| Date | Venue | Fees | |
|---|---|---|---|
| 19 - 23 Apr 2027 | Dubai - UAE | $ 5,950 | |
| 28 Jun - 02 Jul 2027 | London - UK | $ 5,950 | |
| 20 - 24 Sep 2027 | Dubai - UAE | $ 5,950 | |
| 20 - 24 Sep 2027 | Online | $ 4,950 | |
| 01 - 05 Nov 2027 | London - UK | $ 5,950 |
Introduction
This Process Control Cybersecurity training course will address the most important issues related to the protection of assets in a process control environment. Unlike traditional information technology (IT) systems, process control assets include Industrial Automation and Control Systems (IACS), where a cyber incident can affect safety, the environment and production as well as data.
The oil and gas industry remains a priority target. A 2018 study by Siemens and the Ponemon Institute found that three in four Middle East oil and gas organisations surveyed had experienced a security compromise in the previous twelve months that resulted in the loss of confidential data or Operational Technology (OT) disruption. More recently, the Dragos 2026 OT Cybersecurity Year in Review reported 119 ransomware groups affecting around 3,300 industrial organisations in 2025, and poor IT/OT segmentation in 81 per cent of its assessments. As IT and OT continue to converge, this training course equips delegates to apply the current ISA/IEC 62443 series and proven countermeasures.
This GLOMACS Process Control Cybersecurity training course will highlight:
- Process control assets to be protected
- The current industrial security environment
- The ISA/IEC 62443 series of standards for IACS security
- Risk assessment and cybersecurity countermeasures
- Application diagnostics, troubleshooting and incident response
Objectives
At the end of this training course, you will learn to:
- Identify process control assets requiring protection
- Analyse the current industrial threat environment
- Explain the main components of ISA/IEC 62443
- Perform risk assessments and apply countermeasures
- Apply diagnostics, troubleshooting and incident response
Training Methodology
This training course uses a variety of proven adult learning techniques to ensure maximum understanding, comprehension and retention of the information presented. These include presentations, open discussions, case studies of publicly reported incidents, simulations, and individual and group exercises. Interactive digital activities reinforce each day’s topics. Short knowledge checks support learning, and questions are encouraged at all times.
Organisational Impact
Upon returning to their organisation, delegates will be able to contribute to:
- Identifying threats and vulnerabilities affecting a process or plant
- Performing asset identification and impact assessment
- Implementing the ISA/IEC 62443 series across the IACS lifecycle
- Conducting risk analysis and setting target security levels
- Implementing and maintaining process control security countermeasures
- Establishing cybersecurity operating procedures and incident response
Personal Impact
From a personal impact point of view, this training course will increase your knowledge and experience involving:
- Cybersecurity principles for industrial control environments
- The main cybersecurity standards, including ISA/IEC 62443
- Cybersecurity best practices and countermeasures for OT
- Techniques for cybersecurity diagnostics and troubleshooting
- Cybersecurity operating procedures, tools and incident response
- Your readiness to be developed further for senior roles
Who should Attend?
This training course is designed for professionals who operate, maintain, engineer or secure industrial control systems. It suits both technical and management roles across oil and gas and wider industry.
This training course is suitable to a wide range of professionals but will greatly benefit:
- Operations and Maintenance Personnel
- Process Control Operators and Engineers
- Process, Plant and Project Managers
- Process Engineers and Managers
- Instrumentation Technicians and Engineers
- System Integrators
- IT and OT Engineers and Managers in Industrial Facilities
- IT and OT Corporate Security Professionals
- Plant Safety, Security and Risk Management Professionals
- Security Personnel in all Categories
- Anyone who needs to address cybersecurity in the industrial environment
Introduction and Cybersecurity Fundamentals
- Introduction to Process Control Cybersecurity
- Understanding the Current Industrial Security Environment
- How IT and OT (Operational Technology) Differ and Where They Are the Same
- Overview of Process Control, including Safety Instrumented Systems
- Overview of Industrial Communication Systems and Networks
- How Cyber-attacks Happen: Threats, Vulnerabilities and Attacks
- Asset Identification and Impact Assessment
Introduction to the IACS Cybersecurity Lifecycle and ISA/IEC 62443
- Identification and Assessment Phase
- Design and Implementation Phase
- Operations and Maintenance Phase
- Limits of a Conventional IT Approach
- The ISA/IEC 62443 Security Approach and Current Standards
- Risk Analysis: Risk Identification, Classification and Assessment
- Security Levels: Target, Capability and Achieved
- Foundational Requirements of ISA/IEC 62443
Addressing Security Risks: Process Control Security Counter-measures
- Antivirus, Anti-spyware and Application Allowlisting
- Firewalls, Traffic Analysers and Unidirectional Gateways
- Encryption and Virtual Private Networks (VPNs)
- Passwords and Authentication Systems, including Multi-factor Authentication
- Access Control, Secure Remote Access and Intrusion Detection and Prevention
- Network Segmentation and the Industrial Demilitarised Zone
Application Diagnostics and Troubleshooting
- Interpreting Device Alarms and Event Logs
- Early Indicators of Compromise
- Network Intrusion Detection Systems for OT
- Network Management Tools
- Interpreting OS and Application Alarms and Event Logs
- Application Management and Allowlisting Tools
- Antivirus and Endpoint Protection Tools
- Security Information and Event Management (SIEM) Tools
IACS Cybersecurity Operating Procedures, Tools and Incident Response
- Developing and Following IACS Management of Change Procedures
- IACS Configuration Management Tools
- Developing and Following IACS Patch, Antivirus and Cybersecurity Audit Procedures
- Risk-based Patch Management Tools
- Antivirus and Allowlisting Tools
- Auditing Tools
- Developing and Following an IACS Incident Response Plan
- Incident Investigation and System Recovery
- Upon successful completion of the classroom-based training course, GLOMACS Certificate will be awarded to the delegates. Continuing Professional Education credits (CPE): In accordance with the standards of the National Registry of CPE Sponsors, one CPE credit is granted per 50 minutes of attendance.
- Upon successful completion of the online training course, a GLOMACS Certificate will be awarded to all delegates. Guided Learning Hours – In accordance with ISO 9001:2015–certified quality management standards, one Guided Learning Hour is awarded for every 60 minutes of attendance.
