures
A presentation of the conceptual foundations of the content to be taught, promoting interaction with the students to guide them in their learning of the different contents and the development of the established competences.
Practical classroom sessions
Knowledge is applied to a real or hypothetical environment, where specific aspects are identified and worked on to facilitate understanding, with the support from teaching staff.
Solving exercises
Solutions are worked on by practising routines, applying formulas and algorithms, and procedures are followed for transforming the available information and interpreting the results.
Case studies
Real or hypothetical situations are presented in which the students, in a completely participatory and practical way, examine the situation, consider the various hypotheses and share their own conclusions.
Success stories
Outstanding business knowledge and experiences with high added value acquired during an outstanding professional career are presented and shared.
Tutorship
Students are given technical support in the preparation of the final project, according to their specialisation and the subject matter of the project.
Assessment criteria
Attendance
At least 80% attendance of teaching hours is required.
Level of participation
The student's active contribution to the various activities offered by the teaching team is assessed.
Solving exercises, questionnaires or exams
Individual tests aimed at assessing the degree of learning and the acquisition of competences.
Work out projects
Studies on a specific topic, by individuals or groups, in which the quality and depth of the work is assessed, among other factors.
Completion and presentation of the final project
Individual or group projects in which the contents taught in the programme are applied. The project can be based on real cases and include the identification of a problem, the design of the solution, its implementation or a business plan. The project will be presented and defended in public.
Work placements & employment service
Students can access job offers in their field of specialisation on the My_Tech_Space virtual campus. Applications made from this site will be treated confidentially. Hundreds of offers of the UPC School of Professional & Executive Development employment service appear annually. The offers range from formal contracts to work placement agreements.
Virtual campus
The students on this postgraduate course will have access to the My_ Tech_Space virtual campus - an effective platform for work and communication between the programme's students, lecturers, directors and coordinators. My_Tech_Space provides the documentation for each training session before it starts, and enables students to work as a team, consult lecturers, check notes, etc.

Teaching team

Academic management
  • Serral Gracià, René
    Serral Gracià, René
    info

    D. in Computer Science from the Universitat Politècnica de Catalunya (UPC). Associate professor in the Department of Computer Architecture at the UPC. He has more than fifteen years of experience in teaching networks, operating systems and cybersecurity. Co-founder and principal engineer of Clevernet. Currently Vice-Dean of Business Relations at the Faculty of Computer Science of Barcelona (FIB). He has participated in more than ten European and Spanish projects in the area of cybersecurity and networks.
Teaching staff
  • Pegueroles Vallés, Josep
    info
    /
    PhD in Telecommunications Engineering (UPC). Currently, he teaches at ETSETB, where he is full professor of the Telematics Engineering department. He develops his research within the framework of the Information Security Group: security protocols in communications networks, digital forensic analysis and response to cyber security incidents. Specialization by COIT and Telecos.cat in IT expert. Principal Investigator of various technological transfer and research projects at the national and international level.
  • Renom Vilaró, Albert
    info

    Computer Engineer from the Faculty of Informatics of Barcelona (FIB). He has been working as a Project Manager for the inLab Fib, where he has been involved since 2009, but has been working at the Universitat Politècnica de Catalunya (UPC) since 1997. His role, within the inLab, is mainly that of Scrum Master . He has participated in different R & D & I projects with public and private entities related in the fields of statistics, collaborative environments, web development, mobile applications, geographic information systems (GIS) and most recently Intel Artificial intelligence (AI) and natural language processing. Since 2018 he has been an associate professor in the Department of Services and Information Systems Engineering (ESSI), where he teaches the subject of Software Project Management.

  • Serral Gracià, René
    info

    D. in Computer Science from the Universitat Politècnica de Catalunya (UPC). Associate professor in the Department of Computer Architecture at the UPC. He has more than fifteen years of experience in teaching networks, operating systems and cybersecurity. Co-founder and principal engineer of Clevernet. Currently Vice-Dean of Business Relations at the Faculty of Computer Science of Barcelona (FIB). He has participated in more than ten European and Spanish projects in the area of cybersecurity and networks.

Associates entities

Collaborating partners
  • Eyesight Forensics, S.L.
  • Grail Cyber Tech SL
  • RDI network

Career opportunities

  • Security manager of an IT services department.
  • Cybersecurity manager of critical infrastructures and IT service providers.
  • Compliance manager.
  • Manager of consultancy services and cybersecurity auditing in a specialized company.
  • Expert in cybercrimes (lawyers and criminologists).

Testimonials & news

Testimonials

+

Request information or admission

Information and guidance:
Isabel de la Fuente Larriba
(34) 93 115 57 51
Request received!
After we have registered your request, you will receive confirmation by email and we will be in touch.

Thank you for your interest in our training programmes.
Error
Due to an error in the connection to the database, your submission has not been processed. Please try again later, phone us on (34) 93 112 08 08, or send us an email at: webmaster.fpc@fpc.upc.edu
You have exceeded the maximum size of the file
Your details are not registered in the staff database.
You can register by filling out the form.
Please check your payment details. The platform has returned an error.
You can make the payment again without re-entering the data.

Name:

Programme: Cybersecurity Planning and Management

Fee: €4,700 €3,995(ENROL WITH A 15% DISCOUNT UNTIL DECEMBER 15!)

Submit and make the payment
  • If you have any doubts.
  • If you want to start the registration procedure.
How to start admission
To start the enrolment process for this programme you must complete and send the form that you will find at the bottom of these lines.

Next you will receive a welcome email detailing the three steps necessary to formalize the enrolment procedure:

1. Complete and confirm your personal details.

2. Attach any additional required documentation, whenever this is necessary for admission.

3. Pay €110 in concept of the registration fee for the programme. This fee will be discounted from the total enrolment fee and will only be returned when a student isn't admitted on a programme.

Once the fee has been paid and we have all your documentation, we will assess your candidacy and, if you are admitted on the course, we will send you a letter of acceptance. This document will provide you with all the necessary information to formalize the enrolment process for the programme.





  date protection policy

* Mandatory fields

Basic information or first layer on data protection

Controller

Fundació Politècnica de Catalunya (FPC).

Purpose of processing

Respond to requests for information from the data subjects on training activities managed or carried out by the FPC.

Establishment or maintenance of the academic relationship with the data subject.

Send information on the activities of the FPC.

Legitimation

Data subject's consent.

Legitimate interest in the development of the academic relationship.

Addressees

No assignments or communications.

Rights

Access, rectification, erasure, restriction, object and data portability.

Data protection officer contact details

info.dpo@fpc.upc.edu

Additional information

Privacy policy of our website.

Storage limitation

Privacy policy of our website.

Payment services

In the event that the data subject enters into a formal relationship with the FPC, the data subject authorises and consents to the charge, thereby expressly waiving the right to a refund of the charge.

ENROLMENT CONDITIONS OF THE FUNDACIÓ POLITÈCNICA DE CATALUNYA

Introduction

The Fundació Politècnica de Catalunya (FPC), with tax identification number G60664000, registered in the Register of Foundations of the Government of Catalonia under no. 834, designs, promotes and manages the continuing education programmes of the Universitat Politècnica de Catalunya (UPC), as well as other training activities it promotes. The academic regulation of the UPC's continuing education programmes is set out in Agreement CG/2025/02/35, of 25 March, of the Consell de Govern, which approves the update of the amendment to the regulations governing continuing education programmes. And Articles 36 and 37 of Royal Decree 822/2021, of 28 September, which establishes the organisation of university education and the procedure for ensuring its quality. The UPC Social Council approves the price of continuing education programmes, as well as discounts, grants and ancillary services for each academic year.


Provision, knowledge and acceptance of the Enrolment Conditions

Reading and accepting these Enrolment Conditions is an essential requirement for studying at the FPC, as they constitute the basis of the training services contract that participants sign electronically with the FPC. These Enrolment Conditions are available to users on the Transparency Portal: . These Conditions are applicable to all courses taught by the FPC, with the exception of those aimed at other university institutions and public and private entities, which shall be governed by the legal instruments binding on the participating institutions.


Admission and registration fees

The admission process may require the advance payment of registration fees; this amount will be deducted from the tuition fee once admitted and will only be refunded in the event of non-admission, deferral or non-completion of the course, in the latter case, only if the letter of admission is valid. The admission process concludes with the sending of the admission letter to the participant, which includes the details of the course, the period of study, the tuition fees and the payment deadlines.


Enrolment

The enrolment process is formalised with the first payment of the course fee, whether partial or total. Therefore, this first payment of the course fee corresponds to the signing of the contract for the provision of training services regulated in these Conditions, regardless of whether the total price or any of the agreed payment instalments have been paid in full.

It is the participant's responsibility to find out about discounts on the enrolment fee and to prove that they meet the relevant criteria to benefit from them, always prior to formalising their enrolment; otherwise, they will not be able to benefit from them. Discounts and grants cannot be combined, unless they are not incompatible and this is expressly stated.

The participant declares that they are aware of and accept the calls for applications and the terms and conditions of the financial aid corresponding to the current academic year for which they have applied to be a beneficiary. If the student does not complete or withdraws from the course for which they have received aid, a discount or a grant within the period specified in the corresponding call for applications or in the enrolment document, they must return the amount granted or deducted from the price to the FPC. The provisions of the section on Changes to enrolment in these conditions shall not apply to this participant.

Enrolment is personal and non-transferable, so that once formalised, it shall only entitle the natural person who has been identified as a candidate and, subsequently, as an admitted person to undertake the course of study.

The enrolment fee may be paid in full or in part by third parties, although the right/obligation to follow the training course corresponds to the participant, without the paying party being able to interfere with or prevent the exercise of this right in any way. The foregoing is without prejudice to the FPC's right to prevent the participant from continuing in the cases provided for in the section on Non-payment of the enrolment fee provided for in these Conditions.

The amount paid for enrolment will not be refunded once the study has begun, nor after 14 calendar days from the date of payment. Otherwise, the right of withdrawal may be exercised. The amount paid will only be refunded if the study is postponed or does not take place.

Notwithstanding the above, and on an exceptional basis, the enrolment fee will be refunded if the following circumstances arise:

  • Visa refusal: this must be proven with the letter of refusal and always before the start of the study; and
  • Serious illness or accident of the participant: this must be proven by an official medical certificate, stating the initial date of the illness and the expected period of convalescence, always before the start of the study.

Only in these two cases will the FPC refund the total amount paid by the participant minus 300 euros for academic record processing costs.


Subsidised training

The FPC is not responsible for fulfilling the academic and/or administrative requirements for the contracted training to be subsidised. The participant or the person paying for the training does so at their own risk and exempts the FPC from any liability or compensation.


Change of enrolment

Requests to change enrolment, whether in terms of study or teaching method, must be made within 15 calendar days of the start date of the original course. Requests made after this period will not be accepted. The request will be assessed and its suitability determined on a case-by-case basis. When the change involves an increase in the total enrolment fee, the participant will be responsible for the difference. When the change involves a decrease in the enrolment fee, the difference will be refunded. Once evaluated, and regardless of the outcome of the request, changes to enrolment will incur a cost of €300 for the applicant for the processing of academic records, unless the change is due to causes attributable to the FPC.


Refund of tuition fees

The FPC reserves the right to cancel or postpone a study due to a lack of participants. Affected participants may choose between participating in another study or requesting a refund of the amount paid within one month of notification by the FPC. If no response is received, the amount paid will be used to support other students. The FPC will not provide any additional compensation and/or indemnification in the event of cancellation or postponement of a study programme or changes in its delivery. In the event that the FPC makes changes that do not substantially affect the content of the study programme, the place of delivery, the timetable and/or the start date, the participant will not be entitled to a refund of the registration fee or any additional compensation.


Non-payment of tuition fees

Failure to pay the total or partial amount of the tuition fees within the established deadlines may result in the suspension or termination of the training service under the terms indicated below. The FPC is authorised to take whatever action it deems appropriate to suspend the service; on the one hand, in the academic sphere, by suspending the academic record, denying access to teaching in the classroom (face-to-face or online), limiting access to the virtual campus, not assessing any of the subjects and making it impossible to continue with internship agreements, among other measures; and on the other hand, in the administrative and legal sphere, by undertaking the corresponding claims and actions for compensation.

Students who have outstanding debts with the FPC or who have not passed all the credits necessary to complete their studies before the end date of the course will not be able to obtain their degree or certificate, as applicable. Individuals with outstanding amounts payable to the FPC will not be able to enrol in any new studies offered by the FPC until the outstanding amount has been paid.

Finally, the FPC reserves the right to permanently suspend enrolment (automatic withdrawal), without any obligation to refund any amount, in the following cases:

  • Lack of accuracy and/or validity of the information and documentation provided and failure to respond to documentation requirements;
  • Non-payment of part or all of the enrolment fee within the agreed deadlines;
  • Engaging in any behaviour, expression or content that is defamatory, illegal, offensive or that undermines the values and dignity of individuals (teachers, participants, management staff, etc.) or the good image and reputation of the FPC, whether in physical or virtual environments, including social networks.

Right of withdrawal

Participants in a study may exercise their right of withdrawal for a period of 14 calendar days from the date of enrolment, provided that the study has not yet begun. Therefore, by reading and accepting these Terms and Conditions, participants are informed that once the course has begun or is in progress, the right of withdrawal no longer applies, in accordance with the provisions of Article 103 a) of Law 3/2014 of 27 March, which amends the revised text of the General Law for the Defence of Consumers and Users and other complementary laws, approved by Royal Legislative Decree 1/2007 of 16 November, and related regulations.


Teaching

The place and/or date of teaching may change for academic reasons (changes and adjustments to the calendar, need for additional teaching resources, etc.) and for organisational and logistical reasons (adaptation of spaces). Participants will be notified of any such changes at least 15 calendar days before the start of the course. Specific and temporary changes will be notified in advance.


Right to a degree/certificate

Upon completion of a continuing education master's degree, specialisation diploma or expertise diploma, students are entitled to receive a degree, issued by the rector of the University, for students with a previous university degree equivalent to level 2 of the Spanish Qualifications Framework for Higher Education (MECES), according to a standardised model. Students who do not provide proof of their university degree are entitled to obtain a certificate from the FPC, in accordance with a standard model. Short courses, with a workload of less than 15 ECTS credits, entitle students to obtain a certificate issued by the FPC, according to a standard model; however, if these courses include so-called micro-accreditations, students will obtain a digital accreditation issued by the University and recognised in the countries participating in Europass or equivalent. Degrees are issued in Catalan and English and, at the student's request, in Spanish and English. In the case of joint degrees, the issuance must comply with the provisions of the corresponding collaboration agreement.


Accreditation of university qualifications and other documents

If the required documentation is not not submitted before the last day of study for those degrees that require it, or if it is not authentic and/or sufficient, the degree will not be issued, even if the participant has passed the course.


Dispute resolution

The training services provided by the FPC are, in all cases, subject to private law. Any interpretation or divergence arising from these Terms and Conditions shall be the responsibility of the FPC. In the event of disagreement, the dispute shall be subject to private law and the courts of the city of Barcelona with ordinary civil jurisdiction, with express waiver of any other jurisdiction that may apply.


Belongings in the event of theft

Neither the FPC nor its staff shall be liable for any loss, damage or theft of any type of personal or similar items carried by participants or other occasional users of the facilities, who must pay special attention to their belongings at all times.


Organisation of teaching in exceptional circumstances

The FPC organises teaching in a flexible environment that allows it to adapt to any unforeseen circumstances that may arise, as well as to any regulations that may be established by the authorities. If at any time the authorities (university, health or any other competent body) recommend limiting face-to-face teaching as much as possible, the FPC, in coordination with these authorities, will take the necessary measures to implement this recommendation, and, as a result, teaching activities may become 100% online during the period established in the relevant recommendation, without the need to declare a state of emergency and/or suspend face-to-face teaching activities and/or implement formal lockdown or mobility restriction measures.


Barcelona, 15 October 2025


Send