What's New with SANS ICS Security?

SANS Industrial Control Systems Security trains and equips professionals to tackle the security challenges in critical infrastructure environments with the most current practices, methods, and knowledge. SANS ICS Security course authors and instructors are industry experts, leaders, and passionate defenders of crucial infrastructure systems who are creating free innovative resources and applicable content for the ICS community. SANS ICS Security is excited to share a range of dynamic features with the cybersecurity community:

• Free industry-leading content
• New and updated ICS courses
• Our new curriculum "look"
• New SANS ICS swag!

These free resources are created by SANS Instructors and course authors to enrich your ICS cybersecurity knowledge and to give you industry-leading content that you can apply in your ICS role.

BLOGS

View more ICS Blogs here.

POSTERS & CHEAT SHEETS
This cheat sheet provides guidance for Industrial Control System (ICS) Network Security Monitoring (NSM), and Incident Response (IR) for control system environments. Unlike IT incidents, ICS incidents need to consider potential loss or damage of physical property or engineering assets, as well as safety risks to people and the environment. ICS IR will be a joint effort with security incident responders, engineers, operators, and network architects.	This ICS Assessment Quick Start Guide provides a basic starting point for industrial control system (ICS) assessments that can be applied to all ICS sectors. Concentrating on several primary risk areas, this content aims to help organizations identify opportunities to improve newly established ICS security programs. The ICS Security Program Maturity side of the poster is a guide that covers the basics of using the National Institute of Standards and Technology (NIST) Cyber Security Framework (CSF) in order to understand the maturity of a security program implemented to protect control environments from any industrial control sector.	This guide covers the basic acronyms used in SANS Industrial Control System Security courses and includes terms from Operational Technology (OT), Information Technology (IT), and Information Security (InfoSec).

Find more ICS posters and cheat sheets here!

See other upcoming ICS webcasts here!

ICS612

As SANS in-person training returns, so does ICS612: ICS Cybersecurity In-Depth! The course is an in-classroom lab setup that moves students through a variety of exercises that show how an adversary can attack a poorly architected ICS and how defenders can secure and manage the environment. Representative of a real ICS environment, the classroom setup includes a connection to the enterprise, which allows for data transfer (i.e., Historian), remote access, and other typical corporate functions.

This course is only offered in-person. See the upcoming ICS612 course runs here.

Watch this live stream of course authors Jeff Shearer and Jason Dely discussing what you can expect from ICS612:

ICS515

Previously, the ICS515 course was named Active Defense and Incident Response and took place across 5 days. The course has been massively updated and renamed as ICS515: ICS Visibility, Detection, and Response and extended to a 6 day course. The course has entirely new technical labs and content as well as an all new physical kit that students will leverage in the class and keep after they leave. You can read more about the updates in this blog written by author Robert M. Lee, and why he says this new version finally feels like the course is where he's wanted it to be all along. Additionally, you can learn more about the course and register here to find an upcoming run that works with your schedule.

ICS418

We are excited to announce a new ICS course in development! Get ready for ICS418: ICS Security Essentials for Managers. This course fills the identified gap amongst leaders working across critical infrastructure and operational technology environments. It arms ICS managers with defenses that prioritize the business, equipping them with the tools and knowledge to address the business and industry pressures they face when managing cyber threats to the safety and reliability of industrial control systems operations. ICS leaders will leave the course with a firm understanding of the drivers and constraints that exist in cyber-physical environments and a nuanced understanding of how to manage the people, processes, and technologies throughout their organizations. ICS418 will empower new and established ICS Security Managers alike.

Check out this blog written by course authors Dean Parsons and Jason D. Christopher for more info on what you can expect from the course! Registration is opening soon! If you're interested on being notified on when registration opens, fill out this form here.

We're happy to share our rebrand of SANS Industrial Control Systems Security! Get the new look for yourself! Choose from the following SANS ICS security zoom and desktop backgrounds.

Available for download HERE.

A new look means new ICS gear! Check out a few new items at the SANS store online and keep checking back for new items that are on the way. Plus, keep an eye out for giveaways at upcoming in-person events! What are you waiting for? Get your gear, show it off, and tag us on social media! Shop for your ICS Security gear here!

Stay up to date on the latest SANS ICS Security news, content and training opportunities! By joining the ICS Community Forum, you can discuss current security events, share tips, ask questions, and connect with other ICS professionals passionate about securing our critical infrastructure. Be sure to subscribe and follow us on our social media accounts.

sans.org/industrial-control-systems-security