Fundamentals of Industrial Security

Digitisation, networking of machinery and digital elements in automation require Industrial Security to be considered in order to protect machinery. The aim of this training is to build up basic knowledge of Industrial Cyber Security: Basic terminology, concepts and regulatory requirements enable participants to access the subject through clear, practical examples, and communicate basic specialist knowledge of cyber security in the machinery sector. Specific topics in the area of network technology lead to a deeper technical understanding. Cyber-attack scenarios and typical behaviours of attackers in industry are described, while risk reduction options, particularly on machinery, are also presented.

As a result, this Industrial Cyber Security Training provides an optimum basis for acquiring the knowledge needed to improve the security of your own industrial plant and machinery. Theoretical expertise is combined with practical examples and best practice, to increase protection, particularly against cyber threats.

Introduction to Industrial Security

• Differences between Operational Technology (OT) and Information Technology (IT)
• Defence in Depth
• Overview of assets
• Machinery Safety and Industrial Security
• Different attacker groups
• Malware in general

Fundamentals of network security

• Types of networks, devices and industrial protocols
• Network segmentation
• Difference between secure and unsecure communications

Threats, protective measures and best practice

• Possible threat scenarios and best practices
• Cyber Kill Chain framework
• General weaknesses and specific vulnerabilities

Legislation and standards

• EU Machinery Regulation
• Cyber Resilience Act (CRA)
• NIS 2 Directive
• Relevant legislations from outside EU
• Overview of Industrial Security standards
• Foundations of IEC 62443
• Introduction to EN 50742
• Introduction to ISO 27000

Impact of cyber-attacks on OT systems

Basics of security risk assessment

This training is aimed at all employees of machine manufacturers, integrators and operators who are looking for an introduction to the subject of Industrial Security. The training is particularly suitable for those who are responsible for Machinery Safety in day-to-day operations, such as:

• Design engineers
• Project managers
• Planners
• System integrators
• Safety officers
• Production managers/those responsible for production
• Those responsible for upgrades and maintenance of plant and machinery
• Technical purchasers

The “Fundamentals of Industrial Security” training course is the ideal preparation for the expert training CESA – Certified Expert for Security in Automation. The training is provided in both classroom and online format with a live instructor. For online training, a laptop equipped with a webcam, and Google Chrome or Microsoft Edge is required to participate.

• Introduction to the subject of Industrial Security, covering the most important principles, terms and specialist knowledge – including the latest relevant standards and legal requirements.
• Best practices for understanding cybersecurity risks relating to machinery and network security in your own production facilities.
• Practical reference by analysing actual cyber-attacks.