An Interactive 5-Day Training Course
Process Control Cybersecurity
Securing your Oil & Gas Assets
Course Overview
This Process Control Cybersecurity training course will address the most important issues related to the protection of assets in a process control environment. Unlike traditional IT (information technology) systems, process control assets include IACS (Industrial Automation and Control Systems) which need to be protected.
Recently, three out of four organizations in the oil and natural gas industry in the Middle East have experienced a security compromise that resulted in the loss of confidential data or Operational Technology (OT) disruption. This is according to a recent study by Siemens and the Ponemon Institute. Another finding in the report is that – organizations believe that roughly one in every two cyber-attacks against the OT environment actually goes undetected. The report also notes that the oil and gas industry is the target of as much as one-half of all cyberattacks in the Middle East and given its importance for the region’s economies, the risks faced by the industry are all the more pressing. OT, which encompasses systems that monitor and control physical devices and industrial processes, is increasingly interconnected with IT networks. In spite of all its benefits, this IT/OT convergence is opening up new avenues for attacks.
This GLOMACS Process Control Cybersecurity training course will highlight:
- Process Control Assets to be protected
- The Current Industrial Security Environment
- The Process Control Security Standard IEC 62443
- Risk Assessment and Cybersecurity Counter-measures
- Application diagnostics, troubleshooting, and incidence response
Training Outline
DAY 1: Introduction and Cybersecurity Fundamentals
- Introduction to Process Control Cybersecurity
- Understanding the Current Industrial Security Environment
- How IT and OT (Operational Technology) in the Plant Floor are Different and How They are the Same
- Overview of Process Control
- Overview of Industrial Communication Systems and Networks
- How Cyber-attacks Happen: Threats, Vulnerabilities, Attacks
- Asset Identification and Impact Assessment
DAY 2: Introduction to the IACS Cybersecurity Lifecycle and ISA99 / IEC 62443
- Identification & Assessment Phase
- Design & Implementation Phase
- Operations & Maintenance Phase
- Limits of a Conventional IT Approach
- The IEC 62443 Security Approach and Standards
- Risk Analysis Risk Identification, Classification, and Assessment
- CAL (Cybersecurity Assurance Levels)
- Functional Requirements of IEC 62443
DAY 3: Addressing Security Risks: Process Control Security Counter-measures
- Antivirus, Anti-spyware
- Firewalls, Traffic Analyzers
- Encryption, Virtual Private Networks (VPNs)
- Passwords - Authentication Systems
- Access Control - Intrusion Detection / Prevention
- Network Segmentation
DAY 4: Application Diagnostics and Troubleshooting
- Interpreting Device Alarms and Event Logs
- Early Indicators
- Network Intrusion Detection Systems
- Network Management Tools
- Interpreting OS and Application Alarms and Event Logs
- Application Management and Whitelisting Tools
- Antivirus and Endpoint Protection Tools
- Security Incident and Event Monitoring (SIEM) Tools
DAY 5: IACS Cybersecurity Operating Procedures & Tools and Incident Response
- Developing and Following an IACS Management of Change Procedures
- IACS Configuration Management Tools
- Developing and Following an IACS Patch & Antivirus Management and Cybersecurity Audit Procedures
- Patch Management Tools
- Antivirus and Whitelisting Tools
- Auditing Tools
- Developing and Following an IACS Incident Response Plan
- Incident Investigation and System Recovery
Certificates
- On successful completion of this training course, GLOMACS Certificate will be awarded to the delegates
- Continuing Professional Education credits (CPE) : In accordance with the standards of the National Registry of CPE Sponsor, one CPE credit is granted per 50 minutes of attendance
Accreditation
GLOMACS is registered with NASBA as a sponsor of Continuing Professional Education (CPE) on the National Registry of CPE Sponsors. NASBA have final authority on the acceptance of individual courses for CPE credit. Complaints regarding registered sponsors may be submitted to the National Registry of CPE Sponsors through its website: www.learningmarket.org.
All Training Seminars delivered by GLOMACS by default are eligible for CPE Credit.
Providers and Associations
About Saudi Glomacs
At Saudi GLOMACS, we specialize in delivering world-class training courses in Saudi Arabia and across various international locations. Our training courses are tailored to meet the unique demands of Saudi Vision 2030 and the Human Capability Development Program, focusing on empowering Saudi citizens and enhancing workforce skills. We offer diverse courses spanning leadership, management, engineering, and technical disciplines to cultivate expertise and drive professional growth. Our flexible learning options—whether in-person, online, or in-house—ensure accessibility and convenience for individuals and organizations alike.
With over 30+ years of experience through the GLOMACS global network, we are committed to delivering innovative, results-driven training solutions. Our expert instructors combine industry knowledge with dynamic teaching methods, fostering practical skill development and long-term career success. By choosing Saudi GLOMACS, you're investing in personal excellence and contributing to the Kingdom’s sustainable economic growth and vision-driven transformation.
What do you need to learn next?
Check our list of courses or let us customize a course for you.
View courses
