Cybersecurity for Industrial Control Systems

Ce qu'elle couvre habituellement

1. 1

   Industrial Control Systems and Why Their Security Is Different

   • The Building Blocks of an Industrial Control System
   • How OT Security Differs from IT Security
   • What Is at Stake: Consequences of an OT Cyber Attack
   • Lessons from Notable Incidents
   • Threat Actors and Common Attack Paths
2. 2

   Reference Architecture and Standards

   • The Purdue Model Levels
   • The IT/OT Demilitarized Zone
   • IEC 62443: Structure and Roles
   • Zones, Conduits and Security Levels
   • Foundational Requirements, NIST SP 800-82 and the NIST CSF
3. 3

   Assessing Cyber Risk in OT

   • Building an OT Asset Inventory
   • A Consequence-Based Approach to OT Risk
   • Cyber PHA and the Link to HAZOP
   • Setting Target Security Levels for Zones
   • Recording, Treating and Accepting OT Cyber Risk
4. 4

   Defence in Depth: Networks and Access

   • The Principle of Defence in Depth
   • Network Segmentation and Industrial Firewalls
   • Data Diodes and One-Way Transfer
   • Secure Remote Access
   • Accounts, Passwords and Least Privilege
5. 5

   Defence in Depth: Hosts, Change and Recovery

   • Hardening Control System Hosts and Devices
   • Patch Management and Compensating Controls
   • Anti-Malware and Application Allow-Listing
   • Controlling Removable Media and Transient Devices
   • Backups and Recovery of Control Systems
6. 6

   Detection, the Safety System and Incident Response

   • OT Network Security Monitoring
   • Logging and Event Management in OT
   • Protecting the Safety Instrumented System
   • Preparing an OT Incident Response Plan
   • Isolation Decisions and Safe Recovery
7. 7

   People, Projects and the OT Security Programme

   • Security in Projects and Procurement
   • People: Awareness for Operators and Engineers
   • Governance and Roles for OT Security
   • Building an OT Security Programme Roadmap
   • Case Study: Securing a Gas Compression Site