ICS - ICS456: Essentials for NERC Critical Infrastructure Protection

Close the gap between NERC CIP compliance and real-world security. ICS456 goes beyond regulations to teach hands-on skills for protecting the Bulk Electric System while ensuring audit readiness.

Unlike compliance-only courses, ICS456 immerses you in 23 labs using three virtual machines. You will secure workstations, perform digital forensics, and even learn lock picking - because physical security matters as much as digital protection.

What You Will Learn:

Asset Identification and Governance

• Understand electric sector regulatory structure and CIP history
• Master BES Cyber Asset identification approaches
• Implement strong management and governance controls
• Navigate CIP-002 categorization and CIP-003 security management

Access Control and Monitoring

• Configure Electronic Security Perimeters and access points
• Implement physical security controls and visitor programs
• Build and analyze firewall rules using CORE emulator
• Create IDS alerts with Squil for ICS/OT environments

System Management and Configuration

• Address CIP-007 system security requirements
• Implement CIP-010 configuration change management
• Use Windows tools for security assessment and hardening
• Conduct vulnerability assessments with Nmap and OpenVAS

Information Protection and Incident Response

• Build security awareness and CIP training programs
• Implement CIP-011 information protection and data sanitization
• Develop CIP-008 incident response plans
• Create CIP-009 recovery plans with forensic data preservation

Master the CIP compliance process including audit preparation and NP-View analysis. Prepares for GCIP certification. 31 CPEs across 5 days.