Cyber Security for Automation, Control, and SCADA Systems (IC32E)

Click here to view list of course offerings and to register.

CEU Credits: 2.1
Course Hours: Online Course - Refer to Syllabus

ISA’s CyberU online instructor-led training courses offer the benefit of a high quality ISA training course with the added advantage of studying at your own pace in the office, at home, or while traveling.

This online course utilizes online training modules, additional text materials, online evaluations, and e-mail discussions. Students will have access via email to an instructor and an opportunity to participate in live Q&A sessions with the instructor and other class participants.

This CyberU course runs for seven (7) weeks. You will have access to seven online modules for the web/audio sessions. Each module takes approximately 60 minutes. Your course syllabus will guide you through the course modules and provide assignments and the schedule for the live Q&A sessions.

Description

The move to using open standards such as Ethernet, TCP/IP, and web technologies in supervisory control and data acquisition (SCADA) and process control networks has begun to expose these systems to the same cyberattacks that have wreaked so much havoc on corporate information systems. This course provides a detailed look at how the ANSI/ISA99 standards can be used to protect your critical control systems. It also explores the procedural and technical differences between the security for traditional IT environments and those solutions appropriate for SCADA or plant floor environments.

You will be able to:

Identify the principles behind creating an effective long term security program
Interpret the ANSI/ISA99 industrial security guidelines and apply them to your operation
Learn the basics of risk and vulnerability analysis methodologies
Explain the principles of security policy development
Define the concepts of defense-in-depth and zone/conduit models of security
Analyze the current trends in industrial security incidents and methods hackers use to attack a system
Know the principles behind the key risk mitigation techniques, including anti-virus and patch management, firewalls, and virtual private networks

You will cover:

Each course modules has been pre-recorded by your instructor so that you can access on your schedule. Each module is a web/audio session that takes approximately 60 minutes.

Week/Module 1: Defining Industrial Cyber Security

Covers the concepts of physical, operational, and electronic security; and defines CyberSecurity as it relates to industrial automation and control systems

Week/Module 2: Risk Assessment

Covers the concept of risk and how safety plays a part in assessing possible consequences from a cyberattack

Week/Module 3: Threats and Vulnerabilities

Covers "social engineering" and how outsiders gather information to enable attacks and to physically enter your secured areas

Week/Module 4: Security Policies, Programs, and Procedures

Covers the creation and deployment of policies, standards, and procedures and how they are a critical aspect of a security program

Week/Module 5: Understanding TCP/IP, Hackers, and Malware

Covers the basics of the IP networking architecture and how computers are addressed and how IP delivers information to computers and TCP/UDP to complete the delivery to specified applications using port numbers

Week/Module 6: Technical Countermeasures

Covers the technical countermeasures and technology that can be employed to protect your systems, detect and remove malware, and block hacking attempts; and explains the technologies such as firewalls, proxy servers, VPN, and VLAN and how they relate to industrial automation systems

Week/Module 7: Architectural & Operational Strategies

Covers ways to segment and isolate your process automation systems in order to increase their reliability and CyberSecurity

Course Materials:

Course noteset with slides from course modules and syllabus
ISA Text: Industrial Network Security by David J. Teumin
ISA Standards:
- ANSI/ISA99.00.01-2007 - Security for Industrial Automation and Control Systems Part 1: Terminology, Concepts, and Models
- ANSI/ISATR99.00.01-2007 - Security Technologies for Industrial Automation and Control Systems
- ANSI/ISA99.02.01-2009 - Security for Industrial Automation and Control Systems: Establishing an Industrial Automation and Control Systems Security Program

Features of ISA CyberU online course:

Online Pre-recorded Course Modules

Your instructor has pre-recorded each course module so that you can access the course presentations on your schedule. Each module is a web/audio session that takes approximately 60 minutes.

Ask the Expert

Interact with your expert instructor via email throughout the course and through scheduled live Q&A sessions. You can expect a reply to your email within 24 hours. This email address is active during the entire course duration.

The Q&A sessions provide an opportunity for you and your classmates to speak one-on-one with the instructor. You will have an opportunity to ask any questions you may have about the course material and interact with your fellow classmates.

Class Discussions

You will be invited to subscribe to a course listserve that includes course participants. You can use this listserve to post questions and share experience relevant to the course with other class members.

Course Assignments and Exams

Take the course pre-test before you begin studying the course material to get a better understanding of areas that you will want to focus on more during the course.
Homework assignments for all modules will be indicated on the syllabus. The homework assignments are designed to help expand your understanding of the course material.
Complete the final exam for the course in order to receive Continuing Education Units (CEU) credit. The final exam will be taken and scored online. You must receive at least 80% on the course exam to receive CEU credit and certificate of completion.