The NCSC Certified Training, ICS Practitioners Security Course, which has also been accredited as CIISec Accredited Training, has been designed to provide practitioners with an understanding of the cyber security challenges facing their environments. This knowledge is vital when managing the day to day running of all aspects of security risk for those environments.

The course will show how to protect Industrial Control environments and best identify and support their organisations’ cybersecurity and risk mitigation/reduction strategies for their ICS environments.

Course Contents

Part 1: Background (what is an ICS, what are the threats and vulnerabilities):

  • ICS description and terminology
  • ICS Vs IT. Differences and similarities
  • Threats to ICS
  • ICS vulnerabilities
  • Known ICS security incidents

Part 2: Securing ICS (what can be done to secure an ICS):

  • Secure architecture and design
  • Securing existing and legacy systems
  • Security risk management
  • Operational security
  • Vendor management
  • Building security into procurement processes

Part 3: Security Incident Management (what to do when the worst happens and roles and responsibilities):

  • Security incident identification
  • Security incident response
  • Security incident recovery
  • Planning and preparation

Part 4: Cyber Incident Exercise

  • Cyber interactive exercise