Course Overview
Securing Operational Technology (OT) vs. IT environments requires a different perspective and approach. Each OT system is uniquely engineered to an organization's operational needs, so how should we go about securing these systems?
Through our immersive operations environment, ICS612 will take you from theory to practice over this five-day ICS security training course. You will learn to identify operational vulnerabilities and build defenses in the roles of engineering, operations, and red and blue teams. You will navigate from PLC and HMI operations to the complexities of advanced IT and OT security architecture and monitoring, understanding how threat actors attack operations through ICS systems and personnel. You will reinforce these skills in hands-on lab exercises and conclude with an incident response scenario investigating and recovering classroom operations.
Emerge with a thorough understanding of how to analyze an unknown system to secure and maintain operational resilience.
A Comprehensive Deep Dive into Securing Industrial Environments
Hands-on labs drive this course’s key concepts and learning objectives. The in-classroom lab setup was developed to simulate a real-world environment where a controller is monitoring/controlling devices deployed in the field along with a field-mounted touchscreen Human Machine Interface (HMI) available for local personnel to make needed process changes. Utilizing operator workstations in a remotely located control center, system operators use a Supervisory Control and Data Acquisition (SCADA) system to monitor and control the field equipment. Representative of a real ICS environment, the classroom setup includes a connection to the enterprise, allowing for data transfer (i.e., Historian), remote access, and other typical corporate functions.
This advanced ICS security training course moves students through a variety of exercises that demonstrate how an attacker can exploit the unfortunately common vulnerability of a poorly architected ICS, and how defenders can secure and manage the environment effectively.
What You'll Learn
- Learn active and passive methods to safely gather information about an ICS environment
- Identify vulnerabilities in ICS environments
- Determine how attackers can maliciously interrupt and control processes and how to build defenses
- Implement proactive measures to prevent, detect, slow down, or stop attacks
- Understand ICS operations and what "normal" looks like
- Build choke points into an architecture and determine how they can be used to detect and respond to security incidents
- Manage complex ICS environments and develop the capability to detect and respond to ICS security events
Business Takeaways
- Enhance operational resilience in critical infrastructure
- Reduce risk of costly production outages
- Protect intellectual property and operational data
- Meet regulatory compliance requirements
- Improve threat detection capabilities
- Build security into system architecture
- Develop incident response capabilities for OT incidents
