Shop

Artificial Intelligence Notice: ISA prohibits the entry of any ISA intellectual property (“ISA IP”), including standards, publications, training or other materials into any form of Artificial Intelligence (AI) tools, such as ChatGPT. Additionally, creating derivatives of ISA IP using AI is also prohibited without express written permission from ISA’s CEO. In the case of such use, ISA will suspend a licensee’s access to ISA IP, and further legal action will be considered. Please review ISA's policies for Use of AI Tools, Intellectual Property and Terms and Conditions for further information or contact permissions@isa.org.

Cancel

ISA/IEC 62443 Cybersecurity Fast Track (IC48)

Professional man in front of computer in control room

Master the Full IACS Cybersecurity Lifecycle in Just Five Days

ISA/IEC 62443 Cybersecurity Fast Track (IC48) covers the first, second and third phases of the industrial automation control systems (IACS) cybersecurity lifecycle as defined in ISA-62443-1-1-2007, Security for Industrial Automation and Control Systems – Part 1-1: Terminology, Concepts and Models.

IACS Cybersecurity Lifecycle Phases
Phase One: Assess (Identify & Document)
  • Inventory the system under consideration (SuC) and IACS assets.
  • Produce zone/conduit models and an asset inventory.
  • Perform high-level and detailed vulnerability and risk assessments to identify high-risk vulnerabilities requiring mitigation. 
Phase Two: Develop & Implement (Design & Deploy Countermeasures)
  • Translate assessment outputs into a conceptual and detailed cybersecurity design.
  • Specify and implement countermeasures (network segmentation, firewalls/DMZs, access control, allowlisting, IDS/HIDS, patching strategies, etc.) to achieve target security levels (SL-T).
Phase Three: Maintain (Operate & Sustain)
  • Operate and maintain security controls through patch and vulnerability management, backups, change control, monitoring (SIEM/IDS), incident response and periodic reassessments to ensure the achieved security level (SL-A) meets the target.

Note: IC48 includes material from three training courses condensed into a five-day course. This fast-paced training is intended only for those meeting all required prerequisites.

ISA/IEC 62443 Cybersecurity Certificate Program: The program has five certificates. Each of the first four certificates requires successful completion of a course and passing an exam. Certificate One – ISA/IEC 62443 Cybersecurity Fundamentals Specialist is required before taking certificate exams two, three and four.

This fast-track course may be taken in lieu of taking the courses for Certificates 2 to 4 (IC33, IC34 and IC37). Upon successful course completion, you may take each of the certificate exams separately and in any order. Course registration includes one exam for each corresponding course (IC33, IC34 and IC37).

You may pay a fee to retest as many times as necessary to pass your certificate exam(s). Your six-month eligibility period begins on the date you complete your certificate course or pass the IC32 exam.

The ISA/IEC 62443 Cybersecurity Expert certificate is awarded automatically upon completion of all four certificates. Learn more on our ISA/IEC 62443 Cybersecurity Certificate program webpage.

Required Prerequisites

  • ISA/IEC 62443 Cybersecurity Fundamentals Specialist certificate.*
  • Current job must be in the cybersecurity field.
  • Must have worked in the cybersecurity (or similar) field for the last three years.
  • Participants must have substantive (technical) knowledge of cybersecurity for IACS.

*The ISA/IEC 62443 Cybersecurity Fundamentals Specialist certificate is earned by successfully completing ISA's course, Using the ISA/IEC 62443 Standards to Secure Your Control Systems (IC32) and passing the ISA/IEC 62443 Cybersecurity Fundamentals Specialist certificate exam. IC32 is offered in multiple formats; visit the course webpage to review course offerings.

Who Should Take IC48?

  • Professionals involved in the cybersecurity of industrial automation and control systems (IACS).
  • System operators, engineers, IT and OT security personnel, network administrators and professionals responsible for managing or securing IACS environments.
  • Those in roles related to risk assessment, incident response and compliance within industrial settings.

View Offerings by Format

Classroom (IC48)

Length: 5 days 
CEU Credits: 3.5

View IC48 Classroom Offerings

Virtual Classroom (IC48V)

Length: 5 days
CEU Credits: 3.5

Virtual Classroom Offering (IC48V)

Visit our course formats page for a detailed description of each format.

Learning Objectives

  • Identify and document the scope of the IACS under assessment.
  • Specify, gather or generate the cybersecurity information required to perform the assessment.
  • Identify or discover cybersecurity vulnerabilities inherent in the IACS products or system design.
  • Organize and facilitate a cybersecurity risk assessment for an IACS.
  • Identify and evaluate realistic threat scenarios.
  • Identify gaps in existing policies, procedures and standards.
  • Establish and document security zones and conduits.
  • Prepare documentation of assessment results.
  • Interpret the results of an industrial control systems (ICS) cybersecurity risk assessment.
  • Develop a cybersecurity requirements specification (CRS).
  • Develop a conceptual design based on information in a well-crafted CRS.
  • Explain the security development lifecycle process and deliverables.
  • Perform a basic firewall configuration and commissioning.
  • Design a secure remote access solution.
  • Develop system hardening specification.
  • Implement a basic network intrusion detection system.
  • Develop a cybersecurity acceptance test plan (CFAT/CSAT).
  • Perform a basic CFAT or CSAT.
  • Perform basic network diagnostics and troubleshooting.
  • Interpret the results of IACS device diagnostic alarms and event logs.
  • Implement IACS backup and restoration procedures.
  • Describe the IACS patch management lifecycle and procedure.
  • Apply an antivirus management procedure.
  • Define the basics of application control and whitelisting tools.
  • Define the basics of network and host intrusion detection.
  • Define the basics of security incident and event monitoring tools.
  • Implement an incident response plan.
  • Implement an IACS management of change procedure.
  • Conduct a basic IACS cybersecurity audit.

Recommended Prerequisites

  • Three to five years of experience in the IT cybersecurity field, with some experience in an industrial (OT) setting.
  • A minimum of two years of experience in a process control engineering setting.
  • Prior cybersecurity coursework is preferable. 
  • One or more 3rd-party OT cybersecurity certification(s).
  • Familiarity with the ISA/IEC 62443 standards is helpful.

Recommended Resources

Not sure this course is

right for you?


Complete a knowledge check designed to evaluate your level of understanding of the course material and show you the types of questions you’ll be able to answer after completing the course.

Take the IC48 Knowledge Check

Custom Training Solutions

If your company is interested in bringing training on site to your team, please contact trainingsales@isa.org or call +1 919-549-8411.

ISA Member Discount

To get the member price on today’s purchase, log in as a member or complete the join process before you complete your purchase. To join and/or register by phone, call Customer Experience at +1 919-549-8411.