Syllabus ICS/OT

01

Module 1: Fundamentals

1.01 Introduction – ICS and CPS Cybersecurity 101

- Common terms IT, OT, IOT, IIOT

- Current Trends in Industrial Technologies

- The Cyber-Physical Challenges\

- Cybersecurity in the context of CPS: Basic Terms and Concepts CIA vs SRA; Cyber Threat vs Cyber Risk; Controls - People, Technology, Operations; Prevention, Detection, Response; Zero Trust; Compartmentalization; Least privileged; Authentication and access control; Defense-in-Depth…

- Current Threats/attacks for CPS (MITRE ATT&CK and MITRE ATT&CK for ICS) 

  • The ICS Cyber kill chain to achieve a full compromise, mapped to MITRE TTPs, to demonstrate defense in depth. Based on real-world attacks  
  •  

1.02 OT/ICS Environment explained.

- Introduction to ICS architecture 

- ICS Edge components: RTU, PLC, IED, IIoT, HMI, Eng. Station

- SCADA Communication Topology and protocols

- DCS Network

- The Purdue Model 

- Defensible network architecture, data diodes and data cleansing

- IoT reference architecture

 

1.03 ICS Cyber Kill chain 

- Attacker’s Perspective – “Let there be Light” exercise.

- ICS Cyber kill-chain

- ICS MITRE Att&CK framework

- Preparations - Lab environment explained.

- Hands-on lab: OT Reconnaissance and Discovery

 

1.04 ICS/CPS Fundamentals: Summary & Review