Security of industrial systems and OT environments

This one-day course provides introduction into the world of cyber security of industrial, control and specific systems and OT environments. During it, trainees will learn about relevant standards in this area, and about effective approaches to secure OT/ICS systems and networks.

Contents

1. Basic cyber security and OT terminology (PLC, RTU, SCADA, HMI, historian, …)
2. OT security standards, frameworks and models
   
   • Purdue Enterprise Reference Architecture
   • ISA/IEC 62443
   • NIST SP 800-82
3. Security specifics of ICS and specific systems
   
   • ICS security on HW and SW level
4. Security architecture and operations in OT networks and specific environments
   
   • Differences between IT and OT networks
   • Threat modeling and attack surface management in OT networks and environments
   • Remote and local access management
   • Common industrial protocols, their weaknesses, vulnerabilities and options for securing them
5. Log management and security monitoring in OT networks
6. Security assessments and penetration tests of OT devices and environments
7. Vulnerability management in OT networks
8. Effective security incident management in OT environments
9. Regulatory requirements for cyber security of industrial and specific systems and environments
   

The course is aimed at

• OT operators and engineers
• Developers of ICS and specific systems
• Technical specialists who regularly come into contact with OT/ICS
• Security specialists from organizations operating their own OT infrastructure
• SOC analysts responsible for monitoring OT environments
• Incident responders from organizations operating their own OT infrastructure
• Anyone, who would like to learn about cyber security in OT environments
  

Prerequisites

• Knowledge of IT networking and common network protocols
• Knowledge of basic cyber security vocabulary
• Awareness of common cyber security tools and solutions (e.g., FW, IPS/IDS, SIEM, …)
  

Additional requirements

A computer with internet access is required to participate in an online version of the course.

Materials

Trainees will receive an electronic version of the study materials.

Duration

1 day

Currently available training dates

If the currently available dates don’t suite you, or if you are interested in a private run of the training for your organization, don’t hesitate to contact us.