OT/ICS Fundamentals
Control system architecture, the Purdue Model and the language engineers and security teams need to share.
Academy - Operational Technology (OT)
OT/ICS Cyber Security Courses
Build the skills to secure industrial control systems with practitioners who work in live operational environments. Our OT courses are designed for those who need to know not only what to do, but how and why control systems behave the way they do.
OT / ICS curriculum
Safe for live plant. Built by practitioners.
Purdue ModelIEC 62443Incident response
Course Series
Five Critical Domains of OT/ICS Security
Whether you are new to industrial control systems or a seasoned engineer, our courses are structured to meet you at the right level and take you further in your OT security journey.
OT Risk & Governance
Risk assessment, zones and conduits, and compliance against IEC 62443, NIS2 and the NCSC CAF.
OT Network Security
Segmentation, secure remote access and passive asset discovery across plant and enterprise boundaries.
OT Threat Hunting
Detection techniques built around Modbus, DNP3, PROFINET and OPC rather than office protocols.
OT Incident Response
Containment and recovery playbooks that respect safety instrumented systems and production continuity.
Context
Why OT/ICS Security Training Matters
Securing an Industrial Control System (ICS) environment has always been one of the most important considerations for any business, but as these systems have evolved from closed, proprietary environments to the modern IP-connected systems we see today, the security risk has evolved with them. The drive towards more connectivity brings with it all the associated vulnerabilities and malware already seen on the IT side of the house - including the responsibility to comply with regulations such as the EU NIS Directive, to educate staff in identifying risks and reporting anomalous behaviour, and to understand how risk is increased by a lack of security in your supply chain.
A modern ICS is subject to all the threats and vulnerabilities of any normal office network. As attackers gain more knowledge of what these systems actually do, an attack is less likely to come from script-kiddies seeking notoriety and more likely to come from criminal or state-sponsored groups whose motivation, resources and skills are far more advanced.
We have successfully delivered hands-on, instructor-led ICS security courses for NCSC (preceded by CPNI) for over 14 years. The success of these courses has grown into a secondary market of individual companies requiring additional courses, as well as vendors of products and services who need to understand what the front-line business will demand from them.
Course Catalogue
Our OT/ICS Courses
Open a course to see objectives, daily breakdown, prerequisites and public dates.
Workforce Development
Workforce Development
Threats to critical national infrastructure organisations and their supply chains are growing in both number and complexity. Now more than ever, staff need the skills, knowledge and behaviours to reduce risk and respond effectively to incidents. Our Workforce Development Packages are designed as a long-term, structured solution, closely aligned to your organisation's needs - ensuring the right people get the right training, at the right time.
1
Gap Analysis
A structured assessment of your staff against role requirements, identifying gaps in skills and development.
2
Learning Needs Analysis (LNA)
A formal programme of capability improvement, complementing the Gap Analysis, that closes identified gaps through a variety of learning methods.
3
Training Needs Analysis (TNA)
Also complementing the Gap Analysis, a formal programme that closes gaps through structured training programmes.
4
Exercise Needs Analysis (ENA)
Brings all learning together to test understanding in practice, including tabletop exercises (planning-based) and live play exercises (real-time).
5
Skills Framework Creation
A bespoke Siker Skills Framework giving employees a clear understanding of the skills and knowledge required for their role, measured against specific tasks.
Authorship
Who Is Behind These Courses?
Our OT/ICS curriculum has been delivered hands-on for NCSC (previously CPNI) for over 14 years, and is authored and taught by engineers and security practitioners who spend their working lives inside operational environments. Course material is reviewed continually against live incidents, vendor guidance and evolving regulation, so what you learn reflects the plant you go back to.
TH
Written by
Tim Harwood
Hands-On, Not Just Theory
We believe OT security skills are best learned by doing, not death by PowerPoint.
From foundation level onwards, every course is practical - working with real controllers, protocols and realistic plant scenarios, so you build familiarity in a lab rather than during an outage.
“Tell me, and I will forget. Show me, and I will remember. Let me do it, and I will understand.”
Course Levels
Four Progressive Levels for Your Career Journey
1-2 days
Awareness
Short courses for leaders, managers and asset owners, giving an overview of OT risk and a clearer understanding of what protecting a control system involves.
2-3 days
Foundation
Two- to three-day courses for those new to OT security, providing a solid grounding in control system architecture, threats and defensive fundamentals.
3-5 days
Certified Intermediate
Three- to five-day programmes for engineers and analysts with some OT exposure, more technical than foundation and concluding with a theory exam and practical assessment.
5 days
Certified Advanced / Specialist
Five-day programmes for experienced practitioners specialising in OT threat hunting, incident response or architecture, concluding with a theory exam and practical assessment.
Delivery
Every Course, in the Format That Fits
On-Demand
Self-paced, learn anytime, anywhere - ideal for shift workers and distributed site teams.
Virtual Face-to-Face
Live instructor-led online classes with real-time interaction.
Classroom (In-Person)
Traditional classroom delivery, ideal for site teams and hands-on control system labs.
Open & Private Courses
Individual delegates can book onto publicly scheduled courses. Private or closed courses are also available, and provide:
- Tailored content to your specific PLCs, RTUs and SCADA architectures (where desired)
- Flexible dates and delivery format, on-site or virtual
- Significant cost savings per delegate for groups
- Confidentiality where plant detail and internal discussions must remain private
Your Learning Pathway
We have developed a learning pathway that takes an individual from OT awareness through to skilled control system practitioner or OT incident responder, depending on your role and ambition. The full pathway will be published in due course, providing clear guidance on course progression.
Why Us
Why Choose Our Courses?
- Instructor-led ICS security courses delivered for NCSC (preceded by CPNI) for over 14 years
- Authored and taught by practitioners who work in live OT and CNI environments
- Mapped to the Purdue Model, IEC 62443 and regional regimes including NIS2, NERC CIP and Saudi OTCC
- Hands-on exercises with real control system protocols and equipment - safe for learning, safe for plant
- Certification at intermediate and advanced levels (theory and practical exam) for a defensible credential
- Clear progression from awareness through to specialist OT practitioner
- Flexible delivery (on-demand, virtual, classroom) to fit shift patterns and outage windows
- Open, private and bespoke options available
Ready to Upskill Your OT Team or Yourself?
Every curriculum we build can be tailored to your operational environment - your specific PLCs, RTUs and SCADA architectures, and the regulatory landscape you operate within, including EU NIS2, US NERC CIP and Saudi OTCC.