45+ InfoSec Courses at SANS Network Security 2018 in Las Vegas! Save up to $200 thru 8/22.


To attend this webcast, login to your SANS Account or create your Account.

An Inside Look at the Newly Updated ICS515 Course

  • Thursday, February 15th, 2018 at 10:30 AM EST (15:30:00 UTC)
  • Robert M. Lee
This webcast has been archived. You can view the webcast presentation and download the slides by logging into your SANS Portal Account or creating an Account. Click the Register Now button after you have logged in to view the Webcast.

You can now attend the webcast using your mobile device!


Industrial IoT (IIoT) - What are the biggest threats and how are you dealing with them? Take the SANS Industrial IoT Survey and enter to win a $400 Amazon gift card.

Monitoring for, investigating, and responding to industrial security threats requires a combination of numerous skill sets and an understanding of the impact these threats can have as well as real-world examples of what threats have done before. The SANS ICS515 - ICS Active Defense and Incident Response course is the only course in the world that combines threat intelligence, monitoring and investigations, and incident response procedures to give defenders the appropriate skills and knowledge needed to defend their organizations from targeted cyber threats. This class has run now for three years absorbing feedback and best practices throughout the community as well as new case-studies related to threats such as CRASHOVERRIDE and TRISIS. Now, the course is undergoing it's first major change which further solidifies the knowledge gained over the past years as well as an entirely new hands-on lab scenario that takes students through a multi-control system lab range with 24+ hands on labs throughout the five day course.

Prospective ICS515 students should attend this webcast to learn about what changes have been made to the course and what they can expect to take away from the course. It is a hands-on real-world use-cases focused class with practical and applicable guidance for taking any industrial environment and moving it from a defensible ICS to a defended one. Come learn about the class, the updates, and what to expect.

Speaker Bio

Robert M. Lee

Robert M. Lee is the CEO and Founder of the industrial (ICS/IIoT) cyber security company Dragos, Inc. He is also a non-resident National Cybersecurity Fellow at New America focusing on policy issues relating to the cyber security of critical infrastructure. For his research and focus areas, Robert was named one of Passcode's Influencers, awarded EnergySec's Cyber Security Professional of the Year (2015), and inducted into Forbes' 30 under 30 for Enterprise Technology (2016).

A passionate educator, Robert is the course author of SANS ICS515 - "ICS Active Defense and Incident Response" with its accompanying GIAC certification GRID and the lead-author of SANS FOR578 - "Cyber Threat Intelligence" with its accompanying GIAC GCTI certification. He may be found on Twitter @RobertMLee

Need Help? Visit our FAQ page or email webcast-support@sans.org.

Not able to attend a SANS webcast? All Webcasts are archived so you may view and listen at a time convenient to your schedule. View our webcast archive and access webcast recordings/PDF slides.