Cyber Security for Industrial Automation (ICS/SCADA) and OT

Security for industrial automation and critical infrastructure is a hot topic. This 4-day industrial (cyber)security training is fully focused on the security approach for your ICS, SCADA and DCS systems. After completing this training, you will have acquired more than excellent knowledge for managing industrial (cyber)security within your own organisation. You can set up and implement policies in accordance with national and international laws and regulations. You will learn how to arm your production network or process installation against cyber attacks, based on the IEC 62443 cybersecurity guideline for industrial automation and control systems and numerous other guidelines and standards. Complying with and implementing the new European NIS2 Directive on cybersecurity will also be an important subject in this training.

During the training, the setting-up and implementation of a well-functioning (cyber)security environment of Industrial Control Systems (ICS) will be discussed. As ICS systems are increasingly integrated with IT networks, practical security recommendations are made to improve the security of both the organisation and the IT infrastructure. The successful integration of risk management and Industrial Control Systems (ICS) and the ICS security architecture are also important parts of this highly topical training.

There are no specific requirements for delegates wishing to attend the Cybersecurity for Industrial Automation and OT training. However, a basic knowledge of computer networking, industrial communication networks and (cyber)security concepts would be recommendable.

The 4-day training on Cybersecurity for Industrial Automation (ICS/SCADA) and OT will be held at a higher educational level.

DAY I
Security for industrial automation and critical infrastructure

• Trends in ICT and Industrial Control Systems (ICS)
• Relevant standards and frameworks (NIS2, IEC 62443, NIST SP 800-82)

Overview of Industrial Control Systems (ICS)

• Industrial Control Systems (ICS): overview
• Supervisory Control and Data Acquisition (SCADA) systems
• Distributed Control Systems (DCS)
• Examples and topologies

ICS – risk management and assessment

• Threats and vulnerabilities
• Potential impact
• The risk management process
• Embedding risk management in your organisation
• Special points of attention regarding Industrial Control Systems (ICS)

DAY II
ICS security

• How to develop a business case
• Required expertise and skills
• Defining a scope
• Policy, standards and procedures
• Implementing a framework for risk management
• Inventory of ICS components
• Setting up a project plan
• Defining measures
• Awareness

Day III
ICS security architecture

• Logical network segmentation
• Firewalls
• TCIP/IP protocol suite
• Defense-in-Depth architecture
• RESTful APIs and JSON (JavaScript Object Notation)
• Process integration
• Specific SCADA and ICS protocols
• Remote Support Access (RSA)
• Single points of failure
• Redundancy and fault tolerance
• Access control
• Monitoring and logging
• Incident response

DAY IV
ICS security implementation and operation

• Integration of risk management and Industrial Control Systems (ICS)
• Awareness
• Audits
• Configuration management
• Business Continuity Management (BCM)
• Maintenance
• Protection of storage media
• Physical security
• Personnel safety
• Acquisition
• Integrity of systems and information
• Program management
• Privacy controls