Cybersecurity for Critical Infrastructure
You’re on the front lines. Every alert, every vulnerability scan, every patch cycle carries the weight of public safety, national resilience, and operational continuity. The stakes aren’t theoretical-they’re real, immediate, and unforgiving. Legacy systems. Converged IT/OT networks. Regulatory pressure. Board-level scrutiny. You need more than awareness. You need a battle-tested, systematic approach that turns risk into strategy, chaos into control, and uncertainty into certainty. Cybersecurity for Critical Infrastructure is not another awareness course. This is the high-precision framework trusted by infrastructure leaders to design, implement, and sustain cyber-resilient environments across energy, water, transport, and healthcare sectors. Inside this course, you will go from assessing your current posture to delivering a comprehensive, audit-ready resilience plan-all within 30 days. You’ll build a board-level report, align controls to NIST, ISA/IEC 62443, and CIS, and gain the confidence to lead under pressure. Take it from Elena M., Lead OT Security Analyst at a national power authority: “Within two weeks of applying this framework, we uncovered a legacy access vulnerability in our SCADA environment that third-party auditors had missed for three years. This course didn’t just teach me concepts-it gave me a methodology that found real threats.” Here’s how this course is structured to help you get there.Course Format & Delivery Details Self-Paced. Immediate Online Access. Always On-Demand.
This course is designed for professionals who operate under pressure and cannot afford rigid schedules. Once enrolled, you gain self-paced, on-demand access with no fixed dates, time commitments, or deadlines. You progress at your speed, on your terms. Fast Results. Real-World Application from Day One.
Most learners complete the core implementation framework in 12–18 hours, with tangible results in under 30 days. You begin applying practical assessments and control mappings in your first module-no waiting for the final chapters. Lifetime Access. Full Updates. Zero Extra Cost.
Your enrollment includes lifetime access to all materials. As frameworks evolve and threats shift, you receive all future updates automatically, at no additional charge. This is not a time-limited product. It’s a permanent asset. Global. Secure. Mobile-Friendly.
Access your course securely from any device, 24/7, anywhere in the world. The interface is fully responsive, so you can review your risk assessment framework on-site during an inspection or finalise your compliance matrix from your tablet in a control room. Direct Instructor Support & Guidance Included.
You are not learning in isolation. Throughout the course, you have access to expert-curated guidance, real-world implementation templates, and structured feedback checkpoints. This is a professional-grade learning environment built for practitioners, not passive observers. Earn a Globally Recognised Certificate of Completion.
Upon finishing, you will receive a formal Certificate of Completion issued by The Art of Service, a globally trusted provider of high-stakes operational frameworks. This credential is referenced by hiring managers, audit teams, and government contractors worldwide. No Hidden Fees. Transparent Pricing. Total Clarity.
The price you see is the price you pay. There are no recurring charges, upsells, add-ons, or surprise fees. What you invest covers full course access, all updates, and your certification. We Accept Major Payment Methods.
You can pay securely using Visa, Mastercard, or PayPal-no friction, no delays, no complications. 100% Satisfied or Refunded – Zero Risk to You.
Try the course risk-free. If you’re not convinced within 14 days that this delivers immediate, practical value, simply request a full refund. Your investment is protected. Your trust is non-negotiable. Enrollment Confirmation & Access Process.
After enrolling, you will receive a confirmation email. Your course access details will be sent separately once your learning environment is fully prepared. This ensures system integrity and a seamless onboarding experience. Does This Work for You? Absolutely-Even If…
- You’re not a cybersecurity specialist-you’re an engineer, operator, or project lead stepping into a security role
- You work in a highly regulated environment with legacy systems and limited IT support
- You’ve tried general cybersecurity training and found it irrelevant to OT or industrial control
- You need to justify budget, report to leadership, or pass a third-party audit
- You’re time-constrained and need concise, action-focused content without fluff
This course works even if you’ve never written a security policy-because it gives you the exact templates, checklists, and decision trees used by top infrastructure teams. You are protected by explicit risk reversal: you gain lifetime access to a career-advancing framework, support when you need it, global certification, and a full refund guarantee. The only risk is staying where you are.
Module 1: Foundations of Critical Infrastructure Cybersecurity - Defining critical infrastructure sectors and their unique risk profiles
- Understanding the convergence of IT and OT networks
- Key differences between enterprise IT security and industrial control system (ICS) security
- Common threat actors targeting critical infrastructure
- High-impact attack case studies from energy, water, and transport
- Global regulatory and compliance frameworks overview
- Legal and liability implications of infrastructure cyber failure
- The role of national CERTs and sector-specific ISACs
- Fundamental concepts: confidentiality, integrity, availability, and safety (CIAS)
- Zero trust principles in operational technology environments
Module 2: Threat Landscape and Adversary Behaviours - APT groups targeting energy, utilities, and transportation systems
- State-sponsored cyber operations and geopolitical motivations
- Insider threats in industrial environments: detection and mitigation
- Ransomware attacks on infrastructure: evolution and impact
- Supply chain vulnerabilities in ICS components
- Legacy system exposure and unsupported software risks
- Physical access risks and social engineering in control rooms
- Attack vectors: remote access, third-party vendors, and cloud-connected HMI
- Threat intelligence sharing protocols for critical sectors
- Using MITRE ATT&CK for ICS to map adversary tactics
- Behavioural indicators of compromise in OT networks
- Difference between cyber espionage and destructive attacks
- Pre-incident indicators (PIIs) and early warning signs
- Third-party risk assessment for partner access points
- Geolocation-based threat monitoring for infrastructure zones
Module 3: Regulatory Compliance & Risk Governance - NIST Cybersecurity Framework (CSF) for critical infrastructure
- Mapping CSF Functions (Identify, Protect, Detect, Respond, Recover) to OT
- CIS Critical Security Controls v8 for high-value systems
- ISA/IEC 62443 standards: Zones, Conduits, and Security Levels
- EU NIS2 Directive compliance requirements
- US CISA’s Known Exploited Vulnerabilities (KEV) catalogue
- NERC CIP standards for bulk power systems
- UK’s NIS Regulations and sector obligations
- Developing a cyber resilience governance charter
- Board-level reporting: translating technical risk to business impact
- Establishing a critical infrastructure cyber risk committee
- Third-party audit readiness and documentation standards
- Regulatory gap analysis using control mapping matrices
- Annual compliance planning and testing cycles
- Reporting obligations under breach disclosure laws
Module 4: Asset Discovery & Inventory Management - Passive and active network scanning in air-gapped environments
- Identifying OT assets: PLCs, RTUs, HMIs, historians
- Creating an authoritative asset inventory database
- Tagging criticality levels and safety interdependencies
- Managing legacy devices with no remote management
- Detecting shadow OT devices on corporate networks
- Integrating asset data from CMMS and EAM systems
- Automated fingerprinting of industrial protocols
- Vendor firmware version tracking and EOSL alerts
- Mapping assets to network zones and segments
- Documenting authorised vs unauthorised device connections
- Using BACnet, Modbus, DNP3, and PROFINET for device profiling
- Centralised logging of asset changes and configurations
- Secure methods for updating asset registers without network access
- Developing an asset lifecycle management policy
Module 5: Network Architecture & Segmentation Strategies - Designing ISA/IEC 62443-compatible zone and conduit models
- High-assurance demilitarised zones (DMZs) for OT access
- Firewall rules tailored for Modbus and CIP protocols
- Unidirectional gateways (data diodes): deployment best practices
- Micro-segmentation in control system networks
- Securing wireless access points in industrial settings
- Remote access architecture: jump servers, PAM, and zero trust network access (ZTNA)
- Managing VLANs for OT without introducing latency
- Secure remote vendor access protocols
- Network traffic baselining and anomaly detection
- Encrypting data in transit for OPC UA and MQTT
- Using deep packet inspection without disrupting control signals
- Preventing lateral movement through network design
- Fail-safe configuration during firewall deployment
- Network resilience testing under fault conditions
Module 6: Vulnerability Assessment & Patch Management - Passive vulnerability scanning in OT environments
- Identifying unpatched firmware in PLCs and controllers
- Assessing third-party component risks in ICS software
- Using CISA alerts and ICS-CERT advisories proactively
- Patch impact analysis for safety-critical systems
- Creating a risk-based patching schedule
- Compensating controls when patching is not feasible
- Secure methods for offline patch validation
- Vendor-led patch testing and rollback procedures
- Integrating vulnerability data into CMDB
- Automated CVE correlation for industrial products
- Zero-day response planning for control systems
- Penetration testing scope definition for OT
- Third-party assessment coordination and oversight
- Monthly vulnerability reporting for leadership
Module 7: Identity, Access & Privilege Management - Role-based access control (RBAC) for SCADA systems
- Multi-factor authentication for engineering workstations
- Principle of least privilege in OT environments
- Managing shared accounts and default credentials
- Privileged access management (PAM) for OT administrators
- Session monitoring and keystroke logging for engineers
- Temporary access requests and approval workflows
- Active Directory integration challenges with OT
- Local account governance on HMIs and servers
- Emergency break-glass account procedures
- Vendor access time limits and audit trails
- Access revocation upon role change or termination
- Service account hardening for data synchronisation
- Segregating engineering, operations, and IT access
- Logging and reviewing access events weekly
Module 8: Detection & Monitoring in OT Environments - Configuring SIEM for industrial network telemetry
- Normalising OT logs from diverse protocols
- Developing custom detection rules for suspicious behaviour
- Using network flow analysis to spot anomalies
- Endpoint detection on engineering workstations
- Passive monitoring without introducing latency
- Alarm fatigue reduction through intelligent correlation
- Establishing OT-specific baselines for network traffic
- Integrating physical security logs with cybersecurity events
- Real-time dashboards for SOC and operations teams
- Automated alerting for unauthorised configuration changes
- File integrity monitoring on HMI and historian servers
- Detecting DDoS and protocol flooding in control networks
- Behavioural analytics for operator account misuse
- Centralised log retention and compliance archiving
Module 9: Incident Response & Crisis Management - Building an OT-specific incident response playbook
- Defining roles during cyber-physical incidents
- Isolation procedures for compromised controllers
- Safety-first decision making in control system events
- Coordination between OT, IT, and emergency services
- Forensic data collection without disrupting operations
- Chain of custody for digital evidence in industrial systems
- Declaring a cyber emergency: thresholds and triggers
- Public communications strategy during an outage
- Regulatory reporting timelines and content
- Post-incident review and root cause analysis
- Updating response plans based on lessons learned
- Simulated incident drills for control room teams
- Recovery sequencing for safety-critical systems
- Legal and insurance coordination during events
Module 10: Recovery, Resilience & Business Continuity - Backup strategies for engineering configurations and HMI projects
- Secure offline storage of critical system images
- Restoration validation without live network impact
- Failover testing for redundant control systems
- Developing a cyber-physical business continuity plan
- Manual override procedures during cyber incidents
- Supply chain continuity for ICS spare parts
- Workarounds for disabled digital systems
- Rebuilding compromised systems from clean images
- Post-recovery system validation checklist
- Insurance considerations for cyber-physical damage
- Reputation management following public incidents
- Updating resilience plans annually
- Third-party restoration service vetting
- Parallel operation testing post-recovery
Module 11: Physical Security & Environmental Controls - Securing control rooms and network cabinets
- Access control systems for physical entry points
- Camera surveillance and monitoring of critical zones
- Environmental monitoring: temperature, humidity, power
- Preventing unauthorised USB use in OT systems
- Securing engineering laptops and portable media
- Visitor management and escort protocols
- Lockdown procedures during cyber alerts
- Redundant power and UPS systems for security devices
- Lightning and surge protection for outdoor equipment
- Fire suppression systems compatible with electronics
- Securing wireless backup communication links
- Documentation access controls and print management
- Perimeter security for remote substations and sites
- Drone detection and countermeasures near critical sites
Module 12: Supply Chain & Third-Party Risk - Vendor cybersecurity questionnaires and assessments
- Contractual cybersecurity obligations for suppliers
- Monitoring third-party access to OT networks
- Software bill of materials (SBOM) for ICS products
- Validating vendor security claims through audits
- Secure onboarding and offboarding of partners
- Monitoring for compromised contractor credentials
- Using ISO 28000 and NIST SP 800-161 for supply chain
- Assessing cloud service providers for OT integration
- Secure firmware update processes from vendors
- Third-party incident notification requirements
- Conducting remote audits of supplier environments
- Managing open-source components in industrial software
- Secure development lifecycle (SDL) expectations for vendors
- Annual third-party risk reassessment cycle
Module 13: Emerging Technologies & Future Threats - Securing IIoT devices in process environments
- Risk assessment for AI-driven process optimisation
- Quantum computing threats to industrial encryption
- 5G integration in remote monitoring and control
- Edge computing security at remote sites
- Secure integration of digital twins with live systems
- Blockchain for secure logging and audit trails
- Risk profile of cloud-connected historians and SCADA
- Secure APIs for data exchange with enterprise systems
- Autonomous systems and fail-safe decision logic
- Resilience by design for next-generation infrastructure
- Threat modelling for smart cities and grid modernisation
- Post-quantum cryptography migration planning
- AI-based anomaly detection vs adversarial manipulation
- Evaluating new technologies through a security-first lens
Module 14: Certification, Documentation & Audit Readiness - Building a comprehensive cybersecurity manual for your facility
- Documenting policies, procedures, and responsibilities
- Creating audit trails for access, changes, and incidents
- Preparing for internal and external security audits
- Using checklists to verify compliance across all domains
- Responding to auditor findings and corrective actions
- Developing a security awareness training program for staff
- Tracking employee training completion and refreshers
- Generating executive summary reports for leadership
- Creating a living risk register with treatment plans
- Mapping controls to multiple frameworks simultaneously
- Secure document management and version control
- Automated compliance reporting templates
- Third-party validation and attestation preparation
- Finalising your Certificate of Completion submission
Module 15: Capstone Project & Certification Pathway - Selecting a real or simulated infrastructure asset for assessment
- Conducting a full cyber resilience maturity assessment
- Developing a custom zone and conduit model
- Mapping identified risks to NIST CSF and ISA/IEC 62443
- Creating compensating controls for legacy systems
- Designing detection and response playbooks
- Building a 30-day action plan for implementation
- Preparing a board-ready executive summary report
- Submitting your project for review and validation
- Receiving expert feedback and refinement guidance
- Finalising documentation for audit readiness
- Earning your Certificate of Completion
- Leveraging your credential in career advancement
- Accessing post-course resources and community
- Planning your next steps in infrastructure cybersecurity leadership
- Defining critical infrastructure sectors and their unique risk profiles
- Understanding the convergence of IT and OT networks
- Key differences between enterprise IT security and industrial control system (ICS) security
- Common threat actors targeting critical infrastructure
- High-impact attack case studies from energy, water, and transport
- Global regulatory and compliance frameworks overview
- Legal and liability implications of infrastructure cyber failure
- The role of national CERTs and sector-specific ISACs
- Fundamental concepts: confidentiality, integrity, availability, and safety (CIAS)
- Zero trust principles in operational technology environments
Module 2: Threat Landscape and Adversary Behaviours - APT groups targeting energy, utilities, and transportation systems
- State-sponsored cyber operations and geopolitical motivations
- Insider threats in industrial environments: detection and mitigation
- Ransomware attacks on infrastructure: evolution and impact
- Supply chain vulnerabilities in ICS components
- Legacy system exposure and unsupported software risks
- Physical access risks and social engineering in control rooms
- Attack vectors: remote access, third-party vendors, and cloud-connected HMI
- Threat intelligence sharing protocols for critical sectors
- Using MITRE ATT&CK for ICS to map adversary tactics
- Behavioural indicators of compromise in OT networks
- Difference between cyber espionage and destructive attacks
- Pre-incident indicators (PIIs) and early warning signs
- Third-party risk assessment for partner access points
- Geolocation-based threat monitoring for infrastructure zones
Module 3: Regulatory Compliance & Risk Governance - NIST Cybersecurity Framework (CSF) for critical infrastructure
- Mapping CSF Functions (Identify, Protect, Detect, Respond, Recover) to OT
- CIS Critical Security Controls v8 for high-value systems
- ISA/IEC 62443 standards: Zones, Conduits, and Security Levels
- EU NIS2 Directive compliance requirements
- US CISA’s Known Exploited Vulnerabilities (KEV) catalogue
- NERC CIP standards for bulk power systems
- UK’s NIS Regulations and sector obligations
- Developing a cyber resilience governance charter
- Board-level reporting: translating technical risk to business impact
- Establishing a critical infrastructure cyber risk committee
- Third-party audit readiness and documentation standards
- Regulatory gap analysis using control mapping matrices
- Annual compliance planning and testing cycles
- Reporting obligations under breach disclosure laws
Module 4: Asset Discovery & Inventory Management - Passive and active network scanning in air-gapped environments
- Identifying OT assets: PLCs, RTUs, HMIs, historians
- Creating an authoritative asset inventory database
- Tagging criticality levels and safety interdependencies
- Managing legacy devices with no remote management
- Detecting shadow OT devices on corporate networks
- Integrating asset data from CMMS and EAM systems
- Automated fingerprinting of industrial protocols
- Vendor firmware version tracking and EOSL alerts
- Mapping assets to network zones and segments
- Documenting authorised vs unauthorised device connections
- Using BACnet, Modbus, DNP3, and PROFINET for device profiling
- Centralised logging of asset changes and configurations
- Secure methods for updating asset registers without network access
- Developing an asset lifecycle management policy
Module 5: Network Architecture & Segmentation Strategies - Designing ISA/IEC 62443-compatible zone and conduit models
- High-assurance demilitarised zones (DMZs) for OT access
- Firewall rules tailored for Modbus and CIP protocols
- Unidirectional gateways (data diodes): deployment best practices
- Micro-segmentation in control system networks
- Securing wireless access points in industrial settings
- Remote access architecture: jump servers, PAM, and zero trust network access (ZTNA)
- Managing VLANs for OT without introducing latency
- Secure remote vendor access protocols
- Network traffic baselining and anomaly detection
- Encrypting data in transit for OPC UA and MQTT
- Using deep packet inspection without disrupting control signals
- Preventing lateral movement through network design
- Fail-safe configuration during firewall deployment
- Network resilience testing under fault conditions
Module 6: Vulnerability Assessment & Patch Management - Passive vulnerability scanning in OT environments
- Identifying unpatched firmware in PLCs and controllers
- Assessing third-party component risks in ICS software
- Using CISA alerts and ICS-CERT advisories proactively
- Patch impact analysis for safety-critical systems
- Creating a risk-based patching schedule
- Compensating controls when patching is not feasible
- Secure methods for offline patch validation
- Vendor-led patch testing and rollback procedures
- Integrating vulnerability data into CMDB
- Automated CVE correlation for industrial products
- Zero-day response planning for control systems
- Penetration testing scope definition for OT
- Third-party assessment coordination and oversight
- Monthly vulnerability reporting for leadership
Module 7: Identity, Access & Privilege Management - Role-based access control (RBAC) for SCADA systems
- Multi-factor authentication for engineering workstations
- Principle of least privilege in OT environments
- Managing shared accounts and default credentials
- Privileged access management (PAM) for OT administrators
- Session monitoring and keystroke logging for engineers
- Temporary access requests and approval workflows
- Active Directory integration challenges with OT
- Local account governance on HMIs and servers
- Emergency break-glass account procedures
- Vendor access time limits and audit trails
- Access revocation upon role change or termination
- Service account hardening for data synchronisation
- Segregating engineering, operations, and IT access
- Logging and reviewing access events weekly
Module 8: Detection & Monitoring in OT Environments - Configuring SIEM for industrial network telemetry
- Normalising OT logs from diverse protocols
- Developing custom detection rules for suspicious behaviour
- Using network flow analysis to spot anomalies
- Endpoint detection on engineering workstations
- Passive monitoring without introducing latency
- Alarm fatigue reduction through intelligent correlation
- Establishing OT-specific baselines for network traffic
- Integrating physical security logs with cybersecurity events
- Real-time dashboards for SOC and operations teams
- Automated alerting for unauthorised configuration changes
- File integrity monitoring on HMI and historian servers
- Detecting DDoS and protocol flooding in control networks
- Behavioural analytics for operator account misuse
- Centralised log retention and compliance archiving
Module 9: Incident Response & Crisis Management - Building an OT-specific incident response playbook
- Defining roles during cyber-physical incidents
- Isolation procedures for compromised controllers
- Safety-first decision making in control system events
- Coordination between OT, IT, and emergency services
- Forensic data collection without disrupting operations
- Chain of custody for digital evidence in industrial systems
- Declaring a cyber emergency: thresholds and triggers
- Public communications strategy during an outage
- Regulatory reporting timelines and content
- Post-incident review and root cause analysis
- Updating response plans based on lessons learned
- Simulated incident drills for control room teams
- Recovery sequencing for safety-critical systems
- Legal and insurance coordination during events
Module 10: Recovery, Resilience & Business Continuity - Backup strategies for engineering configurations and HMI projects
- Secure offline storage of critical system images
- Restoration validation without live network impact
- Failover testing for redundant control systems
- Developing a cyber-physical business continuity plan
- Manual override procedures during cyber incidents
- Supply chain continuity for ICS spare parts
- Workarounds for disabled digital systems
- Rebuilding compromised systems from clean images
- Post-recovery system validation checklist
- Insurance considerations for cyber-physical damage
- Reputation management following public incidents
- Updating resilience plans annually
- Third-party restoration service vetting
- Parallel operation testing post-recovery
Module 11: Physical Security & Environmental Controls - Securing control rooms and network cabinets
- Access control systems for physical entry points
- Camera surveillance and monitoring of critical zones
- Environmental monitoring: temperature, humidity, power
- Preventing unauthorised USB use in OT systems
- Securing engineering laptops and portable media
- Visitor management and escort protocols
- Lockdown procedures during cyber alerts
- Redundant power and UPS systems for security devices
- Lightning and surge protection for outdoor equipment
- Fire suppression systems compatible with electronics
- Securing wireless backup communication links
- Documentation access controls and print management
- Perimeter security for remote substations and sites
- Drone detection and countermeasures near critical sites
Module 12: Supply Chain & Third-Party Risk - Vendor cybersecurity questionnaires and assessments
- Contractual cybersecurity obligations for suppliers
- Monitoring third-party access to OT networks
- Software bill of materials (SBOM) for ICS products
- Validating vendor security claims through audits
- Secure onboarding and offboarding of partners
- Monitoring for compromised contractor credentials
- Using ISO 28000 and NIST SP 800-161 for supply chain
- Assessing cloud service providers for OT integration
- Secure firmware update processes from vendors
- Third-party incident notification requirements
- Conducting remote audits of supplier environments
- Managing open-source components in industrial software
- Secure development lifecycle (SDL) expectations for vendors
- Annual third-party risk reassessment cycle
Module 13: Emerging Technologies & Future Threats - Securing IIoT devices in process environments
- Risk assessment for AI-driven process optimisation
- Quantum computing threats to industrial encryption
- 5G integration in remote monitoring and control
- Edge computing security at remote sites
- Secure integration of digital twins with live systems
- Blockchain for secure logging and audit trails
- Risk profile of cloud-connected historians and SCADA
- Secure APIs for data exchange with enterprise systems
- Autonomous systems and fail-safe decision logic
- Resilience by design for next-generation infrastructure
- Threat modelling for smart cities and grid modernisation
- Post-quantum cryptography migration planning
- AI-based anomaly detection vs adversarial manipulation
- Evaluating new technologies through a security-first lens
Module 14: Certification, Documentation & Audit Readiness - Building a comprehensive cybersecurity manual for your facility
- Documenting policies, procedures, and responsibilities
- Creating audit trails for access, changes, and incidents
- Preparing for internal and external security audits
- Using checklists to verify compliance across all domains
- Responding to auditor findings and corrective actions
- Developing a security awareness training program for staff
- Tracking employee training completion and refreshers
- Generating executive summary reports for leadership
- Creating a living risk register with treatment plans
- Mapping controls to multiple frameworks simultaneously
- Secure document management and version control
- Automated compliance reporting templates
- Third-party validation and attestation preparation
- Finalising your Certificate of Completion submission
Module 15: Capstone Project & Certification Pathway - Selecting a real or simulated infrastructure asset for assessment
- Conducting a full cyber resilience maturity assessment
- Developing a custom zone and conduit model
- Mapping identified risks to NIST CSF and ISA/IEC 62443
- Creating compensating controls for legacy systems
- Designing detection and response playbooks
- Building a 30-day action plan for implementation
- Preparing a board-ready executive summary report
- Submitting your project for review and validation
- Receiving expert feedback and refinement guidance
- Finalising documentation for audit readiness
- Earning your Certificate of Completion
- Leveraging your credential in career advancement
- Accessing post-course resources and community
- Planning your next steps in infrastructure cybersecurity leadership
- NIST Cybersecurity Framework (CSF) for critical infrastructure
- Mapping CSF Functions (Identify, Protect, Detect, Respond, Recover) to OT
- CIS Critical Security Controls v8 for high-value systems
- ISA/IEC 62443 standards: Zones, Conduits, and Security Levels
- EU NIS2 Directive compliance requirements
- US CISA’s Known Exploited Vulnerabilities (KEV) catalogue
- NERC CIP standards for bulk power systems
- UK’s NIS Regulations and sector obligations
- Developing a cyber resilience governance charter
- Board-level reporting: translating technical risk to business impact
- Establishing a critical infrastructure cyber risk committee
- Third-party audit readiness and documentation standards
- Regulatory gap analysis using control mapping matrices
- Annual compliance planning and testing cycles
- Reporting obligations under breach disclosure laws
Module 4: Asset Discovery & Inventory Management - Passive and active network scanning in air-gapped environments
- Identifying OT assets: PLCs, RTUs, HMIs, historians
- Creating an authoritative asset inventory database
- Tagging criticality levels and safety interdependencies
- Managing legacy devices with no remote management
- Detecting shadow OT devices on corporate networks
- Integrating asset data from CMMS and EAM systems
- Automated fingerprinting of industrial protocols
- Vendor firmware version tracking and EOSL alerts
- Mapping assets to network zones and segments
- Documenting authorised vs unauthorised device connections
- Using BACnet, Modbus, DNP3, and PROFINET for device profiling
- Centralised logging of asset changes and configurations
- Secure methods for updating asset registers without network access
- Developing an asset lifecycle management policy
Module 5: Network Architecture & Segmentation Strategies - Designing ISA/IEC 62443-compatible zone and conduit models
- High-assurance demilitarised zones (DMZs) for OT access
- Firewall rules tailored for Modbus and CIP protocols
- Unidirectional gateways (data diodes): deployment best practices
- Micro-segmentation in control system networks
- Securing wireless access points in industrial settings
- Remote access architecture: jump servers, PAM, and zero trust network access (ZTNA)
- Managing VLANs for OT without introducing latency
- Secure remote vendor access protocols
- Network traffic baselining and anomaly detection
- Encrypting data in transit for OPC UA and MQTT
- Using deep packet inspection without disrupting control signals
- Preventing lateral movement through network design
- Fail-safe configuration during firewall deployment
- Network resilience testing under fault conditions
Module 6: Vulnerability Assessment & Patch Management - Passive vulnerability scanning in OT environments
- Identifying unpatched firmware in PLCs and controllers
- Assessing third-party component risks in ICS software
- Using CISA alerts and ICS-CERT advisories proactively
- Patch impact analysis for safety-critical systems
- Creating a risk-based patching schedule
- Compensating controls when patching is not feasible
- Secure methods for offline patch validation
- Vendor-led patch testing and rollback procedures
- Integrating vulnerability data into CMDB
- Automated CVE correlation for industrial products
- Zero-day response planning for control systems
- Penetration testing scope definition for OT
- Third-party assessment coordination and oversight
- Monthly vulnerability reporting for leadership
Module 7: Identity, Access & Privilege Management - Role-based access control (RBAC) for SCADA systems
- Multi-factor authentication for engineering workstations
- Principle of least privilege in OT environments
- Managing shared accounts and default credentials
- Privileged access management (PAM) for OT administrators
- Session monitoring and keystroke logging for engineers
- Temporary access requests and approval workflows
- Active Directory integration challenges with OT
- Local account governance on HMIs and servers
- Emergency break-glass account procedures
- Vendor access time limits and audit trails
- Access revocation upon role change or termination
- Service account hardening for data synchronisation
- Segregating engineering, operations, and IT access
- Logging and reviewing access events weekly
Module 8: Detection & Monitoring in OT Environments - Configuring SIEM for industrial network telemetry
- Normalising OT logs from diverse protocols
- Developing custom detection rules for suspicious behaviour
- Using network flow analysis to spot anomalies
- Endpoint detection on engineering workstations
- Passive monitoring without introducing latency
- Alarm fatigue reduction through intelligent correlation
- Establishing OT-specific baselines for network traffic
- Integrating physical security logs with cybersecurity events
- Real-time dashboards for SOC and operations teams
- Automated alerting for unauthorised configuration changes
- File integrity monitoring on HMI and historian servers
- Detecting DDoS and protocol flooding in control networks
- Behavioural analytics for operator account misuse
- Centralised log retention and compliance archiving
Module 9: Incident Response & Crisis Management - Building an OT-specific incident response playbook
- Defining roles during cyber-physical incidents
- Isolation procedures for compromised controllers
- Safety-first decision making in control system events
- Coordination between OT, IT, and emergency services
- Forensic data collection without disrupting operations
- Chain of custody for digital evidence in industrial systems
- Declaring a cyber emergency: thresholds and triggers
- Public communications strategy during an outage
- Regulatory reporting timelines and content
- Post-incident review and root cause analysis
- Updating response plans based on lessons learned
- Simulated incident drills for control room teams
- Recovery sequencing for safety-critical systems
- Legal and insurance coordination during events
Module 10: Recovery, Resilience & Business Continuity - Backup strategies for engineering configurations and HMI projects
- Secure offline storage of critical system images
- Restoration validation without live network impact
- Failover testing for redundant control systems
- Developing a cyber-physical business continuity plan
- Manual override procedures during cyber incidents
- Supply chain continuity for ICS spare parts
- Workarounds for disabled digital systems
- Rebuilding compromised systems from clean images
- Post-recovery system validation checklist
- Insurance considerations for cyber-physical damage
- Reputation management following public incidents
- Updating resilience plans annually
- Third-party restoration service vetting
- Parallel operation testing post-recovery
Module 11: Physical Security & Environmental Controls - Securing control rooms and network cabinets
- Access control systems for physical entry points
- Camera surveillance and monitoring of critical zones
- Environmental monitoring: temperature, humidity, power
- Preventing unauthorised USB use in OT systems
- Securing engineering laptops and portable media
- Visitor management and escort protocols
- Lockdown procedures during cyber alerts
- Redundant power and UPS systems for security devices
- Lightning and surge protection for outdoor equipment
- Fire suppression systems compatible with electronics
- Securing wireless backup communication links
- Documentation access controls and print management
- Perimeter security for remote substations and sites
- Drone detection and countermeasures near critical sites
Module 12: Supply Chain & Third-Party Risk - Vendor cybersecurity questionnaires and assessments
- Contractual cybersecurity obligations for suppliers
- Monitoring third-party access to OT networks
- Software bill of materials (SBOM) for ICS products
- Validating vendor security claims through audits
- Secure onboarding and offboarding of partners
- Monitoring for compromised contractor credentials
- Using ISO 28000 and NIST SP 800-161 for supply chain
- Assessing cloud service providers for OT integration
- Secure firmware update processes from vendors
- Third-party incident notification requirements
- Conducting remote audits of supplier environments
- Managing open-source components in industrial software
- Secure development lifecycle (SDL) expectations for vendors
- Annual third-party risk reassessment cycle
Module 13: Emerging Technologies & Future Threats - Securing IIoT devices in process environments
- Risk assessment for AI-driven process optimisation
- Quantum computing threats to industrial encryption
- 5G integration in remote monitoring and control
- Edge computing security at remote sites
- Secure integration of digital twins with live systems
- Blockchain for secure logging and audit trails
- Risk profile of cloud-connected historians and SCADA
- Secure APIs for data exchange with enterprise systems
- Autonomous systems and fail-safe decision logic
- Resilience by design for next-generation infrastructure
- Threat modelling for smart cities and grid modernisation
- Post-quantum cryptography migration planning
- AI-based anomaly detection vs adversarial manipulation
- Evaluating new technologies through a security-first lens
Module 14: Certification, Documentation & Audit Readiness - Building a comprehensive cybersecurity manual for your facility
- Documenting policies, procedures, and responsibilities
- Creating audit trails for access, changes, and incidents
- Preparing for internal and external security audits
- Using checklists to verify compliance across all domains
- Responding to auditor findings and corrective actions
- Developing a security awareness training program for staff
- Tracking employee training completion and refreshers
- Generating executive summary reports for leadership
- Creating a living risk register with treatment plans
- Mapping controls to multiple frameworks simultaneously
- Secure document management and version control
- Automated compliance reporting templates
- Third-party validation and attestation preparation
- Finalising your Certificate of Completion submission
Module 15: Capstone Project & Certification Pathway - Selecting a real or simulated infrastructure asset for assessment
- Conducting a full cyber resilience maturity assessment
- Developing a custom zone and conduit model
- Mapping identified risks to NIST CSF and ISA/IEC 62443
- Creating compensating controls for legacy systems
- Designing detection and response playbooks
- Building a 30-day action plan for implementation
- Preparing a board-ready executive summary report
- Submitting your project for review and validation
- Receiving expert feedback and refinement guidance
- Finalising documentation for audit readiness
- Earning your Certificate of Completion
- Leveraging your credential in career advancement
- Accessing post-course resources and community
- Planning your next steps in infrastructure cybersecurity leadership
- Designing ISA/IEC 62443-compatible zone and conduit models
- High-assurance demilitarised zones (DMZs) for OT access
- Firewall rules tailored for Modbus and CIP protocols
- Unidirectional gateways (data diodes): deployment best practices
- Micro-segmentation in control system networks
- Securing wireless access points in industrial settings
- Remote access architecture: jump servers, PAM, and zero trust network access (ZTNA)
- Managing VLANs for OT without introducing latency
- Secure remote vendor access protocols
- Network traffic baselining and anomaly detection
- Encrypting data in transit for OPC UA and MQTT
- Using deep packet inspection without disrupting control signals
- Preventing lateral movement through network design
- Fail-safe configuration during firewall deployment
- Network resilience testing under fault conditions
Module 6: Vulnerability Assessment & Patch Management - Passive vulnerability scanning in OT environments
- Identifying unpatched firmware in PLCs and controllers
- Assessing third-party component risks in ICS software
- Using CISA alerts and ICS-CERT advisories proactively
- Patch impact analysis for safety-critical systems
- Creating a risk-based patching schedule
- Compensating controls when patching is not feasible
- Secure methods for offline patch validation
- Vendor-led patch testing and rollback procedures
- Integrating vulnerability data into CMDB
- Automated CVE correlation for industrial products
- Zero-day response planning for control systems
- Penetration testing scope definition for OT
- Third-party assessment coordination and oversight
- Monthly vulnerability reporting for leadership
Module 7: Identity, Access & Privilege Management - Role-based access control (RBAC) for SCADA systems
- Multi-factor authentication for engineering workstations
- Principle of least privilege in OT environments
- Managing shared accounts and default credentials
- Privileged access management (PAM) for OT administrators
- Session monitoring and keystroke logging for engineers
- Temporary access requests and approval workflows
- Active Directory integration challenges with OT
- Local account governance on HMIs and servers
- Emergency break-glass account procedures
- Vendor access time limits and audit trails
- Access revocation upon role change or termination
- Service account hardening for data synchronisation
- Segregating engineering, operations, and IT access
- Logging and reviewing access events weekly
Module 8: Detection & Monitoring in OT Environments - Configuring SIEM for industrial network telemetry
- Normalising OT logs from diverse protocols
- Developing custom detection rules for suspicious behaviour
- Using network flow analysis to spot anomalies
- Endpoint detection on engineering workstations
- Passive monitoring without introducing latency
- Alarm fatigue reduction through intelligent correlation
- Establishing OT-specific baselines for network traffic
- Integrating physical security logs with cybersecurity events
- Real-time dashboards for SOC and operations teams
- Automated alerting for unauthorised configuration changes
- File integrity monitoring on HMI and historian servers
- Detecting DDoS and protocol flooding in control networks
- Behavioural analytics for operator account misuse
- Centralised log retention and compliance archiving
Module 9: Incident Response & Crisis Management - Building an OT-specific incident response playbook
- Defining roles during cyber-physical incidents
- Isolation procedures for compromised controllers
- Safety-first decision making in control system events
- Coordination between OT, IT, and emergency services
- Forensic data collection without disrupting operations
- Chain of custody for digital evidence in industrial systems
- Declaring a cyber emergency: thresholds and triggers
- Public communications strategy during an outage
- Regulatory reporting timelines and content
- Post-incident review and root cause analysis
- Updating response plans based on lessons learned
- Simulated incident drills for control room teams
- Recovery sequencing for safety-critical systems
- Legal and insurance coordination during events
Module 10: Recovery, Resilience & Business Continuity - Backup strategies for engineering configurations and HMI projects
- Secure offline storage of critical system images
- Restoration validation without live network impact
- Failover testing for redundant control systems
- Developing a cyber-physical business continuity plan
- Manual override procedures during cyber incidents
- Supply chain continuity for ICS spare parts
- Workarounds for disabled digital systems
- Rebuilding compromised systems from clean images
- Post-recovery system validation checklist
- Insurance considerations for cyber-physical damage
- Reputation management following public incidents
- Updating resilience plans annually
- Third-party restoration service vetting
- Parallel operation testing post-recovery
Module 11: Physical Security & Environmental Controls - Securing control rooms and network cabinets
- Access control systems for physical entry points
- Camera surveillance and monitoring of critical zones
- Environmental monitoring: temperature, humidity, power
- Preventing unauthorised USB use in OT systems
- Securing engineering laptops and portable media
- Visitor management and escort protocols
- Lockdown procedures during cyber alerts
- Redundant power and UPS systems for security devices
- Lightning and surge protection for outdoor equipment
- Fire suppression systems compatible with electronics
- Securing wireless backup communication links
- Documentation access controls and print management
- Perimeter security for remote substations and sites
- Drone detection and countermeasures near critical sites
Module 12: Supply Chain & Third-Party Risk - Vendor cybersecurity questionnaires and assessments
- Contractual cybersecurity obligations for suppliers
- Monitoring third-party access to OT networks
- Software bill of materials (SBOM) for ICS products
- Validating vendor security claims through audits
- Secure onboarding and offboarding of partners
- Monitoring for compromised contractor credentials
- Using ISO 28000 and NIST SP 800-161 for supply chain
- Assessing cloud service providers for OT integration
- Secure firmware update processes from vendors
- Third-party incident notification requirements
- Conducting remote audits of supplier environments
- Managing open-source components in industrial software
- Secure development lifecycle (SDL) expectations for vendors
- Annual third-party risk reassessment cycle
Module 13: Emerging Technologies & Future Threats - Securing IIoT devices in process environments
- Risk assessment for AI-driven process optimisation
- Quantum computing threats to industrial encryption
- 5G integration in remote monitoring and control
- Edge computing security at remote sites
- Secure integration of digital twins with live systems
- Blockchain for secure logging and audit trails
- Risk profile of cloud-connected historians and SCADA
- Secure APIs for data exchange with enterprise systems
- Autonomous systems and fail-safe decision logic
- Resilience by design for next-generation infrastructure
- Threat modelling for smart cities and grid modernisation
- Post-quantum cryptography migration planning
- AI-based anomaly detection vs adversarial manipulation
- Evaluating new technologies through a security-first lens
Module 14: Certification, Documentation & Audit Readiness - Building a comprehensive cybersecurity manual for your facility
- Documenting policies, procedures, and responsibilities
- Creating audit trails for access, changes, and incidents
- Preparing for internal and external security audits
- Using checklists to verify compliance across all domains
- Responding to auditor findings and corrective actions
- Developing a security awareness training program for staff
- Tracking employee training completion and refreshers
- Generating executive summary reports for leadership
- Creating a living risk register with treatment plans
- Mapping controls to multiple frameworks simultaneously
- Secure document management and version control
- Automated compliance reporting templates
- Third-party validation and attestation preparation
- Finalising your Certificate of Completion submission
Module 15: Capstone Project & Certification Pathway - Selecting a real or simulated infrastructure asset for assessment
- Conducting a full cyber resilience maturity assessment
- Developing a custom zone and conduit model
- Mapping identified risks to NIST CSF and ISA/IEC 62443
- Creating compensating controls for legacy systems
- Designing detection and response playbooks
- Building a 30-day action plan for implementation
- Preparing a board-ready executive summary report
- Submitting your project for review and validation
- Receiving expert feedback and refinement guidance
- Finalising documentation for audit readiness
- Earning your Certificate of Completion
- Leveraging your credential in career advancement
- Accessing post-course resources and community
- Planning your next steps in infrastructure cybersecurity leadership
- Role-based access control (RBAC) for SCADA systems
- Multi-factor authentication for engineering workstations
- Principle of least privilege in OT environments
- Managing shared accounts and default credentials
- Privileged access management (PAM) for OT administrators
- Session monitoring and keystroke logging for engineers
- Temporary access requests and approval workflows
- Active Directory integration challenges with OT
- Local account governance on HMIs and servers
- Emergency break-glass account procedures
- Vendor access time limits and audit trails
- Access revocation upon role change or termination
- Service account hardening for data synchronisation
- Segregating engineering, operations, and IT access
- Logging and reviewing access events weekly
Module 8: Detection & Monitoring in OT Environments - Configuring SIEM for industrial network telemetry
- Normalising OT logs from diverse protocols
- Developing custom detection rules for suspicious behaviour
- Using network flow analysis to spot anomalies
- Endpoint detection on engineering workstations
- Passive monitoring without introducing latency
- Alarm fatigue reduction through intelligent correlation
- Establishing OT-specific baselines for network traffic
- Integrating physical security logs with cybersecurity events
- Real-time dashboards for SOC and operations teams
- Automated alerting for unauthorised configuration changes
- File integrity monitoring on HMI and historian servers
- Detecting DDoS and protocol flooding in control networks
- Behavioural analytics for operator account misuse
- Centralised log retention and compliance archiving
Module 9: Incident Response & Crisis Management - Building an OT-specific incident response playbook
- Defining roles during cyber-physical incidents
- Isolation procedures for compromised controllers
- Safety-first decision making in control system events
- Coordination between OT, IT, and emergency services
- Forensic data collection without disrupting operations
- Chain of custody for digital evidence in industrial systems
- Declaring a cyber emergency: thresholds and triggers
- Public communications strategy during an outage
- Regulatory reporting timelines and content
- Post-incident review and root cause analysis
- Updating response plans based on lessons learned
- Simulated incident drills for control room teams
- Recovery sequencing for safety-critical systems
- Legal and insurance coordination during events
Module 10: Recovery, Resilience & Business Continuity - Backup strategies for engineering configurations and HMI projects
- Secure offline storage of critical system images
- Restoration validation without live network impact
- Failover testing for redundant control systems
- Developing a cyber-physical business continuity plan
- Manual override procedures during cyber incidents
- Supply chain continuity for ICS spare parts
- Workarounds for disabled digital systems
- Rebuilding compromised systems from clean images
- Post-recovery system validation checklist
- Insurance considerations for cyber-physical damage
- Reputation management following public incidents
- Updating resilience plans annually
- Third-party restoration service vetting
- Parallel operation testing post-recovery
Module 11: Physical Security & Environmental Controls - Securing control rooms and network cabinets
- Access control systems for physical entry points
- Camera surveillance and monitoring of critical zones
- Environmental monitoring: temperature, humidity, power
- Preventing unauthorised USB use in OT systems
- Securing engineering laptops and portable media
- Visitor management and escort protocols
- Lockdown procedures during cyber alerts
- Redundant power and UPS systems for security devices
- Lightning and surge protection for outdoor equipment
- Fire suppression systems compatible with electronics
- Securing wireless backup communication links
- Documentation access controls and print management
- Perimeter security for remote substations and sites
- Drone detection and countermeasures near critical sites
Module 12: Supply Chain & Third-Party Risk - Vendor cybersecurity questionnaires and assessments
- Contractual cybersecurity obligations for suppliers
- Monitoring third-party access to OT networks
- Software bill of materials (SBOM) for ICS products
- Validating vendor security claims through audits
- Secure onboarding and offboarding of partners
- Monitoring for compromised contractor credentials
- Using ISO 28000 and NIST SP 800-161 for supply chain
- Assessing cloud service providers for OT integration
- Secure firmware update processes from vendors
- Third-party incident notification requirements
- Conducting remote audits of supplier environments
- Managing open-source components in industrial software
- Secure development lifecycle (SDL) expectations for vendors
- Annual third-party risk reassessment cycle
Module 13: Emerging Technologies & Future Threats - Securing IIoT devices in process environments
- Risk assessment for AI-driven process optimisation
- Quantum computing threats to industrial encryption
- 5G integration in remote monitoring and control
- Edge computing security at remote sites
- Secure integration of digital twins with live systems
- Blockchain for secure logging and audit trails
- Risk profile of cloud-connected historians and SCADA
- Secure APIs for data exchange with enterprise systems
- Autonomous systems and fail-safe decision logic
- Resilience by design for next-generation infrastructure
- Threat modelling for smart cities and grid modernisation
- Post-quantum cryptography migration planning
- AI-based anomaly detection vs adversarial manipulation
- Evaluating new technologies through a security-first lens
Module 14: Certification, Documentation & Audit Readiness - Building a comprehensive cybersecurity manual for your facility
- Documenting policies, procedures, and responsibilities
- Creating audit trails for access, changes, and incidents
- Preparing for internal and external security audits
- Using checklists to verify compliance across all domains
- Responding to auditor findings and corrective actions
- Developing a security awareness training program for staff
- Tracking employee training completion and refreshers
- Generating executive summary reports for leadership
- Creating a living risk register with treatment plans
- Mapping controls to multiple frameworks simultaneously
- Secure document management and version control
- Automated compliance reporting templates
- Third-party validation and attestation preparation
- Finalising your Certificate of Completion submission
Module 15: Capstone Project & Certification Pathway - Selecting a real or simulated infrastructure asset for assessment
- Conducting a full cyber resilience maturity assessment
- Developing a custom zone and conduit model
- Mapping identified risks to NIST CSF and ISA/IEC 62443
- Creating compensating controls for legacy systems
- Designing detection and response playbooks
- Building a 30-day action plan for implementation
- Preparing a board-ready executive summary report
- Submitting your project for review and validation
- Receiving expert feedback and refinement guidance
- Finalising documentation for audit readiness
- Earning your Certificate of Completion
- Leveraging your credential in career advancement
- Accessing post-course resources and community
- Planning your next steps in infrastructure cybersecurity leadership
- Building an OT-specific incident response playbook
- Defining roles during cyber-physical incidents
- Isolation procedures for compromised controllers
- Safety-first decision making in control system events
- Coordination between OT, IT, and emergency services
- Forensic data collection without disrupting operations
- Chain of custody for digital evidence in industrial systems
- Declaring a cyber emergency: thresholds and triggers
- Public communications strategy during an outage
- Regulatory reporting timelines and content
- Post-incident review and root cause analysis
- Updating response plans based on lessons learned
- Simulated incident drills for control room teams
- Recovery sequencing for safety-critical systems
- Legal and insurance coordination during events
Module 10: Recovery, Resilience & Business Continuity - Backup strategies for engineering configurations and HMI projects
- Secure offline storage of critical system images
- Restoration validation without live network impact
- Failover testing for redundant control systems
- Developing a cyber-physical business continuity plan
- Manual override procedures during cyber incidents
- Supply chain continuity for ICS spare parts
- Workarounds for disabled digital systems
- Rebuilding compromised systems from clean images
- Post-recovery system validation checklist
- Insurance considerations for cyber-physical damage
- Reputation management following public incidents
- Updating resilience plans annually
- Third-party restoration service vetting
- Parallel operation testing post-recovery
Module 11: Physical Security & Environmental Controls - Securing control rooms and network cabinets
- Access control systems for physical entry points
- Camera surveillance and monitoring of critical zones
- Environmental monitoring: temperature, humidity, power
- Preventing unauthorised USB use in OT systems
- Securing engineering laptops and portable media
- Visitor management and escort protocols
- Lockdown procedures during cyber alerts
- Redundant power and UPS systems for security devices
- Lightning and surge protection for outdoor equipment
- Fire suppression systems compatible with electronics
- Securing wireless backup communication links
- Documentation access controls and print management
- Perimeter security for remote substations and sites
- Drone detection and countermeasures near critical sites
Module 12: Supply Chain & Third-Party Risk - Vendor cybersecurity questionnaires and assessments
- Contractual cybersecurity obligations for suppliers
- Monitoring third-party access to OT networks
- Software bill of materials (SBOM) for ICS products
- Validating vendor security claims through audits
- Secure onboarding and offboarding of partners
- Monitoring for compromised contractor credentials
- Using ISO 28000 and NIST SP 800-161 for supply chain
- Assessing cloud service providers for OT integration
- Secure firmware update processes from vendors
- Third-party incident notification requirements
- Conducting remote audits of supplier environments
- Managing open-source components in industrial software
- Secure development lifecycle (SDL) expectations for vendors
- Annual third-party risk reassessment cycle
Module 13: Emerging Technologies & Future Threats - Securing IIoT devices in process environments
- Risk assessment for AI-driven process optimisation
- Quantum computing threats to industrial encryption
- 5G integration in remote monitoring and control
- Edge computing security at remote sites
- Secure integration of digital twins with live systems
- Blockchain for secure logging and audit trails
- Risk profile of cloud-connected historians and SCADA
- Secure APIs for data exchange with enterprise systems
- Autonomous systems and fail-safe decision logic
- Resilience by design for next-generation infrastructure
- Threat modelling for smart cities and grid modernisation
- Post-quantum cryptography migration planning
- AI-based anomaly detection vs adversarial manipulation
- Evaluating new technologies through a security-first lens
Module 14: Certification, Documentation & Audit Readiness - Building a comprehensive cybersecurity manual for your facility
- Documenting policies, procedures, and responsibilities
- Creating audit trails for access, changes, and incidents
- Preparing for internal and external security audits
- Using checklists to verify compliance across all domains
- Responding to auditor findings and corrective actions
- Developing a security awareness training program for staff
- Tracking employee training completion and refreshers
- Generating executive summary reports for leadership
- Creating a living risk register with treatment plans
- Mapping controls to multiple frameworks simultaneously
- Secure document management and version control
- Automated compliance reporting templates
- Third-party validation and attestation preparation
- Finalising your Certificate of Completion submission
Module 15: Capstone Project & Certification Pathway - Selecting a real or simulated infrastructure asset for assessment
- Conducting a full cyber resilience maturity assessment
- Developing a custom zone and conduit model
- Mapping identified risks to NIST CSF and ISA/IEC 62443
- Creating compensating controls for legacy systems
- Designing detection and response playbooks
- Building a 30-day action plan for implementation
- Preparing a board-ready executive summary report
- Submitting your project for review and validation
- Receiving expert feedback and refinement guidance
- Finalising documentation for audit readiness
- Earning your Certificate of Completion
- Leveraging your credential in career advancement
- Accessing post-course resources and community
- Planning your next steps in infrastructure cybersecurity leadership
- Securing control rooms and network cabinets
- Access control systems for physical entry points
- Camera surveillance and monitoring of critical zones
- Environmental monitoring: temperature, humidity, power
- Preventing unauthorised USB use in OT systems
- Securing engineering laptops and portable media
- Visitor management and escort protocols
- Lockdown procedures during cyber alerts
- Redundant power and UPS systems for security devices
- Lightning and surge protection for outdoor equipment
- Fire suppression systems compatible with electronics
- Securing wireless backup communication links
- Documentation access controls and print management
- Perimeter security for remote substations and sites
- Drone detection and countermeasures near critical sites
Module 12: Supply Chain & Third-Party Risk - Vendor cybersecurity questionnaires and assessments
- Contractual cybersecurity obligations for suppliers
- Monitoring third-party access to OT networks
- Software bill of materials (SBOM) for ICS products
- Validating vendor security claims through audits
- Secure onboarding and offboarding of partners
- Monitoring for compromised contractor credentials
- Using ISO 28000 and NIST SP 800-161 for supply chain
- Assessing cloud service providers for OT integration
- Secure firmware update processes from vendors
- Third-party incident notification requirements
- Conducting remote audits of supplier environments
- Managing open-source components in industrial software
- Secure development lifecycle (SDL) expectations for vendors
- Annual third-party risk reassessment cycle
Module 13: Emerging Technologies & Future Threats - Securing IIoT devices in process environments
- Risk assessment for AI-driven process optimisation
- Quantum computing threats to industrial encryption
- 5G integration in remote monitoring and control
- Edge computing security at remote sites
- Secure integration of digital twins with live systems
- Blockchain for secure logging and audit trails
- Risk profile of cloud-connected historians and SCADA
- Secure APIs for data exchange with enterprise systems
- Autonomous systems and fail-safe decision logic
- Resilience by design for next-generation infrastructure
- Threat modelling for smart cities and grid modernisation
- Post-quantum cryptography migration planning
- AI-based anomaly detection vs adversarial manipulation
- Evaluating new technologies through a security-first lens
Module 14: Certification, Documentation & Audit Readiness - Building a comprehensive cybersecurity manual for your facility
- Documenting policies, procedures, and responsibilities
- Creating audit trails for access, changes, and incidents
- Preparing for internal and external security audits
- Using checklists to verify compliance across all domains
- Responding to auditor findings and corrective actions
- Developing a security awareness training program for staff
- Tracking employee training completion and refreshers
- Generating executive summary reports for leadership
- Creating a living risk register with treatment plans
- Mapping controls to multiple frameworks simultaneously
- Secure document management and version control
- Automated compliance reporting templates
- Third-party validation and attestation preparation
- Finalising your Certificate of Completion submission
Module 15: Capstone Project & Certification Pathway - Selecting a real or simulated infrastructure asset for assessment
- Conducting a full cyber resilience maturity assessment
- Developing a custom zone and conduit model
- Mapping identified risks to NIST CSF and ISA/IEC 62443
- Creating compensating controls for legacy systems
- Designing detection and response playbooks
- Building a 30-day action plan for implementation
- Preparing a board-ready executive summary report
- Submitting your project for review and validation
- Receiving expert feedback and refinement guidance
- Finalising documentation for audit readiness
- Earning your Certificate of Completion
- Leveraging your credential in career advancement
- Accessing post-course resources and community
- Planning your next steps in infrastructure cybersecurity leadership
- Securing IIoT devices in process environments
- Risk assessment for AI-driven process optimisation
- Quantum computing threats to industrial encryption
- 5G integration in remote monitoring and control
- Edge computing security at remote sites
- Secure integration of digital twins with live systems
- Blockchain for secure logging and audit trails
- Risk profile of cloud-connected historians and SCADA
- Secure APIs for data exchange with enterprise systems
- Autonomous systems and fail-safe decision logic
- Resilience by design for next-generation infrastructure
- Threat modelling for smart cities and grid modernisation
- Post-quantum cryptography migration planning
- AI-based anomaly detection vs adversarial manipulation
- Evaluating new technologies through a security-first lens
Module 14: Certification, Documentation & Audit Readiness - Building a comprehensive cybersecurity manual for your facility
- Documenting policies, procedures, and responsibilities
- Creating audit trails for access, changes, and incidents
- Preparing for internal and external security audits
- Using checklists to verify compliance across all domains
- Responding to auditor findings and corrective actions
- Developing a security awareness training program for staff
- Tracking employee training completion and refreshers
- Generating executive summary reports for leadership
- Creating a living risk register with treatment plans
- Mapping controls to multiple frameworks simultaneously
- Secure document management and version control
- Automated compliance reporting templates
- Third-party validation and attestation preparation
- Finalising your Certificate of Completion submission
Module 15: Capstone Project & Certification Pathway - Selecting a real or simulated infrastructure asset for assessment
- Conducting a full cyber resilience maturity assessment
- Developing a custom zone and conduit model
- Mapping identified risks to NIST CSF and ISA/IEC 62443
- Creating compensating controls for legacy systems
- Designing detection and response playbooks
- Building a 30-day action plan for implementation
- Preparing a board-ready executive summary report
- Submitting your project for review and validation
- Receiving expert feedback and refinement guidance
- Finalising documentation for audit readiness
- Earning your Certificate of Completion
- Leveraging your credential in career advancement
- Accessing post-course resources and community
- Planning your next steps in infrastructure cybersecurity leadership
- Selecting a real or simulated infrastructure asset for assessment
- Conducting a full cyber resilience maturity assessment
- Developing a custom zone and conduit model
- Mapping identified risks to NIST CSF and ISA/IEC 62443
- Creating compensating controls for legacy systems
- Designing detection and response playbooks
- Building a 30-day action plan for implementation
- Preparing a board-ready executive summary report
- Submitting your project for review and validation
- Receiving expert feedback and refinement guidance
- Finalising documentation for audit readiness
- Earning your Certificate of Completion
- Leveraging your credential in career advancement
- Accessing post-course resources and community
- Planning your next steps in infrastructure cybersecurity leadership
