ICS Practitioners Security Course

Provided by

About the course

The GCT and IISP accredited ICS Practitioners Security Course is designed to provide ICS practitioners with an understanding of the cyber security challenges facing their environments. This knowledge is vital when managing the day to day running of all aspects of security risk for those environments.

The course will show how to protect ICS environments and best identify and support their organisations’ cyber security and risk mitigation/reduction strategies for their ICS environments.

Siker have worked in partnership with the National Cyber Security Centre (NCSC), the Centre for the Protection of National Infrastructure (CPNI) in the UK and leading Critical National Infrastructure (CNI) organisations.

If you are a...Practitioner involved with ICS procurement/implementation/audit/maintenance or part of an ICS environment supply chain and/or people who need full awareness of the security risks to these environments, including:

    Site/Asset User or Operator
    Site/Asset IT/ICS Support engineer
    Site/Asset Physical security/Facilities Management professional

...then this course is for you.

It provides the attendee with the knowledge to fully understand the security risks facing your ICS environments including the Supply Chain. In addition, it discusses how to forward plan to help mitigate and reduce these risks as well as identifying and responding to a cyber incident.


Prerequisites

There are no pre-requisites for this course and no technology is required. A handbook of supporting material is provided.


Delegates will learn how to

The course consists of 2 days (12 CPE credits) of classroom training. Day one covers the current and emerging ICS risk landscape and Day two covers operational security, risk reduction planning and Cyber Incident Management.

By the end of the course, you will be familiar with:

How to identify what current and emerging threats your ICS environments face
Where your ICS environments may be vulnerable
What actions you need to take to secure those environments and help reduce the risk
How to prepare for and handle a cyber security incident in those environments


Outline

Module 1: Background (what is an ICS, what are the threats and vulnerabilities):

ICS description and terminology
ICS Vs IT. Differences and similarities
Threats to ICS
ICS vulnerabilities
Known ICS security incidents

Module 2: Securing ICS (what can be done to secure an ICS):

Secure architecture and design
Securing existing and legacy systems
Security risk management
Operational security
Vendor management
Building security into procurement processes

Module 3: Security Incident Management (what to do when the worst happens and roles and responsibilities):

Security incident identification
Security incident response
Security incident recovery
 Planning and preparation

Module 4: Cyber Incident Exercise

 Cyber interactive exercise

Related article

The Cyber Pulse is QA's new portal to free Cyber content, including on-demand webinars, articles written by leading experts,