Fundamental principles and concepts of SCADA and SCADA security
- Overview of SCADA systems and industrial control systems
- Components of distributed control systems and programmable logic controllers
- Operational technology versus information technology environments
- Key security principles applicable to SCADA systems
- Regulatory and compliance considerations in critical infrastructure
- Security challenges unique to SCADA environments
Industrial control systems characteristics, threats, and vulnerabilities
- Architecture and communication protocols in ICS environments
- Common threat actors and attack vectors targeting SCADA systems
- Vulnerability types within operational technology networks
- Risk scenarios affecting critical infrastructure
- Consequences of cyber incidents in industrial environments
- Case studies of SCADA and ICS security breaches
Designing and developing an ICS security programme based on recognised guidance
- Overview of NIST SP 800-82 guidance for ICS security
- Establishing governance and security policies for SCADA
- Risk assessment methodologies for operational technology
- Asset identification and classification
- Security awareness and training in ICS environments
- Integration of security into system lifecycle management
Network security architecture for SCADA systems
- Segmentation and zoning strategies
- Defence-in-depth architecture principles
- Secure remote access and communication controls
- Firewalls, intrusion detection, and monitoring in ICS networks
- Secure configuration and hardening of SCADA components
- Managing third-party and vendor access
Implementation of security controls for SCADA systems
- Technical security controls for industrial networks
- Access control and identity management in SCADA environments
- Patch and vulnerability management strategies
- Incident response planning for ICS
- Backup, recovery, and business continuity considerations
- Integration of physical and cyber security controls
Developing resilient and robust systems
- High availability design principles
- Redundancy and fault tolerance in SCADA systems
- Secure system design and secure coding practices
- Monitoring and logging strategies
- Evaluating system performance and resilience
- Continuous improvement of SCADA security posture
Security testing of SCADA systems
- Security testing methodologies for industrial environments
- Vulnerability assessments and penetration testing considerations
- Testing limitations in operational technology systems
- Managing testing activities without disrupting operations
- Reporting and remediation planning
- Aligning testing results with risk management processes
Exams and assessments
Participants will sit the PECB Certified Lead SCADA Security Manager examination, which meets the requirements of the PECB Examination and Certification Programme.
- Certification and examination fees are included in the course price
- Participants receive over 450 pages of training material, including practical examples
- An attestation of course completion worth 31 continuing professional development credits is issued to attendees
- In case of exam failure, one retake is available within 12 months at no additional cost
Hands-on learning
This instructor-led course includes:
- Scenario-based exercises focused on risk identification and mitigation
- Group workshops to design secure SCADA network architectures
- Case study analysis of real-world industrial incidents
- Exam-style practice questions to reinforce knowledge
