This course covers the essential skills needed to secure industrial control systems and operational technology against emerging threats. Learn ICS components, attack surfaces, network defense architectures, incident response, and security governance while working hands-on with a programmable logic controller (PLC) you keep after class.
Master the essential skills for securing industrial control systems and operational technology environments. Build the foundational knowledge required for both IT and OT security professionals.
ICS410 provides comprehensive ICS/OT security training needed to defend the critical systems the world relies on, bridging the gap between IT security and operational technology.
What You Will Learn:
ICS Architecture and Components
Understand ICS components, protocols, and deployments
Learn Purdue model levels and their security requirements
Program and interact with PLCs and HMIs
Analyze fieldbus protocols and communications
Attack Surfaces and Defense
Identify ICS-specific attack vectors and vulnerabilities
Design secure ICS network architectures
Implement network segmentation and firewall controls
Apply cryptography and wireless security in OT
System Security
Secure Windows and Linux systems in ICS environments
Configure endpoint protection and logging
Implement patching strategies for OT systems
Build incident response capabilities for ICS
Governance and Frameworks
Apply ISA/IEC 62443, ISO 27001, and NIST CSF
Build ICS cybersecurity programs and policies
Measure and manage cybersecurity risk
Develop security culture across IT and OT teams
15 hands-on labs cover PLC programming, HMI configuration, network capture analysis, SQL injection attacks, password techniques, PowerShell baselining, Linux hardening, and a Capture-the-Flag incident response exercise.
Students receive a hardware PLC to keep for continued learning after the course.
Prepares for GIAC GICSP certification (exam sold separately). Ideal for ICS engineers, IT security professionals, control system operators, and anyone supporting OT environments.
36 CPE credits. 6 days of expert-led training.
Highlights
Design secure ICS architectures using Purdue model principles. Implement network segmentation and defense-in-depth for OT. Secure Windows and Linux systems in industrial environments. Apply ICS security frameworks and governance.
15 hands-on labs with a hardware PLC you keep, covering programming, network analysis, vulnerability exploitation, system hardening, and a Capture-the-Flag incident response exercise.
Prepares for GIAC GICSP certification (exam sold separately). Essential for IT and OT security professionals. 6 days of expert-led training. Earn 36 CPE credits.
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing is based on the duration and terms of your contract with the vendor. This entitles you to a specified quantity of use for the contract duration. If you choose not to renew or replace your contract before it ends, access to these entitlements will expire.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
This listing offers one pricing dimension: a single-user license for the ICS410: ICS/SCADA Security Essentials course. You buy access per individual, billed as a contract. Pricing is measured in units, so you purchase one unit for each person who needs the course. There are no tiers or instance sizes to choose from. To cover a team, you increase the number of units. This structure keeps the purchase simple: one license grants one learner access to the course material.
Top-of-mind questions for buyers
What does one single-user license include for this course?
One unit grants one learner access to the ICS410 course covering ICS/SCADA security topics across six sections. The material spans ICS components, network architectures, communication protocols, supervisory systems, security governance, and a capstone exercise. The course includes hands-on labs and a physical programmable logic controller device that students keep.
How do I cover a whole team with this per-unit pricing?
Each unit covers one learner, so you buy one unit per person who needs access. To train a five-person team, you purchase five units. There are no bundled group counts in this dimension; the cost scales in direct proportion to the number of learners you enroll.
Does the license include a certification exam or extended online access?
The single-user license covers the course itself. The seller notes that certification attempts and added months of online access are separate add-ons, not part of this unit. If you need those, contact the vendor to confirm how they attach to your purchase.
www.sans.org
Helpful?
Vendor refund policy
Refund requests must be submitted by the deadline date specific to User's training event. To find the specific deadline date for User's training event, please go to training event link at <www.sans.org> and click on the cancellations link.
How can we make this page better?
Tell us how we can improve this page, or report an issue with this product.
Give us feedbackReport a problem with this product or seller
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA).
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
SaaS delivers cloud-based software applications directly to customers over the internet. You can access these applications through a subscription model. You will pay recurring monthly usage fees through your AWS bill, while AWS handles deployment and infrastructure management, ensuring scalability, reliability, and seamless integration with other AWS services.
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
ICS Intelligent Telemarketing CRM is a cloud-native professional service that bundles Odoo CRM, MiiTel cloud telephony, and AWS infrastructure to automate 100% call recording, CRM linkage, and AI-powered sales coaching.
Take control of your Intelligence Community (IC) or any classified cloud program by utilizing our experience and capabilities to author, publish, action, and maintain your organization's cloud strategy. We analyze your current (or planned) program requirements against current leading DoD and IC cloud programs, identify governance and best practices, build out your overarching cloud strategy objectives and lines of effort; to then build and oversee the tasks within a fully managed and executable implementation plan or roadmap.
This foundational one-day course introduces ICS and OT security concepts, common industry terminology, system components, and the differences between IT and OT environments. Learn the Five ICS Cybersecurity Critical Controls through hands-on exercises and real-world case studies covering threats like the Colonial Pipeline and Ukraine grid attacks.
This course teaches visibility, detection, and response capabilities for ICS/OT environments. Learn to identify assets, monitor for threats using network security monitoring, perform incident response, analyze malware, and apply threat intelligence. Hands-on labs use real ICS equipment and data from attacks including STUXNET, CRASHOVERRIDE, and TRISIS.
Be the first to review this product. We've partnered with PeerSpot to gather customer feedback. You can share your experience by writing or recording a review, or scheduling a call with a PeerSpot analyst.