Industrial security training based on IEC 62443

Industrial CYBERSECURITY IEC 62443 TRaining

Increased connectivity has impacted a wide variety of businesses for the better. But while the advantages of cyber-physical systems are unmatched, the level of connectivity has also increased the number of cyberattacks that can and do occur. To this end, planning ahead and optimizing cyber resilience throughout the entire system lifecycle – from design to support – is required. Our expert training introduces you to the topic of industrial security based on the IEC 62443 family of standards, taking into account issues related to control and automation systems.

Contact us to receive an individual offer

UNDERSTAND IEC 62443 AND ITS COMPONENTS

Weaknesses that make cyberattacks easier can appear throughout any area of a connected system. If a cybersecurity breach does occur, the implications and level of risk can be catastrophic – personally, financially, legally and practically. Human error is one of the biggest and most preventable causes of cybersecurity breaches. If your team is trained in the risks, threats and Implementation of effective measures, cybercrime across your business could be reduced.

The IEC 62443 is the leading standard for industrial cybersecurity. It covers all kinds of facilities and systems across myriad industries. Awareness and understanding of the IEC 62443 standard and its components – among other cybersecurity laws and regulations – can help prevent cybercrime across your business.

Combine cybersecurity training modules or book a segment-specific program

In order to provide a practical and compact cybersecurity training program, and to make the training units particularly interesting and entertaining, we have developed nine training modules. The modules can be combined freely, so that you can easily put together your own individual training program and create maximum value for your team. Our nine training modules at a glance:

1. Overview of industrial automation
2. Fundamentals of industrial cybersecurity (protocols, systems, cryptography)
3. Cybersecurity laws and regulations (local, worldwide)
4. Overview of IEC 62443 (scope, terms, concepts, roles, lifecycle approach)
5. Threat and risk assessments (methods, techniques, VDI/VDE 2182, IEC 62443-3-2, ISO 31000/31010)
6. Requirements for systems and components according to IEC 62443 (IEC 62443-3-3, IEC 62443-4-2)
7. Requirements for a secure product development lifecycle (IEC 62443-4-1)
8. Requirements for the IT security program of service providers for industrial automation systems (IEC 62443-2-4)
9. IEC 62443 certifications (process, scoping, documentation, maturity level, typical stumbling blocks)

Furthermore, we have created five cybersecurity training programs for specific target groups. Each training is designed to be covered within one day but can also be attended online over two days. You can also combine different training courses.

• Industrial Cybersecurity and the IEC 62443 standard: you are aware of the risk of hacker attacks on industrial environments, but do not really know how an attack could also affect your business or what your company can do about it? In this module, we will introduce you to the basics of industrial cybersecurity and give you an overview of IEC 62443.
• Risk assessment and threat analysis in industry: in order to secure products or systems correctly, you need a structured approach to risk assessment and identification of threats. In this module, we present established standards and methods and practice these with you – in a realistic and practical way, using your products and your company as our case.
• IEC 62443 for product manufacturers: do you develop machinery or products? We explain what the IEC 62443 standard is all about, how it interacts with Functional Safety and how you can use it to improve your development processes.
• IEC 62443 for integrators and service providers: not just operators of critical infrastructures demand secure systems. More and more industrial companies are also demanding conformance with IEC 62443 in their tenders. This module helps you to understand what the standard is all about and how you can benefit from it.
• Preparation for IEC 62443 certification: if you are considering a certification according to IEC 62443, this is the right training for you. We explain the steps of the certification process and how you can get prepared. We will discuss typical mistakes and explain how you can avoid them.

Contact us to learn more

WHY CHOOSE TÜV SÜD?

TÜV SÜD has carried out countless professional tests on digital products and solutions. We assess the conformance to relevant standards and regulations, including the implementation of the IEC 62443 standard, and compliance with certain country-specific requirements.

With extensive experience in this area, as well as many years of working on standardization committees, we are happy to pass on our in-depth knowledge to your business through highly professional cybersecurity training courses and workshops.