ICS - ICS613: ICS/OT Pen Testing & Assessments

Conduct safe, effective penetration tests and security assessments in ICS/OT environments without compromising operational integrity.

ICS613 addresses the unique drivers and constraints of industrial environments, teaching assessment techniques specific to ICS devices, applications, architectures, and protocols.

What You Will Learn:

Assessment Planning

• Define assessment goals aligned with industry standards
• Apply ICS Cyber Kill Chain and threat intelligence
• Understand consequences and impacts to physical operations
• Plan safe engagement methodologies

Passive Assessment Techniques

• Collect and analyze documentation
• Identify industrial protocols and communications
• Perform network analysis and target enumeration
• Assess security posture using OS tools

Active Testing Approaches

• Execute assumed breach scenarios safely
• Exploit certificate services and credential reuse
• Bypass endpoint controls in OT environments
• Enumerate DCS architectures and control logic

Reporting and Remediation

• Develop realistic attack scenarios with physical consequences
• Structure actionable penetration test reports
• Balance mitigation options across cost and effectiveness
• Communicate findings to stakeholders

27 hands-on labs include building the student kit, documentation analysis, protocol identification, certificate exploitation, credential abuse, DCS enumeration, shadow HMI deployment, safety system attacks, and a comprehensive CTF exercise.

Students receive an ICS613 kit to keep for continued practice.

Ideal for ICS security assessors, penetration testers, red team members, and OT security professionals.

30 CPE credits. 5 days of expert-led training.