Energizing Cyber Resilience

Together, ONE-ISAC and SANS provide energy sector professionals and organizations with the tools, training, and intelligence needed to counter evolving threats..

Learn More

Strengthening Cyber Resilience in Energy

ONE-ISAC (Oil and Natural Energy Information Sharing and Analysis Center) is a trusted cybersecurity hub dedicated to protecting the exploration, production, transportation, refining, and delivery systems within the oil and natural energy sector. Its mission is to serve as a central point of coordination and communication, enabling timely and trusted sharing of cyber threat intelligence among industry stakeholders. ONE-ISAC operates on four foundational cornerstones: anonymized sharing to promote candid information exchange; authenticated information to ensure accuracy and credibility; an industry-owned and operated model that aligns with the unique needs of the sector; and protection from Freedom of Information Act (FOIA) disclosure, while maintaining compliance with anti-trust laws. Through its secure platform, ONE-ISAC facilitates near real-time access to enriched intelligence and supports both network and industrial control system (ICS) defense efforts. Members benefit from a confidential, structured environment governed by the Traffic Light Protocol (TLP), receiving sensitive threat data classified as TLP Green, Amber, Amber+ Strict, and Red. This enables informed decision-making and rapid response to emerging threats across the energy infrastructure landscape.

The partnership between ONE-ISAC and the SANS Institute represents a powerful step forward in securing critical infrastructure within the oil and natural energy sectors. As part of ONE-ISAC’s Allied Partner Program, SANS brings decades of global cybersecurity leadership, delivering access to cutting-edge training, GIAC certifications, cyber ranges, and expert resources tailored to the unique challenges facing energy organizations.

This collaboration empowers ONE-ISAC members with world-class tools and training to strengthen their cyber defense capabilities—especially in industrial control systems (ICS) and operational technology (OT). With threats to energy infrastructure on the rise, the combined efforts of ONE-ISAC and SANS ensure that energy professionals are equipped with the knowledge, skills, and intelligence needed to protect the systems that power our economy and communities.

Powering Cybersecurity Through Training and Collaboration

The ONE-ISAC and SANS Institute partnership brings world-class cybersecurity training and resources directly to organizations in the oil and natural energy sectors. This collaboration supports frontline defenders with the tools, knowledge, and credentials needed to address evolving cyber threats and secure critical infrastructure.

ONE-ISAC members receive access to:

SANS Long Courses – Deep technical training in ICS, cyber defense, and incident response
Live Online and OnDemand modalities – Flexible delivery for operational teams
GIAC Certifications – Industry-recognized credentials validating hands-on expertise
NetWars Continuous – Interactive ranges for ongoing skill development
Security Awareness Training – Programs designed to reduce human risk
White Papers and Corresponding Webcasts – Expert insights into energy sector threat trends

Together, SANS and ONE-ISAC are committed to strengthening cyber resilience across the energy ecosystem through actionable education, trusted certifications, and sector-specific intelligence.

Powering Cybersecurity Through Training and Collaboration

Resources

Prioritized Industrial Cyber Defense in Oil and Gas ICS310: ICS Cybersecurity Foundations Module 1: ICS-Specific Incident Response Module 2: Defensible Control System Network Architecture Module 3: ICS Network Visibility and Monitoring Module 4: Secure Remote Access Module 5: Risk-Based Vulnerability Management

Slide 1 of 4
SANS Cybersecurity Courses
Water program participants have access to 50 cybersecurity courses to choose. These in-depth courses provide hands-on training for a range of expertise and skillsets – from those new to cyber to Infosec experts and general management. SANS Technical Curriculums include:
- Cloud Security - Cyber Defense - Cybersecurity Leadership - Digital Forensics & Incident Response (DFIR) - Industrial Control System Security (ICS) - Offensive Operations
Eligible organizations purchase discounted credits at the time of order. The credits can be redeemed by the learner for a specific course. These courses may be taken Live Online or OnDemand within one year of purchase.
Browse Courses
Slide 2 of 4
GIAC Certifications
GIAC is the world’s most recognized cybersecurity certification. These valuable credentials indicate mastery of a skillset.
Participants may opt to take a certification exam after course completion. Those who pass the rigorous exam are awarded a GIAC credential.
Eligible organizations who purchase through the SANS program may purchase GIAC exams at the time of training order or purchase them separately. These credits will be redeemed by the learner upon completion of the coursework.
Learn More
Slide 3 of 4
NetWars Continuous
Practice cybersecurity skills online with NetWars Continuous. This cyber range platform offers interactive simulations to test a learner’s depth of knowledge and response.
NetWars licenses are available to purchase at a discount through the program. Add them to your cart at the time of order and redeem within one year of purchase.
Learn More
Slide 4 of 4
SANS Security Awareness Solutions
Build and mature your security awareness program with a comprehensive, data-driven approach to training for everyone in your organization.
Learn More Contact Us

ICS/OT Insights From The Experts

SANS 2025 ICS/OT Survey Webcast & Forum: The State of ICS/OT Cybersecurity

On this webcast, we will explore results from our 2025 survey. We will cover specific topics with an eye toward providing asset owners and operators with clear benchmarks for improving cyber threats, vulnerabilities, and risks across industrial environments.

Webinar

FeaturesJason Christopher