ICS Cybersecurity Awareness Training

Role-based training designed to address the unique risks of industrial environments, ensuring the protection of critical infrastructure against ever-evolving cyber threats.

Security Awareness is Foundational to ICS Defense
 

ICS networks are under constant threat of experiencing cyberattacks. Yet, many key professionals are still navigating this risk with little or no tailored training. Considering that 80% of breaches involve human error, addressing human vulnerabilities is just as important as securing technology.  

SANS ICS Security Awareness Training equips everyone in the ICS environment—from plant managers to operations engineers to vice presidents—with the role-specific skills needed to protect and defend critical infrastructure. 

SANS ICS Cybersecurity Awareness modules train individuals in critical infrastructure environments to navigate and mitigate complex cyber threats. Authored by industry experts Tim Conway and Dean Parsons, these modules are designed to foster a culture of security, aligning with both safety and operational goals within Industrial Control and Operational Technology (OT) environments. 

SANS ICS Cybersecurity Awareness training focuses on the unique needs of ICS industries while equipping anyone who works within ICS environments, regardless of their expertise, with the information necessary to protect and defend critical control systems.

New ICS Cybersecurity Awareness Training Poster

Learn how ICS Security Awareness Training equips every role in your organization to protect critical infrastructure. Download the free poster for insights or contact our team directly to discuss how tailored training can strengthen your defense strategy. The content of this poster, written by Dean Parsons, supports the SANS ICS Cybersecurity Awareness Modules and SANS ICS418: ICS Security Essentials for Managers course, offering key strategies for fostering a strong security culture tailored to industrial environments.

ICS Training Modules

Organized into easily digestible minutes-long modules that showcase authentic, real-world ICS scenarios, this role-based training series is designed to offer valuable lessons for all employees, not just ICS engineers. Modules in this course have been targeted towards Administrative End User (E), ICS Practitioner (P), and Leadership (L) roles as follows:
  • ICS Introduction (E, P, L)
  • ICS Overview* (E, P, L)
  • ICS Drivers and Constraints (P)
  • ICS Overview of Attacks (P)
  • ICS Attack Surfaces (P)
  • ICS Server Security (P)
  • ICS Network Security (P)
  • ICS System Maintenance (P)
  • ICS Information Assurance (P, L)
  • ICS Incident Response (P, L)
  • ICS Attack Scenario (E, P)
  • ICS Ukraine Attack (E, P)
  • ICS Phishing (E, P)
  • ICS Ransomware (P)
  • ICS Awareness and Reporting (E, P)
  • ICS Removable Media (E, P)
  • ICS Cyber Engineering Oldsmar CIE (E, P, L)
  • ICS Transient Cyber Assets (P)
  • ICS Operating through a Ransomware Attack (P, L)
  • ICS Perimeter Attack (P)
  • ICS Supply Chain Summary (P, L)
  • ICS Conclusion (E, P, L)

Who is This Training For?

Your ICS security awareness training program should target roles including but not limited to:

RoleResponsibility
Process EngineersDesigns and optimizes plant processes.
Field TechniciansMaintains and repairs field equipment.
ICS/OT ProgrammersWrites technical program logic for field devices.
ICS/OT Network ArchitectsDesigns network access.
Engineering OperatorsManages, views, and controls overall process.
OwnersKey stakeholders.
ICS/OT and IT Security TeamsDevelops, defends, and supports ICS-specific security.
Integrator/Vendor/ContractorsOn-site or remote support, integrators.
Safety TeamsOn-site physical safety teams.
ICS Security Managers/LeadersICS, IT/OT management - VP Engineering, CSO, etc.