Experience SANS training through course previews.
Learn MoreLet us help.
Contact usBecome a member for instant access to our free resources.
Sign UpWe're here to help.
Contact UsIndustrial Control Systems Security
Tyler Webb is a Principal Penetration Tester at Dragos, Inc. and the founder of Process Impact LLC, where he specializes in offensive security for industrial control systems and critical infrastructure. He is the co-author and instructor for SANS ICS613: ICS/OT Penetration Testing & Assessments. In the classroom, Tyler turns frontline OT assessment work into clear methodologies and hands-on practice so students can operate confidently when testing real plants, pipelines, or substations.
Tyler’s path spans utility operations and offensive security across the power sector and beyond, including research that uncovered issues in widely-deployed Energy Management System software (e.g., CVE-2023-38557, CVE-2023-44120). That experience directly shaped ICS613. The course shows how to plan and execute safe ICS/OT penetration tests and assessments around operational objectives and crown-jewel assets, how to align techniques to the ICS Cyber Kill Chain, and how to communicate results that engineers can act on. In the labs, students work through realistic scenarios in a fully functional DCS range, using a PLC-based student kit they assemble during class and take home to keep practicing the same methods after the course.
Tyler holds certifications including Offensive Security Certified Professional (OSCP), GIAC Exploit Researcher and Advanced Penetration Tester (GXPN), GIAC Response and Industrial Defense (GRID), and GIAC Global Industrial Cyber Security Professional (GICSP). He speaks at community events and industry groups (including DISC, HackTheBox, ONG-ISAC, and the Midwest Reliability Organization), publishes practical walkthroughs at Process Impact, and contributes research and tooling that help teams pressure-test environments without putting operations at risk.
His teaching philosophy is straightforward: understand the mission and the process first, then choose tactics that fit. Tyler emphasizes scoping with operators, selecting techniques that mirror adversary activities while respecting safety and uptime, and building repeatable habits students can defend in front of engineers and leadership alike. When he’s not pentesting or in the classroom, he unwinds outdoors and in the gym—reinforcing that curiosity, discipline, and balance fuel good tradecraft. His aim is simple: give every student practical ways to test, explain, and improve defenses for the systems communities rely on.
Explore content featuring this instructor’s insights and expertise.
Review relevant educational resources made with contribution from this instructor.
