Industrial cybersecurity training · WBS Framework
EN ProgramIndustrial cybersecurity for energy, oil & gas.
A shared methodology to align senior management, cybersecurity, OT, engineering, automation, and operations.
Why the EN Program?
An approach designed for
the realities of industry.
Build the capabilities to apply cybersecurity within your organization’s context, from governance to operations.
Shared methodology
A common framework across disciplines.
Governance
Defined activities, structure, and responsibilities.
Risk management
Decisions grounded in the industrial context.
Better decisions
Connect requirements, risk, and security measures.
Resilient operations
Capabilities to sustain and improve protection.
One shared methodology
Different roles.
One common goal.
Connect strategic vision with technical and operational decisions. A shared language helps coordinate work throughout the cybersecurity lifecycle.
Program structure
Six courses.
A lifecycle perspective.
Choose the capabilities you need to develop. The courses complement one another; no course is assigned exclusively to a single role.
Industrial cybersecurity management and governance
Structure your cybersecurity program with a shared methodology, clear responsibilities, and documented activities.
What this course covers
Project management in energy, oil & gas; implementation of ISA/IEC 62443 requirements and alignment with applicable frameworks and regulations.
Risk assessment for industrial systems
Assess new and existing systems to inform risk treatment decisions.
What this course covers
Risk assessment methodology, ISA/IEC 62443-3-2 requirements, and documented outputs that inform subsequent lifecycle activities.
Security design, implementation, and testing
Translate risk assessment results into verifiable security measures.
What this course covers
Design, implementation, and acceptance testing for industrial systems, with documented evidence before operations and maintenance.
Secure operations and cybersecurity maintenance
Sustain system protection throughout its operating life through support, maintenance, and continuous improvement.
What this course covers
Operational support, preventive and corrective maintenance, monitoring, response, auditing, and continuous improvement.
Security by design for control systems
Integrate risk mitigation into engineering decisions before implementing countermeasures.
What this course covers
Design methodology following risk assessment, intended for control systems engineers and service providers.
Industrial security event and alert management
Design monitoring, detection, and response around industrial context and risk.
What this course covers
Assessment, design, implementation, testing, operation, and maintenance of OT monitoring, detection, and response management systems.
Looking for the complete program?
Explore the Value Pack, its terms, and enrollment options.
What does it bring to your organization?
Capabilities to work better, together.
Organizational alignment
Connect cybersecurity objectives with each department’s responsibilities.
Shared language
Facilitate communication between technical, operational, and business teams.
Informed decisions
Connect requirements and context with risk assessment and treatment.
Capability development
Build a learning path around your team’s needs.
Application in your environment
From training
to industrial challenges.
Areas where you can apply the program’s knowledge:
- 01OT cybersecurity program development
- 02Industrial risk assessment
- 03Control system design and modernization
- 04Operational support and continuous improvement
Learning formats
A program that adapts to your team.
At your own pace
Prerecorded training to fit learning around your availability.
Instructor-led
Virtual or in-person classes. Check dates, languages, and availability.
For your organization
Request a private class or a proposal for multiple participants based on your needs.
Formats, dates, and terms vary by session. Request a quotation and indicate whether your organization is an ARPEL member.
Before you begin
Plan your
next steps.
Who is the program for?
End users and service providers in energy, oil & gas, with content relevant to management, cybersecurity, OT, engineering, automation, and operations.
How does it relate to ISA/IEC 62443?
The WBS program provides a methodology for implementing ISA/IEC 62443 series requirements and aligning activities with applicable industry frameworks and regulations. It is distinct from the official ISA IC course program.
Is the program available in Spanish?
The program offers training in English and Spanish. Check the format, language, and availability on the course page or in your organization’s proposal.
Where can I find pricing and upcoming dates?
Review the terms of the Value Pack or request a proposal. Pricing may depend on the format, session, and ARPEL membership.
Does completing a course certify my organization?
No. Training, participant assessment, and organizational certification are separate processes. Review each program’s requirements and scope.
Let’s talk
Request a proposal
for your organization.
Tell us which capabilities you need to strengthen. Let’s discuss the courses, format, and scope that fit your team.
