Design, Deliver, Defend

Day 1

Learning Outcome: Understand governance, standards and how this can influence system designs.

• IEC 62443 overview with practical application

• MITRE ATT & CK Framework

• NCSC Cyber Assessment Framework (CAF)

• Secure by design concepts

• Reference Architectures

• Zones and Conduits

​​

Day 2

Learning Outcome: Securing the network and mitigating threats.

• Network fundamentals

• Securing the network

• Risks with 'out of the box' configurations

• Network Protocols

• Exploiting common OT Protocols

• Firewalls and edge devices

• Network hardware exploits

​​

Day 3

Learning Outcome: Spotlight into penetration testing. Explore how default/weak configuration across the network and operating system can put your deployments at risk and how to remediate.

• Introduction to Penetration testing

• Explore weakness in Networking and how to exploit

• Explore weakness in default windows/non patched and how to exploit

• Weak passwords

• SNMP risks

• SMB risks

• Port scanning and enumeration

• Using penetration testing tools for system validation

​​

Day 4

Learning Outcome: Using built in tools, toolkits and configuration to make Microsoft Windows more secure.

• Active Directory SCADA – using Group Policy to manage and secure systems

• Standalone SCADA - Windows Workgroup security

• Application Whitelisting

• USB protection

• Patch management

• Moving data between low and high security zones

• Firewalls/Data Diodes/Content Deconstruction, Disarm, Reconstruction and Transposition

• Windows Device hardening

​​

Day 5

Learning Outcome: Practical application of learning throughout the course. Build a small network, securing devices along the way, applying defined security standards and modifying to meet project/business requirements.

• Debloat Windows and reduce attack surface

• Apply defined security baseline(s)

• Review Configuration with security and automation tool(s)

• Security assessment and baseline validation before entering into a Factory Acceptance Test (FAT) cycle

• OT Network monitoring

• OT End point Security using AI

• OT Secure Remote Access