ICS and SCADA Security Essentials
SCADA security training that goes past vocabulary and into the equipment. You work with supervisory control and data acquisition (SCADA) systems, distributed control systems (DCS) and the protocols tying them together, then design segmentation an engineering team will actually accept.
Every control taught here is chosen for plants that cannot take downtime. Nothing in this course assumes you can reboot a controller on demand.
- Duration
- 8 weeks
- Format
- Live online, instructor-led
- Prerequisites
- ICS and OT Cyber Security Foundations
- Class size
- Capped at 12 learners
What you will be able to do
- Read Modbus and DNP3 traffic and explain what each transaction does to the process
- Design a zone and conduit model for a plant and defend it to an engineering team
- Specify industrial demilitarized zone firewall rules that pass data without exposing controllers
- Choose between patching, compensating controls and accepting risk on a device by device basis
- Harden an engineering workstation with application allow listing without breaking vendor software
- Build a brokered remote access path for vendors that replaces standing accounts
- Produce a control system asset register from passive capture and configuration files
- Write a change request that survives a plant change control board
Course outline
6 modules
- The PLC scan cycle, memory layout and logic execution
- Ladder logic and function blocks read from a security point of view
- RTUs and intelligent electronic devices in substations and pipelines
- DCS controllers and redundancy schemes
- Safety instrumented systems and why they stay separate
What you need before you start
- ICS and OT Cyber Security Foundations, or equivalent site experience
- Working knowledge of TCP/IP, VLANs and firewall rule structure
- A laptop able to run a packet analyser and two small virtual machines
- Around five hours a week outside class for the labs
Who this course is for
- OT security analysts and engineers at utilities, pipelines and processing plants
- Network engineers who own plant floor switching and firewalls
- Control system integrators fielding security questions from clients
- IT security staff extending an enterprise programme into operations
- Consultants assessing industrial sites
Where this leads
Prepares you for
Certified SCADA Security Architect
Awarded by Infosec Institute
Course content lines up with the Certified SCADA Security Architect syllabus, a vendor neutral option for OT practitioners. That credential is granted by Infosec Institute after their exam, not by us, and you register with them directly.
Questions about this course
More in industrial control systems and ot security
Entry-levelICS and OT Cyber Security Foundations
Entry level ICS security training in Toronto covering how OT differs from IT, the Purdue model, field devices and control system basics.
6 weeks · live online
Contact for pricingView outline
Entry-levelICS Security for Leaders
An OT cyber security course in Canada for managers: frame industrial risk, fund a programme, plan for incidents and talk straight with plant operations.
4 weeks · live online
Contact for pricingView outline
CoreNERC CIP Critical Infrastructure Protection
NERC CIP training for bulk electric system entities: interpret the standards, build audit evidence and run a programme that is defensible as well as compliant.
8 weeks · live online
Contact for pricingView outline
Ready to launch your cyber security career?
Join the next live online cohort. No experience required, just bring the curiosity.