SEC536: Adversarial AI - Penetration Testing AI Systems
SEC536Offensive Operations, Artificial Intelligence
SANS Community Benefits
Connect, learn, and share with other cybersecurity professionals
Score yourself honestly. Every “unknown” is a finding.
This scorecard is built from the SANS 2026 State of ICS/OT Security Survey — nearly 700 industrial professionals. It is organized under the Five ICS Cybersecurity Critical Controls, the framework many industrial security programs already use to structure priorities and budgets.
Answer each question as your program stands today. You will see the 2026 benchmark for every answer, where your gaps sit, and what would close them.
The Five ICS Cybersecurity Critical Controls
01
ICS-specific incident response
An operations-informed response plan, with exercises built around real-world risk scenarios.
02
Defensible architecture
Visibility, asset inventory, and segmentation that create defensible choke points in the network.
03
ICS network visibility & monitoring
Continuous, protocol-aware monitoring that shows how systems interact, not just whether one was touched.
04
Secure remote access
Every remote access point inventoried, brokered, and authenticated — jump hosts as the control point.
05
Risk-based vulnerability management
Risk-based decisions on which vulnerabilities to patch, mitigate, or simply monitor.
Bonus
2026 supply chain scenario
What happens if your primary automation vendor disappears tomorrow.
Your answers are not submitted or stored. We track anonymous usage, such as how many people finish, but never anything tied to you or your individual answers.
Which best describes you?
This only changes which SANS course is suggested first for each gap. It never changes your questions or your results.
“Unknown” is a real answer here
The SANS ICS 2026 Cyber Resilience Scorecard
Where your organization stands
A self-assessment against the 2026 survey community, not an audit of this organization. Color shows distance from the target; the text under each answer shows where you sit among peers.
Benchmarks are drawn from the 2026 SANS State of ICS/OT Security Survey, answered by 696 industrial professionals, organized under the Five ICS Cybersecurity Critical Controls (Lee & Conway, 2022). Prepared from a self-assessment; figures describe the respondent community, not an audit of this organization.
Target met
Gap
Unknown (a finding in itself)
Descriptive, no target (Q7)
▼ bottom of the scale
Where to build the capability
SANS ICS Security Training
Source: SANS 2026 State of ICS/OT Security Survey, written by Jason D. Christopher. Organized under the Five
ICS Cybersecurity Critical Controls (Robert M. Lee and Tim Conway, SANS Institute white paper, 2022).
Answer scales are condensed from the survey's response options. Benchmarks for Q2, Q7 and Q8 describe organizations that experienced a 2026 incident; the others describe all respondents who answered that question. The “Where you stand” figures use the same bases.
2026 Report: sans.org/webcasts/2026-ics-ot-security-survey-insights-industrial-cybersecurity-crossroads ·
Five Critical Controls white paper: sans.org/white-papers/five-ics-cybersecurity-critical-controls ·
Speak to a SANS Advisor: sans.org/about/contact#connect-with-a-training-advisor ·
SANS ICS Security: sans.org/cybersecurity-focus-areas/industrial-control-systems-security