This advanced course develops comprehensive defenses through hands-on exercises in a simulated OT environment with real-world components. Learn to secure PLCs, HMIs, SCADA systems, and network architectures while implementing logging, monitoring, asset management, and incident response capabilities across all Purdue model levels.
Defend operational technology networks through advanced monitoring and detection. Build capabilities for identifying threats in ICS environments.
ICS monitoring requires OT-specific approaches. ICS612 teaches how to detect threats in industrial networks.
Monitor ICS networks:
Network Visibility
Capture ICS network traffic
Understand ICS protocols at depth
Deploy ICS network monitoring
Maintain safe visibility
Threat Detection
Detect ICS-specific attacks
Identify anomalous behavior
Build ICS detection rules
Hunt for threats in ICS data
Operations Integration
Integrate with SOC operations
Handle ICS alerts appropriately
Respond to ICS incidents
Maintain operational continuity
Hands-on labs monitor and analyze realistic ICS traffic.
30 CPE credits across 5 intensive days.
Highlights
Master ICS architecture from local process to enterprise SCADA. Configure PLCs, HMIs, and OPC communications securely. Implement network segmentation, firewalls, and data diodes. Build monitoring and logging capabilities for OT environments.
31 hands-on labs in a simulated OT environment with real-world components covering PLC programming, HMI configuration, network attacks and defenses, historian security, remote access, and a NetWars-style CTF challenge.
Advanced course for ICS410 alumni and control system engineers. Includes ICS612 Student Kit with PLC and HMI you keep. 5 days of expert-led training. Earn 30 CPE credits.
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing is based on the duration and terms of your contract with the vendor. This entitles you to a specified quantity of use for the contract duration. If you choose not to renew or replace your contract before it ends, access to these entitlements will expire.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
This listing offers one pricing option: a single user license for ICS612: ICS Cybersecurity In-Depth. You buy under a contract model, billed per user. Pricing scales by the number of licenses you purchase, so each seat you add is one unit. This is a five-day, instructor-led course covering 30 hours of training with hands-on labs. The single dimension gives one person access to the course. There are no tiers or size-based options to compare here.
Top-of-mind questions for buyers
What does one single user license cover for this course?
One license gives one person access to the ICS612 course. It is a five-day, instructor-led program with 30 hours of training and 31 hands-on labs. Each seat you buy is one unit tied to one individual. You cannot share one license across multiple students.
If I need to train several people, how does my cost change?
Cost scales by the number of licenses. Each additional person requires one more single user license, added as a separate unit. There are no size-based tiers in this listing, so buying more seats increases cost proportionally to the number of licenses.
Is a GIAC certification exam or extra course access included in this license?
The license covers course access only. Certification exam attempts and added online access are separate purchases, not part of this single user license. If you need those items, arrange them directly with the vendor.
www.sans.org
Helpful?
Vendor refund policy
Refund requests must be submitted by the deadline date specific to User's training event. To find the specific deadline date for User's training event, please go to training event link at <www.sans.org> and click on the cancellations link.
How can we make this page better?
Tell us how we can improve this page, or report an issue with this product.
Give us feedbackReport a problem with this product or seller
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA).
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
SaaS delivers cloud-based software applications directly to customers over the internet. You can access these applications through a subscription model. You will pay recurring monthly usage fees through your AWS bill, while AWS handles deployment and infrastructure management, ensuring scalability, reliability, and seamless integration with other AWS services.
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
ICS Intelligent Telemarketing CRM is a cloud-native professional service that bundles Odoo CRM, MiiTel cloud telephony, and AWS infrastructure to automate 100% call recording, CRM linkage, and AI-powered sales coaching.
Take control of your Intelligence Community (IC) or any classified cloud program by utilizing our experience and capabilities to author, publish, action, and maintain your organization's cloud strategy. We analyze your current (or planned) program requirements against current leading DoD and IC cloud programs, identify governance and best practices, build out your overarching cloud strategy objectives and lines of effort; to then build and oversee the tasks within a fully managed and executable implementation plan or roadmap.
This foundational one-day course introduces ICS and OT security concepts, common industry terminology, system components, and the differences between IT and OT environments. Learn the Five ICS Cybersecurity Critical Controls through hands-on exercises and real-world case studies covering threats like the Colonial Pipeline and Ukraine grid attacks.
This course teaches visibility, detection, and response capabilities for ICS/OT environments. Learn to identify assets, monitor for threats using network security monitoring, perform incident response, analyze malware, and apply threat intelligence. Hands-on labs use real ICS equipment and data from attacks including STUXNET, CRASHOVERRIDE, and TRISIS.
Be the first to review this product. We've partnered with PeerSpot to gather customer feedback. You can share your experience by writing or recording a review, or scheduling a call with a PeerSpot analyst.