Teach on Udemy

Turn what you know into an opportunity and reach millions around the world.

Learn More

Your cart is empty.

Keep shopping

Industrial Cyber Security from IEC62443 for ICS/OT

Name: Industrial Cyber Security from IEC62443 for ICS/OT
Rating: 4.2 (850 reviews)

Gain expertise in IEC 62443 Standard, and learn how to implement it for zoning, conducting risk assessments and more.

Created bySourabh Suman

Last updated 9/2023

English

What you'll learn

IEC 62443 standard from publicaly available sources
Authentication and Authorization controls
Cybersecurity Controls for ICS/OT
Controls: DFA, Firewalls, VPN, PKI
Controls: Password, Biometric, Token
Zones, Conduits and Security Levels
Foundational requirements
Log management
High/Low level Risk assessment
Industrial use case for SL1-SL3

Course content

10 sections • 68 lectures • 9h 26m total length

Setting up Context2:14
This is about the contents of course and moto behind the course, also what you will learn on the course.
Key IACS Roles6:04
IEC 62443-14:29
In this lecture we will learn about IEC 62443, In total, we will understand all segments of IEC 62443
IEC 62443-26:08
IEC 62443-34:04
IEC 62443-41:54
Security Levels (SL0 to SL4)8:10
In this lecture you will learn about several Security level which will be used in upcoming lectures or in your industry as well.
Levels of Control System (Contextual Model (L0-L4)4:47
In this module, you will learn about the levels of control systems as per contextual model of 62443.
Maturity Levels7:54
In this module, we will see what are four maturity levels and how they are different from security levels.
Security Level types: Target, Achieved and Capability7:16
In this module, we will learn about types of security levels as per standard.
Zone & Conduits8:09
In this module, we will learn about zones and conduits, which are basic of the contextual model or any other as per standard.
Foundational requirements2:25
In this chapter we will learn about foundational requirements for setting up or maintaining a IACS system
Test yur knowledge!

FR 1-Identification and Authentication14:55
FR 2-Use Control12:05
We will understand the use control and its rationale, what is use control and privilege.
FR 3-System Integrity14:24
FR 4-Data Confidentiality3:31
FR 5-Restricted Data flow5:49
We will learn about why network segmentation is required or how can we restrict data.
FR 6-Timely response to events3:36
What are incidents and how to address this requirement?
FR 7-Resource Availability11:22
Availability is of utmost importance in industrial control systems, which is why it is one of the foundational requirements.
Risk Assessment of AB Oil12:20
Foundational Requirements
Test your knowledge

FR 1 - Identification and Authentication Control3:43
Detailed Use Case Study for FR120:20
FR 2 -Use Control4:35
Detailed Use Case Study for FR219:21
FR 3-System Integrity9:22
Detailed Use Case Study FR-320:42
FR 4-Data Confidentiality4:50
Detailed Use Case Study FR-43:43
FR 5-Restricted Data flow3:23
Detailed Use Case Study FR-51:09
FR 6-Timely response to events4:36
Detailed Use Case Study FR-61:30
FR 7-Resource Availability5:49
Detailed Use Case Study FR-78:30
Test your knowledge

Role Based Access Control8:01
Password Authentication4:43
This video will make you understand the purpose and techniques of password authentication in ICS/OT industry.
Challenge/response Authentication5:34
What is CHAP and how it works? Please see to understand.
Physical Token Authentication4:08
In this lecture you will learn about Physical token and its usage, strength and weakness of this solution, as per IEC 62443 standards.
Smart Card Authentication4:07
In this lecture, you will learn about Smart card usage in industrial control systems and recommendations as per IEC 62443.
Biometric Authentication4:52
In this lecture you will learn about Biometric usage in industrial control system and recommendations as per IEC 62443.
Location Based Authentication7:45
In this lecture we will see how location based authentication can be incorporated in the Industrial control system.
Password Distribution & Management13:00
In this video we will learn about the importance of password management, types of password-related attacks, and types of OTP.
Device to Device Authentication5:50
In this video, we will see what is a device to device authentication is and how it can be implemented in industrial systems.
This is the last for authorization and authentication, will continue the next modules in the next course, please keep on checking for the next courses by me.
Authenticator

Network Firewalls9:24
In this video, you will understand the types of network firewalls and the differences between them. The recommendation and industry assessment of these firewalls.
Host Based Firewalls8:18
In this video you will understand about the types of host based firewalls. The recommendation and industry assessment of these firewalls.
Virtual Local Area Networks (VLAN)12:49
In this video you will learn about VLANS and what security benefit it will bring to the infrastructure.
Boundary Protection
Network Firewalls

Virtual Private Networks (VPN)15:17
In this video, you will learn about virtual private networks and types of VPN protocols.
Symmetric Key Encryption14:08
In this chapter, we will learn about symmetric key encryption and how it works with a very simplified explanation.
Public Key Encryption10:56
In this chapter, we will learn about public key encryption and how it works with a very simplified explanation.

Log Auditing Utilities14:30
In this chapter we will learn about the log management methods, log collection and what we want to achieve.
Virus and Malicious Code Detection9:45
In this chapter, we will learn about the virus detection system, and what makes a VDS effective.
Intrusion Detection Systems12:58
Types of Intrusion detection system and how to implement to get maximum out of it.
Vulnerability Scanners-Nessus Demo10:29
In this video we will see what is vulnerability scanning and how it works!

How to implement7:11
In this chapter, we will learn about the basic process to start a cybersecurity program in the industrial environment, like the first steps i.e how to start.
Flowchart for Risk Assessment5:32
Basic flowchart of the activities of the high-level risk and detailed risk assessments.
ZCR 1: Identification of SuC2:26
This will explain identification of system under consideration.
ZCR 2: High Level Risk Assessment2:57
About High level risk assessment of the premises and IACS inventory.
ZCR 3 : Partition of SuC in zones and conduits12:57
In this chapter, we will learn about the type of zones based on their functionalities, communication, and other aspects.
ZCR 4: Detailed Risk Assessment4:18
In this chapter we will learn what to include in the detailed cybersecurity risk assessment.
ZCR 5: Document Cybersecurity requirements, assumptions and constraints5:25
We will learn about documentation, threat analysis, and pitfalls of risk assessment.
SL-Target Calculation, Risk matrix and Template creation11:09

Security Level 119:41
In this chapter, we will learn about the cybersecurity requirements and techniques to achieve SL1 in an industrial environment with an illustrative use case architecture.
Security Level 211:35
In this chapter, we will learn about the cybersecurity requirements and techniques to achieve SL2 in an industrial environment with an illustrative use case architecture.
Security Level 311:39
In this chapter we will learn about the cybersecurity requirements and techniques to achieve SL3 in an industrial environment with a illustrative use case architecture.
Use case for Industrial Firewall19:05
This is a use case of industrial firewall implementation and needs to achieve integrity of firewall to prevent API or Configuration management interface. In this use case, we have checked the required foundational requirements for required security level.
About availability of 62443 Standards6:11

Requirements

Industrial knowledge of DCS/SCADA/PLC is mandatory, if you don't know don't buy!
No programming knowledge required, for core industrial professionals!
Understanding of ICS/OT environment
Prior experience required in ICS---CAUTION, its mandatory!
Architecture awareness of OT systems

Description

*LEARN IEC 62443 STANDARDS AND TECHNICAL REFERENCES *

Welcome to our most economical and comprehensive course on IEC 62443 Standards for Industrial Automation and Control Systems Cybersecurity. In this course, we will deeply dive into the technical reference 62443 and how to implement its controls in the ICS environment.

We will explore industry assessment for cybersecurity controls, probable weaknesses, and their identification, and conduct high-level and detailed risk assessments based on 62443-3-2. You will also learn foundational requirements with use cases from 62443-3-3 and 62443-4-2, along with a general explanation about 62443-2-1 and 2-4.

Our course will include industry use cases for zoning and segmentation from 62443-3-2 and the use case for security level upgrade from SL1 to SL2 to SL3. By the end of this course, you will have a comprehensive understanding of IEC 62443 Standards and the technical controls required to safeguard Industrial Automation and Control Systems Cybersecurity. Enroll now to gain valuable knowledge and expertise in this critical field.

This course is a theoretical course as it explains requirements from standards so please do not expect hands-on practical. For hands-on register for another course "OT/IACS-SOC/SIEM Design and Implementation in Azure".

ICS systems comprise SCADA, DCS, PLC, and many more proprietary systems and protocols. Designing a cybersecurity solution for these systems needs an understanding of OT-related applications and IT-related controls that can fit into these environments.

In this course, we will learn

About 62443 standards and technical references
Technical controls from 62443-3-1 can be implemented in the ICS environment.
Probable weakness, and what does industry assessment for cybersecurity controls
Risk assessment based on 62443-3-2 for high-level and detailed risk assessment.
Foundational requirements with use cases from 62443-3-3 and 62443-4-2
General explanation about 62443-2-1 and 2-4
Industry uses case for zoning, segmentation from 62443-3-2
The use case for security level upgrade from SL1 to SL2 to SL3

* Connect to me on Linkedin/ or visit cyberotsecure{dot}com website to get discounts.*
What do our students say?

I recently completed this course on IEC62443 for ICS/OT and I must say it was a fantastic learning experience. The instructor did an excellent job of breaking down the complex concepts of industrial cybersecurity and explaining them in a simple and understandable manner. The course content was well-structured and covered all the essential aspects of the IEC62443 standard, including risk assessment, security policies, network architecture, and incident response. The practical examples and case studies were particularly helpful in understanding how to apply the standard in real-world scenarios. -Rayyan Khan

This Course is highly recommendable. The way basics are covered is really would be kick start for starting OT security. -Chinmaya Kumar Kar

This is an excellent course summary/outline for IEC62443 compliance. I recommend this course as an advance for those who took up cybersecurity essentials and foundations, and other IT Governance, including a clear understanding of NIST, ISO 27001, ISO 27002, and Security on ICS/OT. This course shall give you additional knowledge on what to expect in compliance procedures and integration. It is most important to understand this course by reading IEC62443 and superintend it with your Risk Management, Gap Analysis in the initial phase readiness stage. -Lou-Riz Garcia

Who this course is for:

Control engineers, integrators, and architects who design or implement OT systems
System administrators, engineers, and other information technology (IT) professionals who administer, patch, or secure OT systems
Security consultants who perform security assessments and penetration testing of OT systems
Cybersecurity managers who are responsible for OT systems
Vendors that are developing products that will be deployed as part of an OT system

Industrial Cyber Security from IEC62443 for ICS/OT

What you'll learn

Explore related topics

Course content

IEC 62443 Basic Introduction12 lectures • 1hr 4min

IEC 62443-2-1 & 2-42 lectures • 16min

Foundational Requirements - 62443-3-38 lectures • 1hr 18min

Foundational Requirements from 62443-4-214 lectures • 1hr 52min

Authentication & Authorization Technologies- 62443-3-19 lectures • 58min

Network Protection Technologies from 62443-3-13 lectures • 31min

Encryption Technologies and Data Validation from 62443-3-13 lectures • 40min

Management, Audit, Measurement, Monitoring and Detection Tools from 62443-3-14 lectures • 48min

Zones, Conduits and Risk Assessments -62443-3-28 lectures • 52min

Cybersecurity Requirements & Techniques-Use Case5 lectures • 1hr 8min

Requirements

Description

Who this course is for: