Operational Technology Security Foundation (S-OTSF) Course

The Operational Technology Security Foundation course provides essential knowledge of industrial cybersecurity principles, standards, risk management, and protection strategies.

How do we manage cybersecurity in industrial automation and control systems?

This foundational question lies at the heart of this two-day Operational Technology Security Foundation course on the effective protection of Operational Technology (OT), Industrial Automation and Control Systems (IACS), and SCADA systems.

The Operational Technology Security Foundation course provides a comprehensive foundation in securing industrial automation and control systems (IACS). The training addresses the unique challenges of IACS environments, including technical complexity, system interdependencies, and the evolving threat landscape. Participants will learn to identify, assess, and manage risks, and how to implement effective security measures across their operations.

The Operational Technology Security Foundation course covers the following key topics:

  • Distinctions between IACS and IT security approaches, best practices, and security requirements
  • Alignment and divergence between IT and IACS standards, including IEC 62443, ISO 27001, NIST SP 800-82, and the EU NIS2 Directive
  • Sector-specific regulations and standards for critical infrastructure, including utilities, healthcare, aviation, energy production, and other industries
  • Risk assessment standards and methodologies, including both generic frameworks and IACS-specific approaches
  • IACS security architecture design and strategic implementation
    Security incident response processes and recovery procedures

Examination & Certification

The Operational Technology Security Foundation course does not include a formal examination. Upon successful completion, participants receive a Certificate of Completion.

Objectives:

Upon completion of the Operational Technology Security Foundation course, participants will be able to:

  • Distinguish clearly between IACS and IT security requirements and practices
  • Understand IACS security regulations and applicable standards within their sector
  • Recognize international collaborative frameworks in IACS security, including EE-ISAC, CSIRT, and NCSC
  • Apply the risk management process to IACS systems and assess vulnerabilities systematically
  • Answer the central question of how to protect the IACS environment across technical, process, and control dimensions

Download the complete module overview here.

Prerequisites:

No prior knowledge is required to participate in this Operational Technology Security Foundation course. The program is designed for professionals new to IACS security as well as those with existing technical experience seeking to broaden their understanding of cybersecurity in industrial environments.

Audience:

The Operational Technology Security Foundation course is designed for professionals responsible for IACS security across a wide range of roles and industries, including:

  • Plant managers and operations directors
  • System integrators and technology consultants
  • Engineering, Procurement, and Construction (EPC) contractors
  • OT/IACS architects and infrastructure designers
  • Security Operations Center (SOC) managers and security staff

 

All our public courses can also be delivered in-house at your premises either as standard or tailored depending on the needs and requirements of your business; Contact us if you are interested or want to know more.

Management Systems Training

In-house training

All training courses provided by DNV can be provided as dedicated session customised to your organization.

Our trainers

At DNV, our trainers are more than subject matter experts - they are passionate, high-quality professionals dedicated to empowering individuals and organizations through knowledge.

APQP4Wind Training

APQP4Wind is the common frame of reference to be used in the industry to strengthen the cooperation between manufacturers and suppliers

Cybersecurity Training

Enable specialists and leaders alike to gain job-specific skills and practical knowledge to protect your company and advance your personal career needs.

Environment and energy training

Public concern on environment and energy issues, stricter environmental legislation and increased media attention put more demands on businesses today

Food safety training

The food and beverage industry is moving to satisfy demands from international consumers and to open new market opportunities

Health and safety training

Your company is expected to care for its employees by managing safety and health in a professional way

Healthcare training

Every patient and service user across the globe should get the best care possible

Medical devices training

Production of medical devices is a strictly regulated business. In almost all countries, and for most medical products, there are requirements and standards to which manufacturers need to show compliance

Quality & performance training

An effective quality management system in place can improve your company’s quality processes and overall performance and success

Social responsibility training

Ensuring your commitment to safeguard human rights and operate in an ethical, responsible manner is essential to instill ethical practices and promote a culture of corporate sustainability