FAQ

Yes. Advance Master programmes welcome general engineers and graduates from various backgrounds, provided their professional project is consistent with the field of the Advance Master.

No. The programme is open to candidates with a solid technical foundation, even if their cybersecurity experience is limited.

A basic understanding of digital systems is recommended, but the programme begins with a refresher (GP1) to harmonize learners’ knowledge.

No. A basic understanding (scripts, algorithmic logic) is sufficient. The MS primarily focuses on risk analysis, architecture security, industrial systems knowledge, and incident management.

Yes, provided you have significant experience in IT, digital project management, or industrial environments.
The MS-MCSI programme is not suitable for profiles lacking a technical background, but welcomes:

• engineers not specialized in cybersecurity,
• IT, OT, or data professionals,
• digital project managers familiar with technical systems.

A review of your application allows us to verify suitability with the technical level expected at the start of the program.

It is not mandatory, but it is an advantage. The programme is designed to accommodate candidates with no prior experience in PLCs, SCADA, or industrial systems. OT fundamentals are integrated from the initial weeks.

It is not mandatory for Bac+5 degree holders, but highly valued. For Bac+4 degree holders, at least three years of professional experience is required.

Yes. Advance Master programs are open to international candidates holding the equivalent of a 5-year or 4-year higher education degree, according to the admission criteria.

Advance Master programs are open to candidates with a Bac+5 degree (engineer, Master 2) or a Bac+4 degree with at least three years of professional experience.

The Advance Master (MS) programme is a post-Master’s level qualification accredited by the Conférence des Grandes Écoles.
It is aimed at Master’s graduates or Bachelor’s graduates with experience, and offers highly specialized training, immediately valuable in the job market.

A good command of French is necessary to follow the courses. International candidates must demonstrate a minimum B2 level.

The training begins every year in October.

It is not mandatory.
However, specifying areas of interest demonstrates that you have considered your professional project.
The final topic is developed with the school and the company.

It includes the following steps:

1. Application Submission
2. Application Review
3. Interview
4. Provisional Admission
5. Company Search (if professional training contract)
6. Funding Validation
7. Final Admission

Yes. Enrollments are intentionally limited to ensure individualized support.

Yes. You may apply again by strengthening your application or professional project.

CV, transcripts, copies of diplomas, proof of experience, and administrative documents requested in the application.

This is a 45-minute interview designed to assess the consistency of your professional project, your motivation, and your suitability for the programme.

• Applications are open from November to the end of August.
• Term begins: October.

Ideally, as soon as applications open, because support for finding a company begins upon eligibility.

Yes, through continuing education or as part of a skill development project supported by your employer.

Yes. The programme includes incident detection, attack analysis, and remediation in an OT environment. Students can join an industrial SOC or a specialized CERT, a rapidly expanding field.

Yes. Eligible candidates receive support:

• assistance with revising CVs and cover letters,
• access to a network of partner companies,
• distribution of offers,
• coaching for company search,
• support until contract signing.

No.
You are first provisionally admitted, then assisted in finding your host company.

Yes. The Advance Master is based on a work-study program or a long-term corporate assignment.

Final admission is subject to the signing of an agreement or a contract with a company.

An alternating schedule with extended periods allowing for strong technical immersion, varying depending on the companies but generally 1 to 3 weeks school / 3 to 6 weeks company.

Assignments may include:

• risk analysis and compliance (NIS2, IEC 62443…),
• securing industrial systems (SIEM, segmentation, OT firewalls…),
• audits and penetration tests on industrial architectures,
• security monitoring (OT SOC),
• architecture and hardening of industrial environments,
• development or updating of OT cybersecurity policies.

The assignments cover the entire ICS / OT / IT chain.

Long-term internship, professionalization contract, or employee contract, depending on profiles and situations.

Students primarily join:

• large industrial groups (energy, transport, defense, chemistry…),
• companies operating critical infrastructure,
• IT service companies specializing in cybersecurity,
• engineering or consulting firms in OT & cybersecurity,
• solutions providers (industrial software publishers, integrators, OEMs).

Specific rules apply, particularly concerning access to the professionalization contract depending on status.

Yes. Personalized support is offered to identify suitable solutions.

Yes, for candidates meeting the legal criteria (age, status, length of stay in France for non-EU citizens).

Depending on your status:

• OPCO (work-study contract or skills development plan),
• company funding,
• Pôle Emploi assistance,
• regional aid (depending on the region),
• individual funding.

• Individual: around 10,000 €
• Company-sponsored: 12,000 € to 12,500 €

Yes. The MS includes:

• real attack simulations (OT ransomware, PLC intrusion, MITM attacks, etc.),
• Blue Team/Red Team exercises,
• industrial systems forensics,
• incident management in near real-world conditions.

Yes, thanks to DIWII, the technology platform of the Digital Campus Region:

• automated lines,
• robots, cobots, AGV,
• IIoT gateways, industrial networks,
• supervisors, sensors and actuators,
• complete production systems.

DIWII is itself an industrial cybersecurity case study, which offers a unique application environment.

Yes. The programme The MS-MCSI specializes in industrial cybersecurity (OT) and focuses on protecting production environments: PLCs, industrial networks, IIoT, cyber-physical systems, supervision, and business continuity.

Unlike general IT-oriented Master’s programs (networks, systems, cloud, cryptography), this MS develops:

• a deep understanding of industrial systems,
• OT-specific risks,
• ICS-specific attacks and protections,
• industrial frameworks (IEC 62443, NIS2 OT, ANSSI),
• operational skills on a real industrial demonstrator (DIWII).

This is rare and sought-after expertise.

Both.
The training provides:

• solid foundations in industrial cybersecurity (OT networks, protocols, cryptography, attacks, detection…),
• strategic leadership skills, essential for coordinating the resilience and security of an industrial organization.

Yes. The MS MCSI programme is based on key international frameworks:

• IEC 62443,
• NIST Cybersecurity Framework,
• ISO 2700x,
• ANSSI (PSSI, OT recommendations),
• NIS2 Directive / LPM.

Students learn to apply them in practical cases.

Yes. Each training course is regularly updated to keep pace with scientific, technical, and regulatory developments.

Each programme is structured into modules or educational groups, combining instruction, practical application, and a professional project.

Yes. The programme is demanding and requires regular commitment in addition to work placements.

It is a collaborative applied project that leverages acquired skills and prepares for project management.

A corporate assignment addresses an operational company need; a professional thesis formalizes a problem statement and an in-depth analysis, assessed by a jury.

An active pedagogy: case studies, a guiding project, professional speakers, practical workshops, site visits.

Yes. Many candidates use the program to transition into a new field of expertise.

Yes, including:

• energy (nuclear, hydraulic, electrical grids),
• transportation (rail, aeronautical),
• defense,
• water & environment,
• manufacturing & Industry 4.0.

Critical sectors are the leading recruiters in OT cybersecurity.

Yes. The training develops technical, methodological and managerial skills that enable progression to leadership positions.

Yes. Thanks to their dual technical and strategic expertise, graduates quickly progress towards:

• Industrial Security Manager (CISO OT),
• OT Crisis Management Manager,
• Industrial Site Cybersecurity Manager,
• Group Cybersecurity Coordinator.

Yes. The MS-MCSI program benefits from:

• the Conférence des Grandes Écoles (CGE) label,
• strong industrial integration via the DIWII and Campus Région du Numérique platforms,
• partnerships with the automotive, aeronautics, defense, robotics, and manufacturing sectors.
  Companies actively seek this type of profile.

Graduates typically become:

• Industrial Cybersecurity Engineer,
• OT / ICS Security Consultant,
• Industrial SOC Analyst,
• OT Cybersecurity Architect,
• Industrial Cybersecurity Manager,
• OT Cybersecurity Project Manager,
• Industrial Cybersecurity Auditor.

These are highly sought-after positions, both in France and internationally.

Very high. Most graduates find employment within months of completing their training.

• Manufacturing industry (automotive, aerospace, electronics, energy)
• Critical Infrastructure Operators (OIV)
• Defense & Space
• OT Integrators and Cybersecurity Solution Providers
• Industrial companies undergoing digital transformation

Yes. Mines Saint-Étienne assists international students with their arrival and integration procedures.

Yes, provided they have previously completed one year of studies in France (Law of March 7, 2016).

It depends on the programme. Some MS courses include international projects, conferences or theses that can be conducted abroad.

No, but the program regularly hosts international speakers and case studies related to global contexts.

Yes, a large part of the training takes place on this campus, a unique ecosystem in France dedicated to digital technology and the industry of the future.

Yes: expert conferences, professional workshops, themed days, workshops, site visits.

Yes, thanks to the alternating schedule and the flexibility provided for working professionals.

DIWII is a comprehensive industrial demonstrator where students can:

• analyze real industrial networks,
• test vulnerabilities,
• configure OT protections,
• experiment with emerging technologies (edge, IIoT, industrial 5G…).

An ideal training ground for the future cybersecurity manager.

Yes. Graduates can join the Mines Saint-Étienne network and its thematic communities.

Libraries, workspaces, technology platforms, catering, student life, sports facilities.

At the Campus Lyon – Charbonnières-les-Bains, at the heart of the Campus Région du Numérique, within the DIWII ecosystem, dedicated to the industry of the future.

Yes. The support includes:

• academic tutoring,
• assistance with company placement,
• company monitoring,
• supervision of the professional thesis,
• support with administrative procedures.