Specialisation Course in Industrial Cybersecurity and Industrial Control Systems

Training aimed at industrial cybersecurity professionals. The course is accredited and certified by Nebrija University.

Contents:

1. Introduction to cybersecurity
2. Some context
   • Industrial environments
   • Key elements in industrial environments
   • IT vs OT
3. Use case presentation
4. Basic concepts of industrial cybersecurity
5. Industrial cybersecurity regulations and reference frameworks
   • Cybersecurity management
   • Reference regulatory frameworks
   • IEC 62443
   • NIST 800-r2
   • Other regulations
   • Component cybersecurity
6. Defence strategy
   • Defence strategy
   • Defence in depth
   • Zero Trust
   • Network-level measures
   • Endpoint measures
7. Risk management
   • Risks in industrial environments
   • Attack vectors
   • Some incidents
   • Example of risk analysis
8. Networks and communications
   • Communication principles
   • The rules of the game
   • Communication equipment
   • High availability
   • Topologies
   • Profinet networks
9. Network security architecture
   • Firewalls
   • Theoretical models
   • Network segmentation
   • Remote access to plant environments
10. Endpoint protection

• Protection of plant workstations
• Use of USB devices
• Hardening of industrial assets

11. Monitoring of industrial environments

• Monitoring solutions
• Data collection
• SIEM integration
• Incident management

12. Vulnerability management

• CVE system
• Vulnerability identification
• Vulnerability remediation

13. Information protection

• Information confidentiality in industrial networks
• Security measures for industrial components
• Security measures in development environments
• Backups

14. Suppliers

• General cybersecurity requirements
• On-site interventions
• Requirements for the supply of new systems