Industrial Cybersecurity for OT Systems (IEC 62443)
الأمن السيبراني لأنظمة التشغيل الصناعية (IEC 62443)
- Next date
- Available in-house
- Fees from
- —per delegate
- Formats
- In-house training0 sessions
- Duration
- 5 daysCertificate
Overview
Control systems in oil and gas plants were designed to be isolated, but today they are connected to business networks, remote operations centres and vendors' support systems. That connectivity brings real benefits and real exposure: attacks on industrial facilities have shut down pipelines, stopped production and, in some cases, targeted safety instrumented systems. This course explains how to protect operational technology using the IEC 62443 series, the main international standard for industrial automation and control system security. Participants learn how OT differs from IT, how attacks on industrial systems unfold, and how to apply zones and conduits, security levels, risk assessment and defence in depth to a real plant architecture. The course also covers secure remote access, patching and backup in a 24-hour operation, supplier requirements, incident response and the roles that asset owners, integrators and product suppliers play under the standard.
Objectives
- Explain how OT security differs from IT security
- Describe common attack paths against industrial control systems
- Apply the IEC 62443 concepts of zones, conduits and security levels
- Carry out a cybersecurity risk assessment for a plant system
- Specify network segmentation, secure remote access and hardening measures
- Plan patching, backup and incident response for OT
- Define cybersecurity requirements for suppliers and integrators
Who should attend
Control and automation engineers, instrument engineers, OT and IT security staff, HSE and risk professionals, and managers responsible for industrial control systems.
Training methodology
Participants work on a reference architecture of a gas processing plant with DCS, SIS, SCADA and business network connections. They identify assets and threats, draw zones and conduits, assign target security levels and recommend controls. Analyses of real incidents show how attacks progressed and which controls would have stopped them. A tabletop exercise simulates a cyber incident affecting operations, and the course closes with a written assessment. Each participant leaves with a checklist for reviewing their own site.
Programme outline
Day1OT Security Fundamentals
- Industrial control system architectures
- The Purdue model and data flows
- IT and OT priorities compared
- Threat actors and motivations
- Lessons from major ICS incidents
- Overview of the IEC 62443 series
- Practical exercise: mapping a plant architecture
Day2Risk Assessment
- Asset inventory and system under consideration
- Threats, vulnerabilities and consequences
- IEC 62443-3-2 risk assessment process
- Linking cyber risk to process safety
- Security levels: target, capability and achieved
- Practical exercise: risk assessment for a gas plant
- Group review of results
Day3Zones, Conduits and Defence in Depth
- Defining zones and conduits
- Network segmentation and DMZs
- Firewalls and data diodes
- Secure remote access
- System hardening and least privilege
- Protecting safety instrumented systems
- Practical exercise: designing zones and conduits
Day4Operating Securely
- Patch management in continuous operations
- Backup and recovery
- Monitoring and intrusion detection for OT
- Removable media and transient devices
- Supplier and integrator requirements
- Security in projects: from FEED to handover
- Case study: securing a remote operations centre
Day5Incident Response and Programme Management
- OT incident response planning
- Tabletop exercise: cyber incident in operations
- Cybersecurity management systems (IEC 62443-2-1)
- Roles, training and culture
- Audits and maturity assessment
- Personal action plan
- Final assessment
Dates and fees
There are no scheduled dates for this course at the moment. Request it as in-house training, or ask us about the next date.
Certificate
Every delegate who attends the full programme receives a Harfard Technology certificate of completion stating the course title, duration, dates and venue.
Frequently asked questions
Will I receive a certificate?
What is the difference between classroom and online?
Can you run this course for our company?
How do I register?
Related courses
Digital Transformation, AI & SAPDigital Twins and AI for Refineries and Gas Plants
Available in-houseDigital Transformation, AI & SAPPredictive Maintenance with Machine Learning
Available in-houseDigital Transformation, AI & SAP