ICS203 - ICS Practitioners Security

There are no pre-requisites for this course and no technology is required. A handbook of supporting material is provided.

The course consists of 2 days (12 CPE credits) of classroom training. Day one covers the current and emerging ICS risk landscape and Day two covers operational security, risk reduction planning and Cyber Incident Management.

By the end of the course, you will be familiar with:

• How to identify what current and emerging threats your ICS environments face
• Where your ICS environments may be vulnerable
• What actions you need to take to secure those environments and help reduce the risk
• How to prepare for and handle a cyber security incident in those environments

Course Outline

Module 1: Background (what is an ICS, what are the threats and vulnerabilities):

• ICS description and terminology
• ICS Vs IT. Differences and similarities
• Threats to ICS
• ICS vulnerabilities
• Known ICS security incidents

Module 2: Securing ICS (what can be done to secure an ICS):

• Secure architecture and design
• Securing existing and legacy systems
• Security risk management
• Operational security
• Vendor management
• Building security into procurement processes

Module 3: Security Incident Management (what to do when the worst happens and roles and responsibilities):

• Security incident identification
• Security incident response
• Security incident recovery
• Planning and preparation

Module 4: Cyber Incident Exercise

• Cyber interactive exercise