This Cybersecurity Monitoring, Event Management, and Incident Response in the Energy Sector training course covers the most important activities to be performed in a strong defense system against cyberattacks to an energy plant. After the “supply chain attack” on cybersecurity companies in the USA such as SolarWinds early in December 2020, the cyberspace and all it entails including the Energy Sector is no longer the same. The SolarWinds cybersecurity breach is perhaps the major one thus far and has demonstrated that no system, no matter how carefully designed, is secure. The scale, significance, and damage of this incident is huge and will likely grow as more details of the breach are discovered.
By attending this training course, you will get a deep understanding of the crucial steps that are required to protect and defend energy and power plants from cyberattacks. Although the SolarWinds breach affected only the confidentiality of data, it is just a matter of time before other security properties such as application related data integrity is also compromised by similar attacks. If data integrity related to any physical real-world functionality such as those in the Energy Sector is compromised this can lead to disastrous consequences in the industry. Protecting cyber-physical systems in the energy sector requires resilience as well as strong defenses.
At the end of this training course, you will learn to:
- Understand the energy sector environment and explain its architecture
- List and explain various energy sector cybersecurity threats and vulnerabilities
- Perform an energy sector cybersecurity risk assessment and develop mitigation strategies
- Develop an energy sector monitoring and incident response plan
- List and analyse the most important current and future practices of strong defenses
- List and understand the most significant energy sector and cybersecurity standards
Participants to this training course will receive a thorough training using several techniques that include coverage of material, discussions, breakout exercises, videos, and tests. The hands-on breakout exercises will be performed in groups and will enable participant to apply the material to real world scenarios with active discussions with other members of the group. Pre-tests and post-tests will measure what was learned in this training course.
The organisation will benefit from understanding the principles of cybersecurity of the Energy Sector with emphasis on monitoring, event management, and incident response and how these can be applied. Organisations who wants to apply the principles of cybersecurity to protect their assets and those of their stakeholders.
The organisation will benefit from this training course through:
- Enhancing analytical and problem solving skills through participation
- Learning how to analyze the cybersecurity of energy and power infrastructures
- Being able to apply cybersecurity techniques to implement resilience and strong defenses
- Learning how to perform cybersecurity risk assessments
- Improving the level of achieved cybersecurity
- Developing cybersecurity plans including those for monitoring, event management, and incident response
- Becoming adaptive and improve their cybersecurity while at the same time serve stakeholders and the public at the highest level
The participants will gain or enhance their understanding and application of cybersecurity monitoring, event management and incident response.
The training course will be of personal benefit to delegates by enabling them to:
- Understand how attacks happen in an energy sector environment
- Identify attack vectors in existing energy sector architectures
- Identify threats and vulnerabilities in the energy sector
- Understand cybersecurity protection frameworks and designing cybersecurity controls
- Develop various cybersecurity plans including information monitoring and incident response
- Apply best practices for event management and incident response
- Apply methods to perform cybersecurity risk assessment and mitigation
- Recognize the need and benefits of standards
- Prepare for the future cybersecurity attacks and breaches in the energy sector
This Energy Training Centre course is intended for people involved in operations, software, services, energy and power infrastructure, IT experts, as well as researchers and consultants involved in cybersecurity, management, big data, communications, project management and energy and power plants.
This training course is suitable for a wide range of professionals but will greatly benefit:
- IT, OT, and Cybersecurity professionals
- Operators and Professionals in the energy sector
- Process control facilities
- Enterprises involved in the design of energy and power plants
- Project managers
- Technology engineers, Chief Technology Officers (CTOs) and Chief Information Officers (CIOs)
- Strategic development personnel
- Operators, Engineers, Managers, and Researchers
- Energy, Power, and Cybersecurity industry consultants
DAY ONE: CYBERSECURITY AND THE ENERGY SECTOR
- How cyber-attacks happen?
- Industries affected
- The energy sector environment
- Role of automation
- Energy sector industrial architecture
- New industrial platforms: Industrial Revolution 4.0 (IR 4.0)
- A need to secure energy and power industries
DAY TWO: ENERGY SECTOR MODELS, INFRASTRUCTURE, CYBERSECURITY THREATS & VULNERABILITIES
- Overview of cybersecurity
- Energy sector models: Operators
- Energy sector systems and infrastructures
- Communication systems, wired, wireless
- Data management, sharing, and governance
- Threats & vulnerabilities in the energy sector
DAY THREE: ENERGY SECTOR CYBERSECURITY RISK ASSESSMENT AND MITIGATION
- Cybersecurity risk assessment in the energy sector
- Cybersecurity challenges
- Approaches in the energy sector cybersecurity
- Cybersecurity protection frameworks: NIST and others
- Cybersecurity controls
DAY FOUR: ENERGY SECTOR MONITORING AND INCIDENT RESPONSE
- Penetration testing for energy infrastructures
- Cybersecurity monitoring
- Event management
- Incident response
- Best practices for first responders
DAY FIVE: ENERGY SECTOR AND CYBERSECURITY STANDARDS – CURRENT AND FUTURE PRACTICES
- Energy sector & Cybersecurity standards
- Good practices
- Gap analysis
- Plan of action
- Innovative approaches: AI, Blockchain
