Training Overview

GICSP is a premium GIAC certification focused on OT/ICS cybersecurity, and this live online instructor-led cohort is designed to provide practical, industry-focused preparation with personalized guidance to achieve the certification.

Critical infrastructure sectors face evolving cybersecurity threats, requiring professionals who operate, manage, and defend control systems to possess specialized knowledge. This program bridges the skills gap between IT and operational technology professionals by providing practical training on ICS architecture, attack surfaces, defense mechanisms, incident response, and governance frameworks tailored for daily operational security needs. Unlike specialized courses focused on advanced penetration testing or forensics, this training addresses the core security principles essential for practitioners directly supporting control systems. It equips IT personnel with a foundational understanding of control system design principles and operational constraints, while simultaneously strengthening the cybersecurity awareness of engineering teams and system operators.

The curriculum aligns with industry-recognized frameworks including IEC 62443, NIST Cybersecurity Framework, and ISO/IEC 27001, ensuring competency across critical infrastructure defense domains. Upon completion, participants, regardless of their technical background, develop a shared vocabulary and mutual understanding of industrial cybersecurity principles. This enables cross-functional collaboration to implement secure-by-design control systems and maintain robust IT/OT security practices that prioritize both operational continuity and system resilience. Through real-world scenarios and a capstone exercise, participants develop the practical expertise and theoretical foundation necessary to excel in the GICSP certification assessment.

You Will Be Able To

• Understand ICS Infrastructure and Architecture – Comprehend industrial control system components, operational dependencies, network design principles (topology, protocols), and their alignment with IEC 62443 and the Purdue Model.
• Execute System Administration and Security Monitoring – Operate command-line tools and scripting capabilities across Windows and Linux environments to identify vulnerabilities, automate continuous monitoring, and perform system administration tasks.
• Implement Security Operations and Compliance – Apply information assurance principles (confidentiality, integrity, availability, authentication, non-repudiation), detect host- and network-based intrusions, execute incident response procedures, and map control system technologies to cybersecurity frameworks including NIST Cybersecurity Framework, ISA/IEC 62443, ISO/IEC 27001, NIST SP 800-82, CIS Critical Security Controls, and COBIT 5.

Module 1: Industrial Control System Foundations

Core terminology, operational technology ecosystem, and system typologies. Understand PLC/RTU behavior, sensor/actuator interaction, and how physical processes fundamentally differ from traditional IT—establishing shared vocabulary across engineering and security roles.

Module 2: Hierarchical Control Network Models

Purdue reference model layers and ISA 95 enterprise integration framework. Mapping organizational functions to network layers. Understanding constraints, dependencies, and criticality of each tier from field devices through business systems.

MODULE 3: Field Device Security & Cyber-Physical Effects

Programmable logic controllers, remote terminal units, intelligent field instrumentation. Practical lab: programming PLCs and interfacing with operator workstations. Recognizing how cyber actions translate to real-world physical consequences in production and safety systems.

MODULE 4: Industrial Communication Protocols & Data Flow

Ethernet fundamentals and TCP/IP in production environments. Legacy fieldbus protocols (MODBUS, PROFIBUS) and modern industrial Ethernet. Protocol packet analysis from live network captures. Understanding how each protocol encodes control commands and operational telemetry.

MODULE 5: Network Defense Architecture & Segmentation

Design of demilitarized perimeters and enforcement zones for control networks. Air-gapping principles and cross-domain firewalling. Practical architecture patterns that balance operational availability with security isolation. Building resilient network topologies.

MODULE 6: Cryptography & Secure Communications

Encryption fundamentals applied to industrial systems. Key management for field devices and controllers. Wireless technologies in control environments and corresponding attack surface. Practical cryptographic concepts without advanced mathematics.

MODULE 7: Supervisory Systems & Data Aggregation Platforms

SCADA/HMI architectures, historian database systems, and real-time data collection. Web-based interfaces and remote access technologies. Identifying vulnerabilities in human-machine interaction systems. Server hardening for process monitoring applications.

MODULE 8: Operating System Hardening & Continuous Monitoring

Windows and Linux baseline configurations for control networks. Patch management strategies balancing security updates with production stability. SIEM integration and log aggregation. Endpoint detection techniques and alert methodologies.

MODULE 9: Threat Detection, Investigation & Response

Incident identification and indicator recognition in control network traffic. Forensic analysis approaches adapted for production environments. Attack timeline reconstruction and root cause determination. Containment and recovery procedures that prioritize safety and availability.

MODULE 10: Industrial Cybersecurity Governance & Capstone Simulation

Regulatory frameworks and compliance standards (ISA/IEC 62443, NIST). Organizational policy development and risk management methodologies. Hands-on capture-the-flag incident response exercise integrating all modules. Real-world scenario problem-solving.

Who Should Attend

Systems Engineers & Operators  |  IT & Cybersecurity Professionals  |  Industrial Automation Specialists  |  Control System Designers  |  Integrators & Vendors  |  Risk & Compliance Officers

Schedule, Timings & Training Mode

• Total Training Duration: ~30 Hours | Frequency: Every Saturday
• Each Session Duration: 3 Hours | Total Sessions: 10 Nos | Timings: 10:30 AM to 1:30 PM | Time Zone: CET / UTC+1
• Live Online Instructor-Led | MS Teams | Group of 7 to 10 participants

Trainer’s Profile

• 20 years of hands-on working experience across OT/ICS cybersecurity, critical infrastructures (Power & Water Utilities, Oil & Gas, Petrochemicals, Manufacturing, etc.), and global OT/ICS OEMs.
• Certifications: GIAC-GICSP, ISA/IEC 62443 CFS, PMI-PfMP, OEM product-specific certifications like IDS, NGFW,  IAM, SCADA, IEDs/RTUs/PLCs, and communication systems.

Registration

For registration and further details, send an email to training@fortivisionllc.com or call us at +1 (409) 655 2081 / +971 58 541 1347

For on-site and in-person training, contact us at sales@fortivisionllc.com