What's New With SANS ICS Security

SANS Industrial Control Systems Security trains and equips professionals to tackle the security challenges in critical infrastructure environments with the most current practices, methods, and knowledge. SANS ICS Security course authors and instructors are industry experts, leaders, and passionate defenders of crucial infrastructure systems who are creating free innovative resources and applicable content for the ICS community.

SANS ICS Security is excited to share a range of dynamic features with the cybersecurity community:

Free industry-leading content
New and returning ICS courses
Our new curriculum "look"
New SANS ICS swag!

These free resources are created by SANS Instructors and course authors to enrich your ICS cybersecurity knowledge and to give you industry-leading content that you can apply in your ICS role.

BLOGS

View more ICS Blogs here.

POSTERS & CHEAT SHEETS

This cheat sheet provides guidance for Industrial Control System (ICS) Network Security Monitoring (NSM), and Incident Response (IR) for control system environments.

Unlike IT incidents, ICS incidents need to consider potential loss or damage of physical property or engineering assets, as well as safety risks to people and the environment. ICS IR will be a joint effort with security incident responders, engineers, operators, and network architects.

This ICS Assessment Quick Start Guide provides a basic starting point for industrial control system (ICS) assessments that can be applied to all ICS sectors. Concentrating on several primary risk areas, this content aims to help organizations identify opportunities to improve newly established ICS security programs. The ICS Security Program Maturity side of the poster is a guide that covers the basics of using the National Institute of Standards and Technology (NIST) Cyber Security Framework (CSF) in order to understand the maturity of a security program implemented to protect control environments from any industrial control sector.

This guide covers the basic acronyms used in SANS Industrial Control System Security courses and includes terms from Operational Technology (OT), Information Technology (IT), and Information Security (InfoSec).

Find more ICS posters and cheat sheets here!

WEBCASTS

Check out this new ICS webcast series that will address the recent increase in attack campaigns and impacts across multiple sectors in the ICS space. Register today!

See other upcoming ICS webcasts here!

ICS612

As SANS in-person training returns, so does ICS612: ICS Cybersecurity In-Depth! The course is an in-classroom lab setup that moves students through a variety of exercises that show how an adversary can attack a poorly architected ICS and how defenders can secure and manage the environment. Representative of a real ICS environment, the classroom setup includes a connection to the enterprise, which allows for data transfer (i.e., Historian), remote access, and other typical corporate functions.

This course is only offered in-person. See the upcoming ICS612 course runs here.

Watch this live stream of course authors Jeff Shearer and Jason Dely discussing what you can expect from ICS612:

ICS418

We are excited to announce a new ICS course in development! Get ready for ICS418: ICS Security Essentials for Managers. This course fills the identified gap amongst leaders working across critical infrastructure and operational technology environments. It arms ICS managers with defenses that prioritize the business, equipping them with the tools and knowledge to address the business and industry pressures they face when managing cyber threats to the safety and reliability of industrial control systems operations. ICS leaders will leave the course with a firm understanding of the drivers and constraints that exist in cyber-physical environments and a nuanced understanding of how to manage the people, processes, and technologies throughout their organizations. ICS418 will empower new and established ICS Security Managers alike.

More information on ICS418 is soon to come! In the meantime, we are continually developing new courses, so you can learn the latest tools and technologies to keep your organization secure. Here's what else we're working on right now.

We're happy to share our rebrand of SANS Industrial Control Systems Security! Get the new look for yourself! Choose from the following SANS ICS security zoom and desktop backgrounds.

Available for download HERE.

A new look means new ICS gear! Check out a few new items at the SANS store online and keep checking back for new items that are on the way. Plus, keep an eye out for giveaways at upcoming in-person events! What are you waiting for? Get your gear, show it off, and tag us on social media! Shop for your ICS Security gear here!

Stay up to date on the latest SANS ICS Security news, content and training opportunities! By joining the ICS Community Forum, you can discuss current security events, share tips, ask questions, and connect with other ICS professionals passionate about securing our critical infrastructure. Be sure to subscribe and follow us on our social media accounts.