Upon completion of this training course, the participants will be able to:

• Describe the principles of security and cyber security management and the key features of Industry standards and technical reports
• Understand the fundamentals of industrial communication networks and relevant technology
• Understand the requirements for communication protocols, routing and segmentation
• Appreciate the key requirements for countermeasures, design, operations & maintenance regarding cyber security lifecycle phases, roles and responsibilities
• Understand the requirements for organisational security, business impact, planning and recovery in terms of policy, procedures, guidelines and competency requirements
• Understand the requirements for proper inspection, operation, maintenance and modification of installed cyber security measures as required by several safety & security standards

Functional, Process, Technical Safety and Product Design Engineers, Control and Instrument Engineers and Managers, Process Engineers, Operations personnel and managers, maintenance staff, consultants, advisors and persons involved in product development, management, engineering, operations and safety of process operations who require an understanding of the fundamentals of cyber security and who may wish to progress to take part in the TÜV Rheinland CySec Security Risk Assessment or Product Design and Development courses and exam.

There are no specific requirements for delegates wishing to attend this training course, however a basic knowledge of IACS, industrial communication networks and IT-/OT interface user knowledge would be beneficial.

The training course is structured in the following way:

Day 1 Agenda

• Industrial networks vs. Business networks
• Network types
• ISO/OSI Reference Model
• OSI Layer 1: Physical
• Layer 2 Switches
• IPv4 Addressing
• Network Address Translation (NAT)
• DHCP

Day 2 Agenda

• Routers
• Layer 3 Switches
• TCP – Connection Oriented Session
• User Datagram Protocol (UDP)
• Firewalls
• Cryptography
• Remote Access VPNs
• Intrusion Detection Systems

Day 3 Agenda

• Modbus
• Profibus
• IEC62443 Framework
• NIST Cyber Security Framework (CSF)
• Establishing an Industrial Automation and Control Systems Security Program
• Risk Analysis
• Addressing Risk with the CSMS
• Monitoring and Improving the CSMS

Day 4 Examination