What: Professional training on understanding, protecting, and securing Industrial Control Systems (ICS) from cyberattacks in coordination with Missoula College
When: Tuesday, June 20th - Friday, June 23rd
Where: Missoula College, 1205 East Broadway Street, Missoula, MT 59802
WHAT TO EXPECT AT THE EVENT:
The free CISA Region 8 ICS cybersecurity course provides training on understanding, protecting, and securing Industrial Control Systems (ICS) from cyberattacks. In order to understand how to best defend a system, trainees will learn about common vulnerabilities and the importance of understanding the environment they are tasked to protect.
Space is limited so please RSVP by Tuesday, June 13th.
Course Descriptions:
Tuesday, June 20th, 8:00 am – 12:00 pm
Introduction to Control Systems Cybersecurity (101): The purpose of this course is to introduce students to the basics of industrial control systems security. This includes a comparative analysis of IT and control system architecture, security vulnerabilities, and mitigation strategies unique to the control system domain.
Tuesday, June 20th, 1:00pm – 5:00 pm
Cybersecurity evaluation tool (CSET): This exercise will demonstrate the primary functionality of CSET. Participants will walk through short examples of how to use the tool to perform a self-evaluation of a system. CSET is useful to self-evaluate against multiple industry standards.
Wednesday, June 21st, 8:00 am – 5:00 pm
Intermediate Cybersecurity for Industrial Control Systems, Lecture Part 1 (201): This course provides technical instruction on the protection of industrial control systems using offensive and defensive methods. Students will understand how cyber-attacks could be launched, why they work, and mitigation strategies to increase the cybersecurity posture of their control system. Demonstrations will include the use of software tools to establish a baseline of your network(s), and to monitor and analyze its traffic.
Thursday, June 22nd and Friday June 23rd 8:00 am – 5:00 pm
*The two courses (202 and CyberStrike) will be presented alternately on Wednesday and Thursday, with 50 seats available for each class.
Intermediate Cybersecurity for Industrial Control Systems, Part 2 (202) Hands-on: Because this course is hands-on, students will get a deeper understanding of how the various tools work. Accompanying this course is a sample process control network that demonstrates exploits used for unauthorized control of the equipment and mitigation solutions. This network is also used during the course for the many hands-on exercises that will help the students develop control systems cybersecurity skills they can apply when they return to their jobs.
Thursday, June 22nd and Friday June 23rd 8:00 am – 5:00 pm
CyberStrike: Hands-on workshop for defending against an OT cyber attack (no laptop required): This course offers a hands-on, simulated demonstration of a cyberattack, drawing from elements of the 2015 and 2016 cyber incidents in Ukraine. The instruction platform challenges course participants to defend against a cyberattack on the equipment they routinely encounter within their industrial control systems.
A certificate of completion and CEUs will be offered to those who complete each session of the course.
