Training

ISA/IEC 62443 Training for System Integrators of Industrial Automated Control Systems

Cybersecurity training for engineers designing and integrating solutions, services and systems for industrial applications based on ISA/IEC 62443-2-4, 3-2 and 3-3.

Two men with control in factory shop floor

Empowering you to make educated choices about implementing security based on the ISA/IEC 62443 family of standards

The use of commercial off-the-shelf (COTS) technologies, the increase in networking, the move to using ethernet and transmission control protocol/internet protocol (TCP/IP), as well as the increased use of web technologies in supervisory control and data acquisition (SCADA) and process control networks has exposed industrial automation and control systems (IACS) to similar vulnerabilities as information systems.

This course provides a detailed look at how solution and service providers and system integrators can use the ISA/IEC 62443 standards framework to protect critical control systems. It also explores the procedural and technical differences between the security for traditional IT environments and those solutions appropriate for distributed control systems (DCS), programmable logic controllers (PLCs), safety instrumented systems (SIS) or SCADA for plant floor environments.

The system integrator has a key role in the supply chain and the security of an IACS solution. This course addresses solution providers acting as integrators and ongoing support of industrial automated control systems and how they interact with asset owner/operators as part of the overall supply chain throughout the owner/operator’s lifecycle.

This three-day training course is heavily focused on the ISA/IEC 62443 standard. The ISA/IEC 62443 series of standards was developed to secure industrial automation and control systems (IACS) throughout their lifecycle. It includes several standards, technical reports (TR) and technical specifications (TS). During an interactive training for system integrators, we will empower you to make educated choices about the implementation of security based on the ISA/IEC 62443 family of standards, considering security issues related to control and automation systems. This training has a core focus on those three IEC 62443 sub-standards most relevant to IACS system integrators:

2-4: Security program requirements for IACS service providers
3-2: Security risk assessment for system design
3-3: System security requirements and security levels

Experts discuss the value of ISA/IEC 62443 training

Learn how training can strengthen cybersecurity for product manufacturers and system integrators.

Watch Video Watch Video

Duration

Training topics

Introduction to ISA/IEC 62443
Understanding the framework of ISA/IEC 62443
Overview of the automation cybersecurity lifecycle
Industry 4.0 trends and challenges
Cyber-attacks in IACS – vulnerabilities and consequences
IACS concept, principal roles and architecture
Recommended requirements for IACS solution, service and system integrators
Security levels and maturity levels
Defense in depth
Zero Trust
Security for IoT devices
Security supply chain
Cybersecurity risk assessment
Developing zones and conduits

Cybersecurity requirement specification (CSRS)
Designing secure systems
Security level determination and verification
Detailed design considerations and operations requirements
Vulnerabilities and countermeasures
Challenges during IACS patch and update management
Security design embracing ISA/IEC 62443 architecture
Specification of security requirements
Secure by design
Secure implementation
Security verification and validation testing
Management of security-related issues
Security guidelines

Training objectives

Upon successful completion of this training, you will be able to:

Determine the right level of security for products and systems.
Update and maintain the system to the level of security required.
Gain IT and industrial cybersecurity knowledge in recognizing security problems as required by modern IACS.
Increase your security awareness by communicating existing threats and current attack vectors.
Demonstrate that services, systems and products are developed and integrated in accordance with security needs.
Establish security by design for your systems and products by understanding relevant security methods, security systems and standards.
Manage supply chain complexity.
Build trust across your supply network.
Understand and help to minimize the risk of integrating IT and operational technology (OT) infrastructure.
Meet customer demands regarding requirements from specific industries.
Enhance brand protection.

Control operations in terms of cybersecurity resilience.
Take care of the product and system security due diligence.
Demonstrate your security compliance to a wide range of target markets and customers.
Differentiate products/systems based on security against competitive products/systems.
Gain a competitive advantage and enhance your market position.
Make your components’ security transparent and accessible to system integrators and end users.
Embed security into development processes.
Instill cybersecurity rigor into your processes.
Use a tailored, risk-based way of assessing security.
Demonstrate validation of security to customers.

View our equivalent ISA/IEC 62443 training for manufacturers

Design more secure industrial products and components with cybersecurity training for engineers.

Quality Engineer using the digital tablet for check and send information to server in robot system while her teamwork checking the performance of robot system in production line. The digital display had shown about the
innovation of manufacturing with technology concepts.

Technician using laptop while working in a factory

Industrial Cybersecurity Solutions

Advisory, testing and certification services to help organizations manage cybersecurity risks and validate cybersecurity capabilities.

Smart factory concept. Communication network. INDUSTRY4.0

ISA/IEC 62443 Services: Comprehensive Cybersecurity for Industrial Control Systems

Accelerate your cyber readiness and gain visibility on your security posture with comprehensive ISA/IEC 62443 advisory, testing and certification services.

ISA/IEC 62443 Training for Product and System Manufacturers

Design more secure industrial products and components with cybersecurity training for engineers based on ISA/IEC 62443-4-1 and 4-2.

Two executives working together in a factory

ISA/IEC 62443-Focused OT Cybersecurity Training for Asset Owners and Operators

Asset owners and operators can learn about how to employ the ISA/IEC 62443 series of standards to help create and maintain resilient systems.

Shot of young woman taking down notes in diary. Female university student preparing note for the exam at library.

Guide to Professional and eXpert Personnel Recertification

A UL Solutions Professional or eXpert certification is valid for three years, at which time you must recertify to maintain your credentials.

Leveraging Cybersecurity for Industry 4.0 into a Business Advantage

This white paper analyzes the vulnerabilities within the Industry 4.0 ecosystem to empower manufacturers to plan long-term, sustainable business strategies.

Strengthening Automation Software Security in Industry 4.0

Learn how an electronic control components manufacturer worked with UL Solutions to enhance their product security.

How Secure Are Your Smart Field Instruments?

Intelligent field instruments require effective cybersecurity and data management processes.

Testing and Certification for Industrial Supply Chain Cybersecurity

Testing and certification to the ISA/IEC 62443 standard can bolster cybersecurity for digital industrial supply chains.

Download our infosheet