Industrial Control Systems Security Introduction

Prerequisites

There are no prerequisites for this course, however, participants are expected to have a basic understanding of computers and the internet.

Learning Outcomes

• Control systems – closed loop systems
• ICS logic systems – relay, ladder, programmable systems
• ICS security
• Control system vulnerabilities and weaknesses
• ICS technical security controls
• Discoverable systems - countermeasures
• Governance and standards

Course Outline

Module 1 – Introduction to ICS and SCADA

Introduce concepts and function of Industrial Control Systems (ICS) and Supervisory Control and Data Acquisition (SCADA)

• Control systems
  • Closed loop systems
• ICS
  • Relay logic
  • Programmable logic controllers
  • PLC Programming
  • Sequential function charts
  • Ladder logic
  • ICS Network protocols
• SCADA
• ICS Security

Module 2 – Introduction to Industrial Control Systems Security

• When control systems go wrong
• Critical national infrastructure (CNI)
  • Centre for the protection of national infrastructure (CPNI)
• Vulnerable systems
• Case study – STUXNET, Black Energy
• Not all ICS systems are designed with security in mind
• ICS common vulnerabilities
• Visible & discoverable ICS systems
• Risk management
• Defence in depth modified Purdue Model
• Typical ICS technical security controls
• Governance regulations
• Security standards