Cyber Security Risk Management for Industrial Control Systems

Method offers the Cyber Security Risk Management training course for those responsible for the security of industrial automation, control and safety systems – known as “operational technology” (OT) to differentiate it from “information technology” (IT). The course recognises that the optimum approach to security in OT may be quite different to what would be considered good practice in an IT environment.

The overall goal of the training is to provide individuals responsible for OT security on industrial sites with sufficient knowledge that they can understand their obligations for legal and regulatory compliance, develop procedures and policies to achieve such compliance, identify and commission competent 3rd party suppliers to carry out necessary tasks and otherwise manage the sites approach to OT security.

The course content is designed to explain the requirements of the various international standards for security and is developed to specifically address the guidance developed by the UK Health and Safety Executive on industrial security.

The course is presented over 3 days, with 2 days of conventional classroom training and the 3rd day being devoted to a structured role-play exercise which involves managing a cyber security attack. Satisfying the requirements of the course depends on satisfactory performance in the role play exercise.