OT110: OT Security Professional

Agenda:

Systems, components and networking in industrial production

• Typical systems and components, their structure and function
• Communication protocols and network architecture
• Connection to other networks
• Purdue reference architecture

Particularities and challenges of cybersecurity in production

• Roles and responsibilities in OT
• Process of a cyberattack in IT and OT
• Known incidents and typical threats
• Vulnerabilities in OT components, protocols and architectures
• Impact of cybersecurity incidents in OT environments
• Transferability and limitations of existing IT security approaches

Established standards and best practices

• IEC 62443 standard series (and their interaction with ISO 27001/2)
• NIST cybersecurity framework
• NIST SP 800-82
• CIS critical security controls
• BSI™ ICS security compendium

Network architecture and security

• Network segmentation and industrial DMZ
• Secure implementation of communication between zones
• Remote access
• Securing WIFI networks
• Handling of mobile devices / data carriers, modems, etc.

System/Application security

• Hardware and software inventory
• Vulnerability and patch management
• System hardening
• Security software
• Backup and recovery

Access and access control

• Secure authentication and authorization
• Physical security

Attack detection and incident response

• Methods and technology for attack detection
• Security incident management
• Incident response phases and plans

OT security assessments

• Security audit / gap analysis
• Risk assessment
• Vulnerability assessment

IT security management in production

• Organization and responsibilities
• Policies, concepts and processes
• Training and awareness
• Continuous improvement

Objectives:

Production facilities are increasingly exposed to cybersecurity risks. The training OT110 OT Security Professional provides the required knowledge to assess and improve cybersecurity in the context of industrial production.

Participants learn among other things

• to understand the fundamental architecture of industrial production facilities and other OT systems
• to appropriately classify threats and assess the threat landscape
• to identify vulnerabilities and understand their (potential) impact

Target audience:

The course OT110 OT Security Professional is targeted at:

• Production managers
• Engineers and technicians from the automation technology domain
• OT managers
• IT and cybersecurity experts

Prerequisites:

To be able to follow the course content and learning pace of the training OT110 OT Security Professional effectively, the following knowledge is required:

• Basic IT and network knowledge
• Basic knowledge in IT security

Description:

Modern production facilities are increasingly exposed to cybersecurity risks due to their high degree of networking and the integration of standard IT components. At the same time, established IT security measures cannot be applied without restrictions in this environment, so that specific approaches have been established in industrial cybersecurity.

The training OT110 OT Security Professional teaches the principles and best practices of industrial cybersecurity and thus the required knowledge and skills to assess and improve cybersecurity in the context of industrial production. You will learn in which form established procedures from IT security can also be applied in Operational Technology (OT), but also which specifics must be considered in the OT environment and how this is possible with established OT security approaches.

The focus of the course is on industrial production facilities. However, the content taught is applicable not only in production operations, but also in other areas (e.g. energy and water supply, building automation). The training delivers the content through theoretical elements, hands-on exercises, discussion of real-world examples and live demos.