Description
1 day
€ 805,- plus VAT
10 people
What you can expect from
ICS.221 Assessing OT
Focus on special topics with practical relevance
Whether incident handling, security assessments, or standards such as IEC 62443, Additions training courses focus on topics that often make a difference in professional practice.
Comprehensive knowledge – acquired in a single day
The training courses are deliberately kept compact and convey in-depth knowledge in a short period of time that can be immediately applied in everyday work.
Industry experience – directly from the experts
Our trainers bring real-life war stories, lessons learned, and best practices from OT projects to the table—for training that is not only theoretically convincing.
What you will learn during this training course
Basics & Standards
- Underground economy
Introduction to the threat landscape and motivation of attackers in the OT environment - Requirements from IEC 62443 & ISO 27001
Overview of relevant standards and their requirements for security tests in industrial control systems
Technical tests
- ICS Asset Discovery
- Verification of users and authorizations
- Configuration review of ICS systems
- Checking patch and software versions
- Checking the perimeter protection
Test methodology & tools
- Methodology for an ICS security test
- Test of the BSI ICS Top 10
- Use and parameterization of test tools for production environments
After the training, the participants have
- viewed Networks and systems through the eyes of an attacker and potential attack vectors and security problems are identified.
- knowledge of what needs to be considered during a security audit in an industrial environment.
- an understanding of how the results of a security check can lead to an increased level of security.
What others say
You are on the search for an individual In-house training for your team?
Take your OT security know-how to the next level.
Get to know our
trainers
Kerstin Reisinger
is an Offensive Security Certified Professional and trainer for Industrial Security. As a long-standing, experienced project manager in complex OT security projects, she supports industrial companies and energy suppliers with a great deal of technical knowledge. She likes to incorporate this experience into her classes as war stories.
Lucas Brandstätter
supports companies in the introduction of management systems with his vast knowledge in the ISMS (ISO 27000) and OSMS (IEC 62443) area. In risk analyses and penetration tests, he checks systems for untapped potential for improvement. In training courses he emphasizes interactive feedback from participants.
Thomas Brandstetter
is our „broad-spectrum antibiotic“ against security ignorance. As a Stuxnet Incident Handler and former head of Siemens ProductCERT, he knows industrial security from all life-cycle phases. He is Professor of IT and OT Security at the University of Applied Sciences St. Pölten and is certified for CISSP, GSEC, GICSP and GRID.
Sixtus Leonhardsberger
is an OT Security Specialist with a focus on penetration testing of OT environments and embedded devices/IoT devices. In addition to his passion for technical OT security topics, he also shares his experience from consulting projects on securing networks and architectures with the training participants.
