Industrial Control Systems Security
Explore content featuring this instructor’s insights and expertise.
Join SANS ICS expert Dean Parsons for practical guidance on strengthening defenses, improving visibility, and maintaining operational integrity across industrial environments. This session will focus on real-world approaches to reducing risk while keeping safety and availability front and center.
The SANS 2026 Government Forum, presented in partnership with Carahsoft, brings together federal, state, and local government cybersecurity professionals to explore the evolving threat landscape and the solutions shaping secure, mission-ready environments.
Join SANS ICS expert Dean Parsons for practical guidance on strengthening defenses, improving visibility, and maintaining operational integrity across industrial environments. This session will focus on real-world approaches to reducing risk while keeping safety and availability front and center.
重要インフラを守り抜く：高脅威環境におけるICS防衛戦略
Top ICS/OT vendors will showcase cutting-edge tools for anomaly detection, ransomware containment, and engineering-aware industrial ICS/OT incident response—proving how defenders can protect the systems that make, move, and power our world.
Join SANS ICS expert Dean Parsons for practical guidance on strengthening defenses, improving visibility, and maintaining operational integrity across industrial environments.
The first minutes of an incident determine containment or crisis. Join this SANS virtual roundtable to learn how leading teams align across SOC, cloud, OT, and leadership to execute faster under pressure.
The Winter Cyber Solutions Fest: Utilities and Critical Infrastructure Forum is a virtual event built specifically for utility asset owners, technology vendors, operators' staff, engineers, and cybersecurity professionals responsible for defending the ICS/OT systems that make, move, and power our world.
Grounded in current SANS research and frontline operational experience, this one-hour session brings together Tim Conway, Robert M. Lee, Jason D. Christopher, and Dean Parsons to deliver leadership-level guidance for practitioners and executives.
Cybersecurity policies are the foundation of any governance program, setting expectations for workforce behavior and establishing the rules that support compliance and risk management.
In ICS/OT environments, network visibility isn’t just a buzzword, it’s the foundation for safe and effective cybersecurity, incident response, and operational/engineering troubleshooting.
This free virtual event brings together cybersecurity professionals, utility operators, government stakeholders, and industry experts to explore the unique challenges and emerging threats facing the energy and water sectors.
Attackers are increasingly targeting critical infrastructure—including power grids, water systems, heavy manufacturing, and oil and gas—with a deep and sophisticated knowledge of ICS components, industrial protocols, and engineering processes.
The first training module for the energy sector provides an overview of the elements of an ICS Specific Incident Response Plan, how it differs from a standard IT Incident Response Plan, and how to prepare your team to respond.
This 5th and final control involves understanding which cyber digital controls are deployed and what device operating conditions aid in risk-based vulnerability management decisions to patch vulnerabilities.
This control involves ICS-aware network architectures that support effective segmentation, visibility of control system traffic for analysis, log collection, asset identification, industrial DMZs, and enforcement for process communication integrity and reliability.
Module 3 of the training relates to continuous network security monitoring of the ICS networked environment, with protocol-aware tool sets and system-to system interaction analysis capabilities used to inform engineering of potential risks to the control, view, and safety of operations.
This 4th control involves the identification and inventory of all remote access points and allowed destination environments, on-demand access and MFA authentication where possible, and jump host platforms to provide control and monitoring points within secure segments.
Industrial Control Systems (ICS) and Operational Technology (OT) environments are what makes, moves, and powers our world. ICS/OT are the backbone of critical infrastructure, from energy and water systems to manufacturing and transportation. As cyber threats targeting our critical environments intensify, understanding ICS/OT-specific security controls and appropriate budgets has become a pressing challenge.
Module 3 of the training focuses on network visibility and monitoring. The training module provides your operational and IT team with a foundational knowledge of techniques and benefits for this critical control. This control requires human intelligence and resources. Mature organizations use network visibility tools across their systems to identify opportunities for efficiency and vulnerabilities. Network visibility and monitoring benefits include safety asset identification, engineering asset identification, vulnerability detection, operational safety and reliability, and engineering troubleshooting.