Securing ICS: Becoming an Industrial Cyber Security Professional

The Securing ICS: Becoming an Industrial Cyber Security Professional course has been designed to provide those at IT/OT Operator or equivalent level with an enhanced understanding of today’s cyber security challenges facing their ICS environments. This knowledge is vital when managing the day-to-day running of all aspects of security risk for those environments.

This course will show students how to combine the disciplines of IT, Operational Technology (OT), Physical Security, and Facilities Management to best support their organisations’ Cyber Security and risk reduction strategies for ICS environments across multiple industry sectors. In addition, this course will provide students with the knowledge to begin the process of obtaining GICSP certification.

Audience

Anyone working to secure an ICS environment as well as non-ICS staff who need to understand ICS terminology and how it differs from their current roles would greatly benefit from this course.

This includes roles such as:

• Site/Asset Operators
• Procurement/Contract Staff
• Supply Chain Staff
• Site/Asset IT Support Engineers
• Site/Asset Physical Security/Facilities Manager Staff
• Integration/Third-party professionals

The course follows a whole lifecycle approach for designing, implementing, monitoring and decommissioning an ICS with security in mind and covers the following modules:

• ICS Basics (for non-OT attendees)
• Cyber Security essentials (for OT attendees)
• ICS Security governance and security risk
• ICS Architecture
• ICS Hardening
• Access Management
• Physical Security
• ICS Security Assessments
• ICS Security Monitoring
• Cyber Incident Management
• Cyber Tabletop exercises
• Help prepare a study plan and exam preparation (*If the student wishes to continue with studies with a view to obtaining GICSP certification, please note that the cost of the exam is not included in the cost of this course).

CyBOK Knowledge Areas

This course aligns with the following Knowledge Areas:

• Cyber-Physical Systems
• Distributed Systems Security
• Risk Management and Governance
• Security Operations and Incident Management

There are no prerequisites for this GICSP training aside from a configured laptop; configuration instructions will be provided.

All attendees should have a good understanding of either basic IT or OT skills.

A course handbook will be provided; it can be used during the open-book exam.

This course can be used as the foundation for further study in preparation for the GIAC Global Industrial Cyber Security Professional (GICSP) certification.