Version of this course: 2.0
The version of this training course has been superseded by the new version 3.0. The material in this version is only available for previous students to study and review purposes only. The lab exercise and final evaluation have been intentionally removed.
You will be able to:
- Interpret the results of an ICS cybersecurity risk assessment
- Develop a cybersecurity requirements specification (CRS)
- Develop a conceptual design based upon information in a well-crafted CRS
- Explain the security development lifecycle process and deliverables
- Perform a basic firewall configuration and commissioning
- Design secure remote access solution
- Develop system hardening specification
- Implement a basic network intrusion detection system
- Develop a Cybersecurity Acceptance test plan (CFAT/CSAT)
- Perform a basic CFAT or CSAT
You Will Cover:
- Introduction to the ICS Cybersecurity Lifecycle
- Assessment phase
- Implementation phase
- Maintenance phase
- Conceptual Design Process
- Interpreting risk assessment results
- Cybersecurity requirements specifications
- Developing a conceptual design
- Conceptual design specification
- Detailed Design Process
- Security Development Lifecycle (SDL)
- Types of technology
- Selecting appropriate technology
- Developing a detailed design
- Documenting the design/specification
- Design & Implementation Examples
- Firewall design example
- Remote access design example
- System hardening design example
- Intrusion detection design example
- Testing
- Developing test plans
- Cybersecurity Factory Acceptance Testing
- Cybersecurity Site Acceptance Testing
Classroom/Laboratory Exercises:
- Network and Packet Analysis
- Firewalls and DMZ
- Network Device Hardening
- Define Policies and Procedures
- Remote Access
- Using Part 62443-3-3 to validate SL-A
Who Should Attend:
- Control systems engineers and managers
- System Integrators
- IT engineers and managers of industrial facilities
- Plant managers
- Plant Safety and Risk Management
Recommended Pre-Requisites:
ISA Courses IC32 and IC33 or equivalent knowledge/experience.
The main objectives of ISA training is to make sure that the audience understands and interprets the requirements of the ISA/IEC-62443 series of standards correctly and what needs to be done.
While the exercises and products used in the lab helps to understand the concepts, it is not within the objectives of ISA to recommend any specific solution or to show how to comply with the multiple requirements.