SEC536: Adversarial AI - Penetration Testing AI Systems


Experience SANS training through course previews.
Learn MoreLet us help.
Contact usBecome a member for instant access to our free resources.
Sign UpWe're here to help.
Contact Us
Threats to operational environments are escalating, and so are regulatory expectations. For energy, utilities, and industrial organizations, cyber incidents can disrupt physical processes, threaten safety, and halt operations.
Technology alone cannot absorb this risk. Resilience depends on people with the skills to defend operational systems under real-world conditions.


SANS Fellow Tim Conway, co-author of ICS456, ICS310, and ICS612, blends decades of hands-on ICS/OT security and compliance expertise with ongoing frontline consulting, helping students turn complex industrial challenges into practical skills.
Learn more

SANS Fellow and Dragos CEO Robert M. Lee, author of ICS515 and FOR578 and co-author of ICS310, teaches from landmark industrial cyber investigations, turning real adversary tradecraft into visibility, detection, and response skills in OT.
Learn moreWatch the ICS Command Briefing 2026 to access insights from SANS experts on how energy, utilities, and industrial organizations are preparing for the next wave of operational cyber threats before they disrupt operations.

This paper sets forth the five most relevant critical controls for an ICS/OT cybersecurity strategy that can flex to an organization's risk model, and provides guidance for implementing them.
