ISA/IEC 62443 PROGRAM
IC37IACS Cybersecurity Operations & Maintenance
Version 3.02
Monitor, maintain, and sustain industrial cybersecurity throughout the operating lifecycle.
Sustain security.
Support industrial operations.
IACS Cybersecurity Operations & Maintenance (IC37V) focuses on the ongoing operation and maintenance of IACS cybersecurity implemented during the Design & Implementation phase. It covers network diagnostics and troubleshooting, security monitoring and incident response, and maintenance of implemented cybersecurity countermeasures.
This phase also includes security management of change, backup and recovery procedures, and periodic cybersecurity audits. IC37 develops the skills to detect and troubleshoot potential cybersecurity events and maintain the security level of an operating system throughout its lifecycle, despite an evolving threat environment.
Course at a glance
Duration: 24 hours / 3 days
Credits: 2.1 CEUs
Version: 3.02
Language: Spanish · slides in English
Delivery: Virtual instructor-led
Exam: English · one attempt included
Mandatory prerequisites
Successful completion of IC32: Using the ISA/IEC 62443 Standards to Secure Your Control Systems and passing the ISA/IEC 62443 Cybersecurity Fundamentals Specialist certificate exam are mandatory prerequisites for this course.
Recommended preparation
- IT and OT Advanced Skills for I & C Personnel (TS12)
- Equivalent knowledge and experience
- Assessing the Cybersecurity of New or Existing IACS Systems (IC33)
- IACS Cybersecurity Design & Implementation (IC34)
- Communication Essentials for Industrial Automation Systems (TS07)
Learning objectives
- Perform basic network diagnostics and troubleshooting
- Interpret IACS device diagnostic alarms and event logs
- Implement IACS backup and restoration procedures
- Describe the IACS patch management lifecycle and procedure
- Apply an antivirus management procedure
- Define the basics of application control and allowlisting tools
- Define the basics of network and host intrusion detection
- Define the basics of security incident and event monitoring tools
- Implement an incident response plan
- Implement an IACS management of change procedure
- Conduct a basic IACS cybersecurity audit
Course content
A structured approach to sustaining industrial cybersecurity during operations and maintenance.
01 Introduction to the ICS Cybersecurity Lifecycle
- Identification & Assessment phase
- Design & Implementation phase
- Operations & Maintenance phase
02 Network Diagnostics and Troubleshooting
- Interpreting device alarms and event logs
- Early indicators
- Network intrusion detection systems
- Network management tools
03 Application Diagnostics and Troubleshooting
- Interpreting operating system and application alarms and event logs
- Early indicators
- Application management and allowlisting tools
- Antivirus and endpoint protection tools
- Security incident and event monitoring (SIEM) tools
04 IACS Cybersecurity Operating Procedures & Tools
- Developing and following an IACS management of change procedure
- Developing and following an IACS backup procedure
- IACS configuration management tools
- Developing and following an IACS patch management procedure
- Patch management tools
- Developing and following an IACS antivirus management procedure
- Antivirus and allowlisting tools
- Developing and following an IACS cybersecurity audit procedure
- Auditing tools
05 IACS Incident Response
- Developing and following an IACS incident response plan
- Incident investigation
- System recovery
Hands-on exercises
Apply operations and maintenance concepts through the following practical exercises:
- Build the Board
- Allowlisting
- Patch management
- Snort intrusion detection system
- Monitoring
- Troubleshooting
- Incident recovery
- Security Information and Event Management (SIEM)
Practical laboratory exercises are completed during class using remote access to real systems.
ISA certification
IC37 is the fourth course in the ISA/IEC 62443 Cybersecurity Certificate Program. Pass the exam to earn the ISA/IEC 62443 Cybersecurity Maintenance Specialist certificate.
Registration includes one certification exam attempt. The exam is in English and is taken through ISA-authorized examination facilities (Meazure Learning).
Participants must successfully complete all course objectives and requirements, with full attendance, to be eligible for assessment. A course-completion certificate indicates the total number of CEUs earned.
The source page states that additional attempts may be purchased within six months of course completion at USD 150 per attempt. Confirm current retake arrangements when booking.
Course completion and professional certification are separate: earning the professional certificate requires passing the exam.
Who should attend?
- Control systems engineers and managers
- System integrators
- IT engineers and managers in industrial facilities
- Plant managers
- Plant safety and risk management personnel
Delivery, access, and learning support
How you will learn
The course summary specifies live virtual training with the instructor. The delivery section also describes in-person instruction and an online practice exam in the WiseCourses Academic Campus. Contact WiseCourses to discuss available dates or an on-site class for your plant.
Instruction is in Spanish, with slides and study materials in English. Full attendance and completion of all course requirements are required for assessment eligibility.
Technical requirements
Participants need a computer and a reliable Internet connection for remote laboratory access. The source page specifies a minimum connection bandwidth of “1 MB”; confirm the required connection speed with WiseCourses before the course.
Included learning support
- Access to course study materials through the educational platform, described as indefinite with a minimum of one year
- Access to a private forum for technical questions after the course
- Personalized post-course coaching with the instructor at no additional charge
- Access to supplementary learning materials
- An online practice exam in the WiseCourses educational campus
Official training uses certified instructors and official, vendor-neutral materials to support correct interpretation of the standards and their requirements.
Recommended resources
Standards
- ISA-62443-1-1-2007 — Security for Industrial Automation and Control Systems, Part 1-1: Terminology, Concepts and Models
- ANSI/ISA-62443-2-1-2024 — Security for Industrial Automation and Control Systems, Part 2-1: Security Program Requirements for IACS Asset Owners
- ANSI/ISA-62443-3-2-2020 — Security for Industrial Automation and Control Systems, Part 3-2: Security Risk Assessment for System Design
- ANSI/ISA-62443-3-3 (99.03.03)-2013 — Security for Industrial Automation and Control Systems, Part 3-3: System Security Requirements and Security Levels
Recommended reading
- ISA Cybersecurity Library
Language and study materials
Study materials for Spanish- and Portuguese-speaking audiences are provided in English. The professional certification exam and the ISA/IEC 62443 standards referenced by the course are in English.
The resource editions above are those listed on the supplied course page.
Training scope
ISA training aims to help participants correctly understand and interpret the requirements of the ISA/IEC 62443 series and what needs to be done. Exercises and laboratory products support understanding of the concepts; the course does not aim to recommend a particular solution or show how to comply with every requirement.
Prepare for your next professional step.
Not sure this course is right for you? Contact our experts for guidance based on your professional objectives and your organization’s needs. Ask about available dates, a formal quotation, or an on-site class for your team.
