Introduction to Industrial Automation Security and the ISA/IEC 62443 Standards (IC32C)

Length: 1 day
CEU Credits: 0.7
Course Hours: 8:00 a.m. - 4:00 p.m.
Certification of Completion: A Certificate of Completion indicating the total number of CEUs earned will be provided upon successful completion of the course.

Description:

"It gave me a general overview of how to setup security measures." 
- Donald Peck, Utility SCADA Supervisor

Understanding how to secure factory automation, process control, and Supervisory Control and Data Acquisition (SCADA) networks is critical if you want to protect them from viruses, hackers, spies, and saboteurs.

This seminar teaches you the basics of the ISA/IEC 62443 standards and how these can be applied in the typical factory or plant. In this seminar, you will be introduced to the terminology, concepts, and models, as well as the element of creating a cybersecurity management system will be explained along with how these should be applied to industrial automation and control systems.

You will be able to:

  • Discuss why improving industrial security is necessary to protect people, property, and profits
  • Define the terminology, concepts, and models for electronic security in the industrial automation and control systems environment
  • Define the elements of the ANSI/ISA-62443-2-1 (ANSI/ISA-99.02.01-2009)- Security for Industrial Automation and Control Systems: Establishing an Industrial Automation and Control Systems Security Program
  • Define the core concepts of risk and vulnerability analysis methodologies
  • Define the concepts of defense in depth and the zone/conduit models of security
  • Explain the basic principles behind the policy development and key risk mitigation techniques
  • Explain why improving industrial security will be necessary to protect people, property, and profits

You will cover:

  • Understanding the Current Industrial Security Environment: What is Electronic Security for Industrial Automation and Control Systems? | Trends in Security Incidents
  • How IT and the Plant Floor are Different and How They are the Same
  • Current Security Standards and Practices
  • Creating A Security Program: Critical Factors for Success/Understanding the ANSI/ISA-62443-2-1 (ANSI/ISA-99.02.01-2009) - Security for Industrial Automation and Control Systems: Establishing an Industrial Automation and Control Systems Security Program
  • Risk Analysis: Business Rationale |Risk Identification, Classification, and Assessment
  • Addressing Risk with Security Policy, Organization, and Awareness:  CSMS Scope | Organizational Security | Staff Training and Security Awareness | Business Continuity Plan | Security Policies and Procedures
  • Addressing Risk with Selected Security Counter Measures: Personnel Security | Physical and Environmental Security | Network Segmentation | Access Control: Account Administration, Authentication, and Authorization
  • Addressing Risk with Implementation Measures: Risk Management and Implementation | System Development and Maintenance | Information and Document Management | Incident Planning and Response
  • Monitoring and Improving the CSMS: Compliance and Review | Improve and Maintain the CSMS 

Includes ISA Standards:

  • ANSI/ISA-62443-1-1 (ANSI/ISA-99.00.01-2007) - Security for Industrial Automation and Control Systems Part 1: Terminology, Concepts & Models
  • ANSI/ISA-62443-2-1 (ANSI/ISA-99.02.01-2009) - Security for Industrial Automation and Control Systems: Establishing an Industrial Automation and Control Systems Security Program
  • ANSI/ISA-62443-3-3 - Security for Industrial Automation and Control Systems: System Security Requirements and Security Levels

Not sure this particular course is for you?

pre-instructional survey is available for you to evaluate your level of understanding of the course material and to show you the types of questions you'll be able to answer after completing the course.