Jeffrey Shearer
Certified InstructorIANS Research Faculty Member at IANS
Specialities
Industrial Control Systems Security

Experience SANS training through course previews.
Learn MoreLet us help.
Contact usBecome a member for instant access to our free resources.
Sign UpWe're here to help.
Contact UsIndustrial Control Systems Security

Jeffrey Shearer approaches ICS cybersecurity from a direction few instructors can claim: forty years of designing, architecting, and implementing industrial and distributed control systems before ever stepping into a security classroom. As a SANS Certified Instructor and co-author of SANS ICS612: ICS Cybersecurity In-Depth and SANS ICS310: ICS Cybersecurity Foundations, he teaches students learning to protect the very kinds of systems he spent his career building, across automotive, food and beverage, mining, oil and gas, water and wastewater, chemicals, and pharmaceuticals. He currently owns Gray Man Cyber, where he works with clients across industrial sectors.
Much of Shearer's career was spent with Rockwell Automation and various OEMs, accumulating experience across nearly every phase of the automation lifecycle. Unlike most ICS security professionals, his foundation includes mechanical, hydraulic, and pneumatic systems alongside the automation technologies that control them. A career highlight is research that led to an advanced control algorithm for managing hydraulic pressure and velocity profiles via PLC, work that resulted in his first patent and influenced Rockwell Automation's specialized I/O module development. When he discusses securing a PLC or HMI in the course, he understands what is inside it and how it was designed to behave.
Shearer holds the Certified Information Systems Security Professional (CISSP) and Project Management Professional (PMP) certifications, credentials that reflect both his security depth and his experience managing complex technical programs. He is also a faculty member of the SANS Technology Institute, an NSA-designated Center of Academic Excellence in Cyber Defense. He came to the SANS instructor community after taking SANS courses himself and describes the certification process as rigorous but worthwhile. His course content is built on a conviction that ICS security training must include direct, hands-on engagement with real devices, not abstract concepts alone.
Shearer's teaching philosophy is straightforward: to secure something, you need to understand what it is and how it works. In the class, he bridges the ICS knowledge gap by pairing digestible instruction with hands-on access to real equipment, watching students tackle increasingly complex problems as the course advances. Outside of work, he holds a private pilot license and even rebuilt a 1972 Piper Cherokee 140, getting it re-certified by the FAA. He is also a certified martial arts instructor.
Here are upcoming opportunities to train with this expert instructor.
Explore content featuring this instructor’s insights and expertise.
Discover how the new ICS310: ICS Cybersecurity Foundations course is transforming the way professionals enter the critical field of ICS/OT cybersecurity. The world relies on critical infrastructure for all aspects of daily life, and sectors across the board have integrated Industrial Control Systems (ICS) and Operational Technology (OT) into their key operations. This evolution has created a pressing need for a uniquely skilled, diverse workforce equipped with expertise in engineering, operations, IT/OT, and cybersecurity.

In this session, learn from Armis Field CTO, Steve Gyurindak, how your organization can overcome data security hurdles without compromising critical infrastructure or existing security solutions.

SANS의 산업 제어시스템(ICS) 코스의 저자이며 국제적으로 유명한 Tim Conway와 Jeff Shearer이 핵심 인프라 및 프로세스 환경에서 근무하는 사이버보안 실무자들이 ICS 환경을 보호하고 위협 및 취약점 식별 방법을 익혀야 함에 있어 실무 경험과 전문 교육의 중요성에 대해 설명합니다. Jeff와 Tim은 ICS 환경을 지원하고 작업하는 모든 실무자님들이 접하게 될 공통 요소 및 자산 유형과 ICS 전문가들이 추구해야 하는 다양한 지식 영역에 대해 논의하고자 합니다.

Bergabunglah dengan para pakar global terkemuka dan instruktur pelatihan SANS ICS, Tim Conway dan Jeff Shearer, yang akan membahas perlunya pengalaman langsung dan pelatihan terfokus bagi praktisi keamanan siber yang bekerja di sektor infrastruktur vital dan lingkungan processing untuk mengidentifikasi ancaman dan kerentanan serta metode untuk mengamankan lingkungan ICS.

SANSのICSに関するコースを開発しているTim ConwayとJeff ShearerによるWebcastを開催します。TimとJeffは重要インフラやプロセス環境に携わるサイバーセキュリティ人材の実践的な経験や集中的なトレーニングの必要性について議論します。ICSの環境で働いていたり、サポートしたりしている方が関わる一般的な要素と資産の種類や、このコミュニティにいる専門家が知っておくべき様々な知識に関して説明します。

ความจำเป็นของประสบการณ์ที่ได้จากการลงมือปฏิบัติงานจริง และการฝึกอบรมแบบเจาะจงหัวข้อสำหรับผู้ที่ทำงานในสาย Cybersecurity ที่ต้องทำงานเกี่ยวกับ Critical Infrastructure การระบุภัยคุกคาม และข้อบกพร่องของระบบ กระบวนการทำให้ ICS ปลอดภัย Tim และ Jeff จะอภิปรายเกี่ยวกับ องค์ประกอบพื้นฐานของ ICS และชนิดของอุปกรณ์ที่จะพบกับใน ICS และระบบสนับสนุน

As ransomware attacks continue to impact organizations around the world, and with recent events like the colonial pipeline impacts, we are seeing more and more attacks that have an adjacent or direct impact on Operational Technology environments. As ransomware attacks continue to rise, how should companies think about the cyber to physical impacts to their OT environments? Organizations responsible for operating and maintaining critical infrastructure environments need to consider the steps they should be pursuing right now before a potential attack occurs, establish and implement procedures on how or if they should operate their systems during an attack, and what actions need to be taken after an attack. Tim Conway & Jeff Shearer will discuss how organizations responsible for operating & maintaining critical infrastructure environments need to consider the following: Steps to pursue before a potential attack Procedures to implement during an attack Actions necessary to take after an attack

Review relevant educational resources made with contribution from this instructor.