Lead SCADA Security Manager
The Lead SCADA Security Manager course is an advanced professional program designed to develop the competence required to lead, govern, and manage security for Supervisory Control and Data Acquisition (SCADA) and Industrial Control System (ICS) environments. Industrial systems underpin critical services such as energy, manufacturing, utilities, transportation, and industrial processing. Securing these environments requires a specialized, risk-based, and safety-aware approach that differs significantly from traditional IT security. This course focuses on strategic leadership, governance, risk management, and coordination, rather than low-level device configuration. Participants learn how to design SCADA/ICS security governance frameworks, manage cyber and operational risk, oversee technical controls, coordinate IT/OT stakeholders, support audits and compliance, and ensure resilience and safety in complex industrial environments. Course Objectives By the end of this course, participants will be able to: Lead and govern SCADA and ICS security programs Understand SCADA/ICS architectures and security challenges Manage cyber and operational risks in industrial environments Align SCADA security with safety, reliability, and business objectives Oversee network, system, and access security for OT environments Integrate SCADA security with enterprise security and GRC frameworks Coordinate incident response and recovery for industrial systems Drive continual improvement of SCADA security maturity
Course Curriculum
1
- Responsibilities and authority
- Differences between IT security and OT/ICS security
- Safety, availability, and reliability priorities
- Leadership and accountability
2
- SCADA, DCS, and PLC environments
- Typical industrial network architectures
- Field devices, control layers, and enterprise integration
- Legacy systems and constraints
3
- Common threats and attack vectors
- Threat actors and motivations
- Cyber-physical risks and consequences
- Real-world incident lessons (high-level)
4
- SCADA security policies and standards
- Aligning security with safety and operations
- Risk appetite and decision-making
- Governance models for IT/OT environments
5
- Identifying industrial cyber risks
- Risk assessment methods for ICS
- Managing residual and operational risk
- Integrating with enterprise risk management
6
- Network segmentation and zoning
- Secure remote access
- Firewalling and monitoring strategies
- Managing legacy protocols securely
7
- User and role management in OT environments
- Privileged access control
- System hardening and configuration management
- Patch and vulnerability management constraints
8
- Monitoring and anomaly detection
- Incident identification and escalation
- Coordinating response with operations and safety teams
- Forensics considerations in industrial environments
9
- Managing vendor and contractor access
- Secure maintenance and support arrangements
- Supply chain risk considerations
- Contractual and assurance requirements
10
- Regulatory and industry expectations (high-level)
- Supporting internal and external audits
- Evidence and documentation
- Demonstrating due diligence
11
- SCADA security KPIs and KRIs
- Measuring effectiveness without disrupting operations
- Maturity models for industrial security
- Reporting to senior stakeholders
12
- Resilience and availability planning
- Integration with business continuity and disaster recovery
- Recovery priorities for industrial systems
- Testing and exercises
13
- Continuous improvement strategies
- Managing modernization and digital transformation
- Preparing for emerging threats and technologies
- Building long-term OT security capability
14
- SCADA security governance case studies
- Risk prioritization and decision-making scenarios
- IT/OT coordination simulations
15
- SCADA and ICS security managers
- OT and industrial cybersecurity professionals
- Information security and ISMS managers
- Engineering and operations leaders with security responsibility
- Risk, compliance, and governance professionals
- Consultants supporting industrial security programs
16
- Understanding of industrial control systems or operational technology
- Background in cybersecurity, information security, or engineering
- Experience in OT, ICS, or critical infrastructure environments is strongly recommended
17
- Responsibilities and authority
- Differences between IT security and OT/ICS security
- Safety, availability, and reliability priorities
- Leadership and accountability
18
- SCADA, DCS, and PLC environments
- Typical industrial network architectures
- Field devices, control layers, and enterprise integration
- Legacy systems and constraints
19
- Common threats and attack vectors
- Threat actors and motivations
- Cyber-physical risks and consequences
- Real-world incident lessons (high-level)
20
- SCADA security policies and standards
- Aligning security with safety and operations
- Risk appetite and decision-making
- Governance models for IT/OT environments
21
- Identifying industrial cyber risks
- Risk assessment methods for ICS
- Managing residual and operational risk
- Integrating with enterprise risk management
22
- Network segmentation and zoning
- Secure remote access
- Firewalling and monitoring strategies
- Managing legacy protocols securely
23
- User and role management in OT environments
- Privileged access control
- System hardening and configuration management
- Patch and vulnerability management constraints
24
- Monitoring and anomaly detection
- Incident identification and escalation
- Coordinating response with operations and safety teams
- Forensics considerations in industrial environments
25
- Managing vendor and contractor access
- Secure maintenance and support arrangements
- Supply chain risk considerations
- Contractual and assurance requirements
26
- Regulatory and industry expectations (high-level)
- Supporting internal and external audits
- Evidence and documentation
- Demonstrating due diligence
27
- SCADA security KPIs and KRIs
- Measuring effectiveness without disrupting operations
- Maturity models for industrial security
- Reporting to senior stakeholders
28
- Resilience and availability planning
- Integration with business continuity and disaster recovery
- Recovery priorities for industrial systems
- Testing and exercises
29
- Continuous improvement strategies
- Managing modernization and digital transformation
- Preparing for emerging threats and technologies
- Building long-term OT security capability
30
- SCADA security governance case studies
- Risk prioritization and decision-making scenarios
- IT/OT coordination simulations
31
- SCADA and ICS security managers
- OT and industrial cybersecurity professionals
- Information security and ISMS managers
- Engineering and operations leaders with security responsibility
- Risk, compliance, and governance professionals
- Consultants supporting industrial security programs
32
- Understanding of industrial control systems or operational technology
- Background in cybersecurity, information security, or engineering
- Experience in OT, ICS, or critical infrastructure environments is strongly recommended
This course includes
- 32+ Activity Modules
- 40 hours + lessons
- Lifetime access
- Certificate of completion
- Available on desktop and mobile
What Our Participants Say
Hear from participants who have experienced our training.
The facilitator’s wealth of experience was both striking and beneficial. He really helped translate concepts to real life.
The practical session where step by step of the lecture is broken down in visual and practice
I enjoyed the interactivity. It was also very direct, pointing out to us the key things to look for in the bidding, tender and proposal administration process, while also ensuri...
The practical session of the class which helped in giving a live run through of the necessary bidding and tender platform
The atmosphere was very pleasant, as it was an interactive and engaging session, which I personally enjoyed.
Some of Our Partners
