SEC536: Adversarial AI - Penetration Testing AI Systems
SEC536Offensive Operations, Artificial Intelligence
SANS Community Benefits
Connect, learn, and share with other cybersecurity professionals
Featured ICS/OT Cybersecurity Courses
- Slide 1 of 7
ICS515: ICS Visibility, Detection, and Response
Intermediate ICS515Industrial Control Systems Security
- GIAC Response and Industrial Defense (GRID)
- 6 Days (Instructor-Led)
- 36 CPEs / 36 Hours
- Labs: 22 Hands-On Labs
- GIAC Response and Industrial Defense (GRID)
- 6 Days (Instructor-Led)
- 36 CPEs / 36 Hours
- Labs: 22 Hands-On Labs
- Slide 2 of 7
ICS418: ICS Security Essentials for Leaders
Essentials ICS418Industrial Control Systems Security
- 12 CPEs / 12 Hours (Self-Paced)
- Labs: 12 Hands-On Labs
- 12 CPEs / 12 Hours (Self-Paced)
- Labs: 12 Hands-On Labs
- Slide 3 of 7
ICS613: ICS/OT Penetration Testing & Assessments
NEWAdvanced ICS613Industrial Control Systems Security
- 5 Days (Instructor-Led)
- 30 CPEs / 30 Hours
- Labs: 27 Hands-On Labs
- 5 Days (Instructor-Led)
- 30 CPEs / 30 Hours
- Labs: 27 Hands-On Labs
- Slide 4 of 7
ICS456: Essentials for NERC Critical Infrastructure Protection
Essentials ICS456Industrial Control Systems Security
- GIAC Critical Infrastructure Protection (GCIP)
- 5 Days (Instructor-Led)
- 31 CPEs / 31 Hours (Self-Paced)
- Labs: 23 Hands-On Labs
- GIAC Critical Infrastructure Protection (GCIP)
- 5 Days (Instructor-Led)
- 31 CPEs / 31 Hours (Self-Paced)
- Labs: 23 Hands-On Labs
- Slide 5 of 7
ICS310: ICS Cybersecurity Foundations
Beginner ICS310Industrial Control Systems Security
- 12 CPEs / 12 Hours (Self-Paced)
- Labs: 3 Hands-On Labs
- 12 CPEs / 12 Hours (Self-Paced)
- Labs: 3 Hands-On Labs
- Slide 6 of 7
ICS410: ICS/SCADA Security Essentials
Essentials ICS410Industrial Control Systems Security
- GIAC Global Industrial Cyber Security Professional (GICSP)
- 6 Days (Instructor-Led)
- 36 CPEs / 36 Hours (Self-Paced)
- Labs: 15 Hands-On Labs
- GIAC Global Industrial Cyber Security Professional (GICSP)
- 6 Days (Instructor-Led)
- 36 CPEs / 36 Hours (Self-Paced)
- Labs: 15 Hands-On Labs
- Slide 7 of 7
ICS612: ICS Cybersecurity In-Depth
Advanced ICS612Industrial Control Systems Security
- 5 Days (Instructor-Led)
- 30 CPEs / 30 Hours
- Labs: 31 Hands-On Labs
- 5 Days (Instructor-Led)
- 30 CPEs / 30 Hours
- Labs: 31 Hands-On Labs
Mark Bristow
Director at MITRE’s Cyber-Physical Systems DivisionMark loves the ever-changing landscape of security and views it as a puzzle that must be solved. He especially loves the challenges in ICS security, where the cyber meets the physical. There is no greater success than a safe and effective process.
Lesley Carhart
Technical Director of Industrial Incident Response at DragosLesley is Technical Director of Industrial Incident Response for North America for Dragos and teaches SANS Industrial Control System courses. She's a recognized leader in cybersecurity and has won a number of prestigious awards in the field.
Jason Christopher
Senior Vice President of Cybersecurity and Digital Transformation for Research and Innovation at Energy Impact Partners (EIP)Jason D. Christopher, Energy Impact Partners SVP, teaches ICS456 and co-authors ICS418, turning regulation into safe, reliable OT-supporting programs and metrics to align practitioners and leaders on clear, defensible action.
Upcoming Events
- Slide 1 of 5
The Invisible Clock: Securing OT Assets Against the Quantum Computing Revolution
This session unpacks how those forces are reshaping OT security in practice, and why post-quantum resilience is a programme to start now rather than a problem to schedule later. OT assets have refresh cycles measured in decades, which means the cryptographic decisions made this year will still be live when quantum capability arrives.
WebinarIndustrial Control Systems Security
- 5 Oct 2026
- 17:30 AST
- Silvano Sogus
- Slide 2 of 5
AI Threats to OT and ICS Security: How Industrial Organizations Are Detecting, Defending Against, and Adopting AI in Operational Technology Environments
AI transformed business and IT security. Now it's crossing into OT, bringing the same efficiency gains, the same defensive potential, and the same adversarial capabilities into environments that were never designed to absorb them.
WebinarArtificial Intelligence
- 6 Oct 2026
- 10:30 EDT
- Michael Hoffman & Matt Wiseman
- Slide 3 of 5
The New Priorities for Critical Infrastructure Preparedness
For years, critical infrastructure organizations have built their cybersecurity strategies around a familiar set of assumptions: cyber incidents are isolated events, communications remain available, response resources can scale, mutual aid will arrive, and recovery will be measured in days. Today’s nation-state threat landscape is exposing the limits of those assumptions.
WebinarIndustrial Control Systems Security
- 27 Oct 2026
- 14:00 EDT
- Tim Conway, Robert M. Lee, Brian Harrell + 1 more
- Slide 4 of 5
SANS 2026 State of ICS/OT Security Survey Insights: Industrial Cybersecurity at a Crossroads
Join us to discuss insights from SANS 9th annual State of ICS/OT Security Survey. This trusted industry research captures how organizations across sectors are evolving their industrial cybersecurity strategies in response to regulatory pressures, emerging threats, and operational demands.
WebinarIndustrial Control Systems Security
- 10 Nov 2026
- 10:30 EST
- Jason Christopher
- Slide 5 of 5
2027 SANS State of ICS/OT Security Survey Insights: Prevent by Design
Led by survey author and SANS Instructor Jason Christopher, this virtual event brings together SANS expertise and industry thought leaders to explore findings from the 2027 SANS State of ICS/OT Security Survey.
WebinarIndustrial Control Systems Security- 10 Nov 2027
- 10:30 EST
- Jason Christopher
ICS/OT Insights From The Experts
SANS ICS Command Briefing 2026: Preparing for What Comes Next in Industrial Cybersecurity
Grounded in current SANS research and frontline operational experience, this one-hour session brings together Tim Conway, Robert M. Lee, Jason D. Christopher, and Dean Parsons to deliver leadership-level guidance for practitioners and executives.
Webinar
SANS.edu Graduate Certificate in ICS Security
Protect the systems that power critical infrastructure.
Gain expertise in defending industrial control environments, from power grids to manufacturing lines, with hands-on training in ICS technologies.
- Designed for working InfoSec and IT professionals
- Provides hands-on training in ICS, OT, and critical infrastructure security
- Includes 4 GIAC certifications
- Eligible for VA Education Benefits and most employer tuition assistance programs
ICS security is a specialized subset of OT security, focusing on the industrial systems that control physical processes. While OT security covers a broad range of technologies, ICS security training goes deeper—providing not just OT security fundamentals, but also the critical hands-on skills needed to defend the industrial environments that keep industries running. If you're looking for OT security training, ICS security training delivers that and more.
No—ICS/OT security is essential across industries, from energy and utilities to manufacturing, pharmaceuticals, and transportation. If your business relies on industrial systems to produce, move, or power anything, securing those systems is vital.
Anyone with a passion for securing industrial environments can enter this field. Whether you come from IT, engineering, or operations, SANS training equips you with the knowledge and hands-on skills needed to protect industrial systems.
SANS delivers the most immersive, hands-on ICS/OT security training available. Our courses feature custom-built cyber ranges and hardware kits that replicate real-world industrial environments, allowing students to apply what they learn in realistic scenarios. With world-renowned instructors who are leading practitioners in the field, SANS training prepares you for the evolving threats facing ICS/OT environments like no other program.
Immediately. Our training is built for real-world application, giving you the tools and hands-on experience to strengthen ICS/OT security the moment you return to your organization.
Industrial systems were not designed with cybersecurity in mind, yet they are now prime targets for cyberattacks. The stakes are high—these systems keep industries running, supply chains moving, and nations secure. SANS training empowers defenders with the expertise needed to protect what matters most.