Industrial Control Systems

The examinee will demonstrate an understanding of fundamental ICS concepts, equipment and defensive archtictures and how they relate to more general IT concepts and architectures using Windows and Unix based systems.

The examinee will demonstrate an understanding of traditional information based attacks like SQL injection, information leakage, and password attacks as well as ICS specific attacks against firmware, and protocols like Modbus. They will additionally demonstrate competency in network security monitoring, active defense, threat intelligence and incident response.

The examinee will demonstrate understanding of a progressive and compound understanding of advanced information security techniques and methodologies, including malware and forensics related to ICS systems, NERC CIP regulations, cryptography, and wireless communications.