Udemy Business

Teach on Udemy

Turn what you know into an opportunity and reach millions around the world.

Learn More

Your cart is empty.

Keep shopping

ICS Cybersecurity: SCADA, PLC, DCS & IEC 62443 Guide

Name: ICS Cybersecurity: SCADA, PLC, DCS & IEC 62443 Guide
Rating: 4.3 (109 reviews)

Master SCADA, PLC & DCS security, IEC 62443, Purdue Model, network segmentation & intrusion detection - 358 students

Created byProjectEngPro Engineering and Project Management

Last updated 11/2026

English

English [Auto],

What you'll learn

Describe how SCADA, PLC, DCS and safety systems work and identify the weak points specific to each
Place ICS assets on the Purdue Model and apply defence in depth from field devices to the enterprise network
Explain how OT security differs from IT security and why availability and safety drive every decision
Trace the stages of a cyber attack on an industrial system and identify where it could have been stopped
Apply the seven IEC 62443 foundational requirements to a real control system
Plan network segmentation and zoning, and control the data flows between OT and IT
Select intrusion detection, secure remote access and SIEM tools suited to an OT environment
Build an OT asset inventory and use it as the base for every other security control

Course content

6 sections • 37 lectures • 6h 46m total length

Introduction4:41
A welcome to the course, with a breakdown of what you will learn about securing industrial control systems, from control system basics to IEC 62443 and practical defences.

Module Introduction10:21
A short introduction to the module on industrial control system types and what it covers.
Distributed Control Systems16:39
What a distributed control system is, how its controllers, I/O, operator stations and networks fit together, and where DCS is used in process plants.
Programmable Logic Controller8:42
How programmable logic controllers work with I/O cards to read field devices and drive outputs, the scan cycle, and where PLCs are used in automation.
SCADA Overview15:22
What SCADA systems do, how they monitor and control assets spread over wide areas, and the roles of RTUs, communications links and the master station.
Building Automation and Control System Overview12:22
How building automation and control systems manage heating, ventilation, lighting, access and fire systems, and why they are part of the OT attack surface.
Safety Instrumented Systems18:49
What safety instrumented systems do, how sensors, logic solvers and final elements bring a plant to a safe state, and why SIS must be kept separate and secure.
Industrial Internet of Things10:39
What the Industrial Internet of Things is, how connected sensors and machines share data for analytics, and the new security risks IIoT brings.
Module Conclusion2:20
A recap of the control system types covered in this module and how they set up the cybersecurity topics that follow.
Section 2 Quiz: Overview of Industrial Control System

Module Introduction6:06
A short introduction to the module on core ICS cybersecurity concepts and what it covers.
Purdue Model for Industrial Control Systems6:32
How the Purdue model divides an industrial network into levels from field devices to enterprise IT, and how it is used to plan segmentation and security zones.
Difference Between OT and IT Networks - Industrial Systems4:46
How operational technology and information technology networks differ in purpose, equipment, lifecycle and priorities, and what that means for people moving between them.
OT Versus IT12:56
Why OT ranks availability above integrity and confidentiality while IT usually puts confidentiality first, and how this changes the way security controls are applied.
Cyber Attacks and Problems13:45
What cyber attacks are, the main types that target organisations and control systems, and the damage they can cause to operations and safety.
Anatomy of a Cyber Attack7:59
The stages of a typical cyber attack, from reconnaissance and initial access to persistence and impact, and where defenders can break the chain.
Defense in Depth Principle8:14
How defence in depth uses several layers of physical, technical and procedural controls so one failed control does not leave a control system exposed.
Contemporary Control System Architectures14:59
How modern control system architectures that blend IT components, remote access and connectivity have widened the attack surface, and the security challenges this creates.
Module Conclusion2:24
A recap of the cybersecurity concepts covered in this module, including the Purdue model, OT versus IT and defence in depth.
Section 3 Quiz: Cyber Security Introduction

Module Introduction21:56
A short introduction to the module on the IEC 62443 foundational requirements and what it covers.
FR1: Identification and Authentication in Cybersecurity6:21
How IEC 62443 FR1 requires every user, process and device to be identified and authenticated before accessing a control system, and how this is done in practice.
FR2: Control System Audit Records and Use control12:33
How IEC 62443 FR2 use control enforces the right privileges for each authenticated user or device, and how audit records support it.
FR3: Control System Integrity (IACS)11:50
How IEC 62443 FR3 protects the integrity of control system software, data and communications against unauthorised change.
FR4: Data Confidentiality, Encrypt, Restrict Access14:30
How IEC 62443 FR4 keeps control system data confidential through encryption and restricted access, both in transit and at rest.
FR5: Control System Network Segmentation Data Flow8:09
How IEC 62443 FR5 restricts data flow by segmenting control networks into zones and conduits and enforcing least privilege between them.
FR6: Timely Response to Events & Monitoring of Data11:14
How IEC 62443 FR6 requires monitoring, logging and timely response to security events and anomalies in a control system.
FR7: Control System Availability, Failure, Fault, Redundancy, Backup16:32
How IEC 62443 FR7 keeps control systems available through redundancy, backups, fault tolerance and protection against denial of service.
Module Close Out1:31
A recap of the IEC 62443 foundational requirements covered in this module and how they support a secure industrial control system.
Section 4 Quiz: IEC 62443 Foundational Requirements

Module Introduction8:44
A short introduction to the module on practical ICS security technologies and what it covers.
Asset Management in Cyber Security17:16
Why an accurate asset inventory is the starting point for ICS security, and how asset management tools find and track control system devices.
Network Segmentation14:57
How network segmentation splits a control network into smaller zones to limit attack spread and improve performance, using firewalls, VLANs and DMZs.
Network Discovery10:31
How passive and active network discovery map devices and traffic on an OT network, and how it supports asset management and intrusion detection.
Intrusion Detection18:02
How intrusion detection systems monitor OT network traffic to spot attacks, the difference between signature and anomaly detection, and how alerts are handled.
Secure Remote Access14:22
How to provide secure remote access to control systems for vendors and engineers, using jump hosts, multi-factor authentication and session control.
SIEM Solutions12:37
How security information and event management (SIEM) tools collect and correlate logs from OT and IT systems to detect threats and support incident response.
End Point Protection10:59
How endpoint protection, including antivirus, application allowlisting, patching and hardening, protects HMIs, servers and engineering workstations.
Module Completion2:19
A recap of the practical ICS security technologies covered in this module, from asset management to endpoint protection.
Section 5 Quiz: Cyber Security In-Depth

Requirements

No prior ICS or cybersecurity experience is required — the course starts from how control systems work
Basic computer literacy is enough to follow the course
Helpful but not essential: some familiarity with computer networks or plant operations
No software, lab equipment or purchases needed

Description

Industrial control systems were built to run plant, not to resist attack. Many still run on flat networks, shared passwords and software that cannot be patched.

Most IT security people have never worked on a PLC, a DCS or a safety system. Most control engineers have never been taught security. The gap between the two is where attacks get in.

This course gives you both halves. It starts with how the control systems work, then explains how they are attacked, then works through IEC 62443 and the controls that protect them.

In this course you will learn how industrial control systems work and how to secure them.

WHAT YOU WILL LEARN TO DO

By the end of this course you will be able to:

Describe how DCS, PLC, SCADA, building automation, safety instrumented systems and IIoT work, and where each is exposed
Place each part of an ICS network on the Purdue Model and explain what should and should not talk across each level
Explain why OT security differs from IT security, and why availability and safety come first on a plant
Follow the anatomy of a cyber attack on an industrial system, from first access to physical effect
Apply defence in depth so that no single control is all that stands between an attacker and the process
Work through all seven IEC 62443 foundational requirements and what each means for a real control system
Plan asset management, network segmentation and network discovery for an OT environment
Choose intrusion detection, secure remote access, SIEM and endpoint protection suited to industrial systems

HOW THE COURSE IS TAUGHT

Built for beginners — control system types are explained before any security topic is introduced
Systems first, then threats, then the standard, then the controls, so each topic builds on the last
Real attacks on industrial systems used to show why each control matters
Vendor-neutral, with no software or lab equipment needed to follow
A quiz at the end of every section to check your understanding as you go

WHAT IS COVERED

Distributed control systems, PLCs, SCADA and building automation systems
Safety instrumented systems and the Industrial Internet of Things
The Purdue Model and contemporary control system architectures
OT against IT networks, cyber attacks and the anatomy of an attack
The defence in depth principle
IEC 62443 FR1 to FR7: authentication, use control, integrity, confidentiality, restricted data flow, timely response and availability
Asset management, network segmentation and network discovery
Intrusion detection, secure remote access, SIEM and endpoint protection

80 PRACTICE QUESTIONS

Every section ends with a quiz built around realistic scenarios, so you test your understanding as you go and reinforce what you have learned. Each answer comes with a short explanation.

Enrol today and learn to protect the systems that run critical infrastructure.

Who this course is for:

IT security professionals moving into OT who have never worked on a PLC, DCS or SCADA system
Control, automation and instrument engineers asked to make their systems secure
Operations and maintenance staff who manage remote access, patching and backups on control systems
Managers starting an IEC 62443 programme who need to understand what the requirements mean in practice
System integrators and vendors who must show their systems meet customer security requirements
Graduates and career changers looking for a structured start in ICS cybersecurity

ICS Cybersecurity: SCADA, PLC, DCS & IEC 62443 Guide

What you'll learn

Explore related topics

Course content

Introduction1 lecture • 5min

Overview of Industrial Control System8 lectures • 1hr 35min

Cyber Security Introuction9 lectures • 1hr 18min

IEC 62443 Foundational Requirements9 lectures • 1hr 45min

Cyber Security In-Depth9 lectures • 1hr 50min

Course Closing1 lecture • 15min

Requirements

Description

Who this course is for: