OT Safety Control Challenge

An expert-level OT and ICS security course on how a security function challenges its own controls against the constraint that dominates the plant floor: safety and continuous operation come first. Work up the Saltmead Defence Stack - eight layers from the physical process and SIS to the enterprise and safety committee: starting from the hazards in the safety case rather than the CIA triad; keeping the SIS independent of the control system; building the inventory without scanning; challenging the zone-conduit drawing against what is observed; patching under management of change with compensating controls for the long wait; governing remote access through one timed and watched door; monitoring passively; and responding with a safe state first, evidenced to the committee in its own language.

What you'll learn

• Classify security controls by the hazards they protect against and could contribute to, and rank security concerns by the credited protection layers they could degrade.
• Establish and evidence the independence of the SIS from the BPCS, and challenge every security control for shared dependencies, using documentary and walkdown methods only.
• Build an OT asset and communication inventory from engineering documentation, passive capture under MOC and physical walkdowns, without active scanning of live networks.
• Describe a site in zones and conduits, reconcile the drawing with observed flows, give every conduit an owner and disposition, and set security level targets from consequence.

Sign in to enrol — you can pay by bKash or Nagad, or apply a promo code.