OT Security: ICS & SCADA, Purdue Model, MITRE ICS, & Pentest

Secure Industrial Control Systems (ICS/SCADA): A Comprehensive Cybersecurity Course

This course provides a deep dive into industrial cybersecurity, equipping you with the skills to protect critical infrastructure from evolving threats. We bridge the gap between traditional IT security and the unique challenges of Operational Technology (OT). You'll gain practical expertise through a blend of foundational knowledge, industry-recognized frameworks, robust governance practices, and hands-on lab exercises.

Here's what you'll explore:

• Understanding the OT Threat Landscape: Learn how the OT threat landscape differs significantly from traditional IT security. We'll cover the specific vulnerabilities and attack vectors targeting industrial environments.
• ICS/SCADA Architectures & Segmentation: Master ICS/SCADA architectures and the Purdue model for effective network segmentation. Understand how to isolate critical systems and minimize the impact of potential breaches.
• Threat Modeling with MITRE ATT&CK: Apply threat modeling techniques using the MITRE ATT&CK framework to identify and prioritize potential threats to your OT systems.
• SANS Critical Controls for OT: Implement the five SANS critical controls for OT – essential security practices for protecting industrial environments.
• Secure OT Network Design & Governance: Design secure OT network architectures with effective segmentation and robust governance policies.
• OT Security Processes: Learn to implement key OT security processes, including:
  • Asset Onboarding: Securely integrating new devices and systems.
  • Change Management: Managing changes to OT systems to prevent disruptions and vulnerabilities.
  • Firewall Rule Governance: Establishing and maintaining effective firewall rules.
  • Patch Handling: Implementing secure patch handling procedures for OT devices.
• Hands-on OT Penetration Testing Lab: Gain practical experience with a guided OT penetration testing lab using LabShock. Includes step-by-step instructions for setting up a secure lab environment at home.

By the end of this course, you will be able to:

• Differentiate IT and OT Security: Clearly understand the fundamental differences between IT security and OT security strategies.
• Model, Design, and Govern Secure OT Environments: Develop the skills to create and maintain secure OT environments through effective modeling, design, and governance.
• Map Attacks to MITRE ATT&CK: Connect real-world OT attacks to specific MITRE ATT&CK tactics for improved threat analysis and response.
• Build and Operate an OT Security Lab: Establish and utilize your own OT security lab for safe and practical testing.

This course is ideal for:

• IT Security Professionals Transitioning to OT: A pathway for IT security professionals seeking to expand their expertise into the rapidly growing field of OT security.
• Plant Engineers & OT Staff: Enhance your cybersecurity skills and protect critical industrial operations.
• Students & Beginners: An excellent starting point for those eager to explore the exciting field of industrial cybersecurity.

No prior OT experience is required. We begin with the fundamentals and progressively build towards advanced, hands-on OT security topics.