Fundamentals of Industrial Control Systems (ICS) Security

This course teaches IT security professionals and industrial control systems(ICS)/operational technology(OT) engineers, interested in ICS/OT security, fundamental knowledge and skills to build and expand an ICS/OT security team.

Learners can become familiar with ICS/OT security concepts, secure architecture, threat models, and ICS/OT security standards and best practices. The course will also discuss today’s security trends and the current threat landscape. Throughout the course, exercises and demonstrations inspired by actual cases, and incidents in the ICS world will help learners advance their knowledge in their day jobs.

Prerequisites: Knowledge of ICS, DCS, SCADA, Modbus, OPC, IP address, and IP packet.

After completing this course, learners should be able to:

• Understand ICS/OT security history, today’s trends, and threat landscape
• Discuss ICS/OT standards and best practices: NIST SP800-82, IEC62443, MITRE ATT&CK for ICS framework
• Describe the Purdue model of architecture, defense in depth, and secure ICS/OT network zoning and segmentation
• Understand the elements of ICS/OT security monitoring and incident response programs
• See how a set of select ICS/OT security tools could be used

IT security professionals and ICS/OT engineers developing an ICS/OT security foundation.

In-classroom or virtual instructor-led training.

• 2 days (in-person delivery)
• 3 days (virtual delivery)

Recommended Windows 7 or higher to install Wireshark and NetworkMiner (free version). Students may use macOS if they can successfully install both Wireshark and NetworkMiner (free version). If not, we recommend installing Windows on a VM.