Certification of Completion: A Certificate of Completion indicating the total number of CEUs earned will be provided upon successful completion of the course.

Certificate Program: Part of the ISA/IEC 62443 Cybersecurity Certificate Program

Your course registration includes your registration for the exam.

Description:

The move to using open standards such as Ethernet, TCP/IP, and web technologies in supervisory control and data acquisition (SCADA) and process control networks has begun to expose these systems to the same cyberattacks that have wreaked so much havoc on corporate information systems. This course provides a detailed look at how the ANSI/ISA99 standards can be used to protect your critical control systems. It also explores the procedural and technical differences between the security for traditional IT environments and those solutions appropriate for SCADA or plant floor environments.

You will be able to:

• Discuss the principles behind creating an effective long term program security
• Interpret the ISA/IEC 62443 industrial security framework and apply them to your operation
• Define the basics of risk and vulnerability analysis methodologies
• Describe the principles of security policy development
• Explain the concepts of defense in depth and zone/conduit models of security
• Analyze the current trends in industrial security incidents and methods hackers use to attack a system
• Define the principles behind the key risk mitigation techniques, including anti-virus and patch management, firewalls, and virtual private networks

You will cover:

• Understanding the Current Industrial Security Environment: What is Electronic Security for Industrial Automation and Control Systems? | How IT and the Plant Floor are Different and How They are the Same
• How Cyberattacks Happen: Understanding the Threat Sources | The Steps to Successful Cyberattacks
• Creating A Security Program:  Critical Factors for Success/Understanding the ANSI/ISA-62443-2-1 (ANSI/ISA-99.02.01-2009)- Security for Industrial Automation and Control Systems: Establishing an Industrial Automation and Control Systems Security Program
• Risk Analysis:  Business Rationale | Risk Identification, Classification, and Assessment
• Addressing Risk with Security Policy, Organization, and Awareness: Cyber Security Management System Scope | Organizational Security | Staff Training and Security Awareness
• Addressing Risk with Selected Security Counter Measures: Personnel Security | Physical and Environmental Security | Network Segmentation | Access Control
• Addressing Risk with Implementation Measures: Risk Management and Implementation | System Development and Maintenance | Information and Document Management
• Monitoring and Improving the CSMS: Compliance and Review | Improve and Maintain the CSMS
• Validating or Verifying the Security of Systems: What is being done? | Developing Secure Products and Systems

Classroom/Laboratory Demo:

• PCAP Live Capture Analysis

Includes ISA Standards:

• ANSI/ISA-62443-1-1 (ANSI/ISA-99.00.01-2007), Security for Industrial Automation and Control Systems Part 1: Terminology, Concepts & Models
• ANSI/ISA-62443-2-1 (ANSI/ISA-99.02.01-2009), Security for Industrial Automation and Control Systems: Establishing an Industrial Automation and Control Systems Security Program
• ANSI/ISA-62443-3-3, Security for industrial automation and control systems: System security requirements and security levels

Recommended Pre-Requisites:

There are no required prerequisites for taking this course; however, it is highly recommended that applicants have at least one to three years of experience in the cybersecurity field with some experience in an industrial setting.

ISA Courses: TS06, TS12, or equivalent knowledge/experience would be beneficial.

Note from the Instructor: One of the challenges I have had in teaching IC32 is students attending without any or limited knowledge of TS04, TS06, TS12 or cybersecurity general principles. IC32 is a 14-hour boot camp style class and there is not a lot of time to teach basic comms and cybersecurity.

Recommended reading in preparation for course:

Cybersecurity Library

Which Security Level (SL) would have been required to prevent the attack?

Not sure this particular course is for you?

A pre-instructional survey is available for you to evaluate your level of understanding of the course material and to show you the types of questions you’ll be able to answer after completing the course.

Certification of Completion: A Certificate of Completion indicating the total number of CEUs earned will be provided upon successful completion of the course.

Certificate Program: This course is required for the ISA84 Safety Instrumented Systems Certificate Program 3. When you register for the course, the certificate exam is included with your registration. Please send an email to info@isa.org for further requirements for the exam. ISA Course Safety Instrumented Systems: A Life-Cycle Approach (EC50) or Safety Instrumented Systems: A Life-Cycle Approach (EC50E) and ISA Certificate Safety Instrumented Systems Certificate Program 1 are prerequisites for Certificate Program 3. Those who successfully complete this course and pass the certificate program exam receive the designation of ISA84 SIL Verification Specialist.

Description:

This course focuses on more detailed design issues and further hands-on examples of system analysis/modeling. Students will be better able to perform system design and analysis thus saving their companies time and money in optimizing system designs. This course will enable you to analyze any system technology and configuration to see if it will meet the required SIL (Safety Integrity Level) and determine if existing systems are safe enough, if they need to be upgraded, and whether proposed systems will meet the performance requirements. You will also be able to determine the optimum manual test interval for any system, saving your company time and money by not over- or under-testing systems.

You will be able to:

• Analyze any system technology and configuration to see if it will meet the required SIL (Safety Integrity Level)
• Determine if existing systems are safe enough (or whether they need to be upgraded) and whether proposed systems will meet the performance requirements
• Determine the optimum manual test interval for any system, saving your company time and money by not over or under-testing systems

You will cover:

• System Modeling/Analysis Hands-On Advanced Examples: Multiple Examples with Different Field Device Technologies | Configurations | Diagnostic Levels | Test Intervals | Common Cause Factors | Imperfect Manual Testing
• Detailed Design Topics: Fault Tolerance | Safe Failure Fraction | Diagnostic Coverage | Confidence Limits | System Response to Faults | Using Devices for Control and Safety | Non Fail-Safe Design Requirements | Interface Requirements

Classroom/Laboratory Exercises:

“Laboratory/Application Exercises really good on driving you to think.”

—Thomas Jackson, EC54 Student

• The course consists of multiple application exercises of system modeling/analysis

A hand-held/scientific calculator should be brought to class.

Classroom Copies of ISA/IEC 61511 standards will be provided for your use during the course

Textbook Included: Safety Instrumented Systems Verification – Practical Probabilistic Calculations by William Goble and Harry Cheddie

Recommended Course Prerequisites:

• ISA course Safety Instrumented Systems-Design, Analysis, and Justification (EC50 or EC50E) or fundamental understanding of Safety Instrumented Systems

Not sure this particular course is for you?

A pre-instructional survey is available for you to evaluate your level of understanding of the course material and to show you the types of questions you’ll be able to answer after completing the course.

Related Files

Pre Instructional Survey (Adobe PDF File)