Cyber Security for Industrial Automation (ICS/SCADA) and OT

DAY I
Security for industrial automation and critical infrastructure

• Trends in ICT and Industrial Control Systems (ICS)
• Relevant standards and frameworks (NIS2, IEC 62443, NIST SP 800-82)

Overview of Industrial Control Systems (ICS)

• Industrial Control Systems (ICS): overview
• Supervisory Control and Data Acquisition (SCADA) systems
• Distributed Control Systems (DCS)
• Examples and topologies

ICS – risk management and assessment

• Threats and vulnerabilities
• Potential impact
• The risk management process
• Embedding risk management in your organisation
• Special points of attention regarding Industrial Control Systems (ICS)

DAY II
ICS security

• How to develop a business case
• Required expertise and skills
• Defining a scope
• Policy, standards and procedures
• Implementing a framework for risk management
• Inventory of ICS components
• Setting up a project plan
• Defining measures
• Awareness

Day III
ICS security architecture

• Logical network segmentation
• Firewalls
• TCIP/IP protocol suite
• Defense-in-Depth architecture
• RESTful APIs and JSON (JavaScript Object Notation)
• Process integration
• Specific SCADA and ICS protocols
• Remote Support Access (RSA)
• Single points of failure
• Redundancy and fault tolerance
• Access Control
• Monitoring and logging
• Incident response

DAY IV
ICS security implementation and operation

• Integration of risk management and Industrial Control Systems (ICS)
• Awareness
• Audits
• Configuration management
• Business Continuity Management (BCM)
• Maintenance
• Protection of storage media
• Physical security
• Personnel safety
• Acquisition
• Integrity of systems and information
• Program management
• Privacy controls