Industrial Cybersecurity Asset Owner Practitioner (ICAP) Based on ISA/IEC 62443 standard
The primary goal of this course is to develop a strong understanding of the IEC 62443 standard, with a particular emphasis on the secure product development lifecycle for Industrial Internet of Things (IIoT) and Industrial Automation and Control Systems (IACS).
Participants will deepen their knowledge through practical exercises and real-world case studies, ensuring the effective application of concepts in their operational environments.
- Gain End-to-End Competence
Develop the essential skills to safely define, design, implement, validate/test, and maintain industrial products throughout their entire lifecycle. - Deepen Expertise in IoT and IACS Systems
Expand your technical knowledge of Industrial Internet of Things (IIoT) and Industrial Automation and Control Systems (IACS), with a focus on secure architectures and lifecycle processes. - Apply Proven Methodologies in Practice
Learn structured, practical methodologies for implementing cybersecurity measures effectively within your own operational environment.
Benefit from Real-World Case Studies and Hands-On Exercises
Through engaging exercises and real-life experience reports from industrial security consulting, acquire actionable security skills critical to navigating the evolving landscape of digitalization.
- Learn the key policy and procedural requirements that asset owners must establish to secure Industrial Automation and Control Systems (IACS) during operation.
- Gain insight into risk assessment methodologies and risk management strategies from the asset owner’s perspective, aligned with IEC 62443 principles.
- Build the skills needed to effectively apply security controls and practices within your own work environment.
- Strengthen your understanding of the architecture, operation, and security challenges of IoT and IACS systems across their lifecycle.
Topics to be covered in this course include:
Day 1
Welcome and Course Objectives
- Why IEC 62443 Asset Owner Training Is Essential
- Introduction to Industrial Automation
- Brief History of Industrial Revolutions
- What Is the OT Domain?
- Difference Between IT and OT Domains
Introduction to IEC 62443
- Breakdown of the IEC 62443 family
- Roles: Asset Owner, System Integrator, Product Supplier,Service Provider
- Applicable parts for Asset Owners
- (IEC 62443. 2-1, 3-2, 3-3)
Asset Owner System (CSMS) – IEC 62443-2-1
- Components of a CSMS
- Policy, governance, and procedures
- Security roles and responsibilities
- Continuous improvement of lifecycle (PDCA model)
Risk Assessment & Management – IEC 62443-3-2
- High-Level Risk Assessment (HLRA)
- Asset identification and impact evaluation
- Determining tolerable risk and risk reduction needs
- Cybersecurity Risk Reduction Factor (CRRF)
Day 2
Security and Maturity Level
- Security Level
- IEC 62443 Security Levels &Threat Actors
- Maturity Levels
- What is Zone and Conduits?
Risk Management
- What is Defense-in-Depth?
- Risk Management flow Chart.
- Risk-Based Security Levels in IEC 62443
- Goal of Risk management
Asset owner perspective
- IEC 62443 for Asset Owner
- Responsibility of asset owner
- Which standards are used by asset owners?
- Introduction of ACSSA
- How to Apply ACSSA Revolution
- Asset owners and Operators
- Project and product managers
- IT security managers
- OT security managers
- Management System Auditors
At least 02 yrsof Industry experience.
IEC 62443 / TS 50701 Training Course equips professionals with the knowledge and skills to effectively safeguard industrial control systems (ICS) against a wide range of cyber threats. A key challenge addressed in the course is the harmonization of IT/OT security requirements with the specific demands of automation and control systems—including real-time operation, functional safety, and the "security for safety" principle.
Examination Pattern
- Exam Type: Multiple choice (there can be several correct answers for each question)
- Exam Questions: 60
- Exam Time: 60 minutes
Passing Criteria: 61%
1. When can I get the certificate?
Training on OT Security for Industrial Control and Automation Systems based on IEC 62443 will be issued within 21 working days of the examination date.
2. When can I get the training material and invite?
One day before the commencement of the training program.
3. How do I pay the fees for training and examination?
Online mode.
4. What are the benefits of the Training on OT Security for Industrial Control and Automation Systems based on IEC 62443?
- Enhance your efficiency - with training courses linking theory with practical experience in the area of functional safety.
- Minimise your risks - by keeping your employees up to date with regard to standards and regulations in science and technology, thus enabling them to identify problems before your operations are affected. Avoid product recalls and loss of reputation by applying an optimised tailored process.
- Gain competitive edge - by applying your knowledge of the diverse roles throughout the safety life-cycle, in order to develop the best solutions for you and your customers.
5. Is there any refund policy for the paid fees?
Please refer to Cancellation and Refund policy page.