PECB Certified Lead SCADA Security Manager

• Duration: 5 days

Course Overview

The PECB Certified Lead SCADA Security Manager training course provides comprehensive knowledge and practical competencies required to plan, design, implement, and manage effective security programs for Supervisory Control and Data Acquisition (SCADA) systems and Industrial Control Systems (ICS).

SCADA and ICS environments are essential to critical infrastructure and industrial operations. Protecting these systems requires specialized security practices that address operational technology, industrial networks, system availability, and safety-related risks. This course explores common ICS threats and vulnerabilities, risk assessment and treatment, secure network architecture, security controls, incident management, business continuity, and security testing.

Participants will learn how to develop and implement a structured SCADA security program aligned with recognized guidance, including NIST SP 800-82. The course also covers penetration testing approaches, security testing management, system resilience, and the evaluation of SCADA security performance.

Upon successfully passing the examination and meeting the applicable professional and project experience requirements, participants can apply for the PECB Certified Lead SCADA Security Manager credential.

Learning Objectives

Upon successfully completing this training course, participants will be able to:

• Explain the purpose, architecture, and security requirements of SCADA systems, Distributed Control Systems (DCS), and Programmable Logic Controllers (PLCs).
• Identify common ICS threats, vulnerabilities, and risks affecting industrial environments.
• Assess SCADA security risks and identify appropriate risk management approaches.
• Design and develop a proactive SCADA/ICS security program, including policies and vulnerability management.
• Design secure network architectures incorporating defense-in-depth principles and appropriate security controls.
• Understand the relationship between management, operational, and technical controls within a SCADA security program.
• Implement security controls to protect industrial control environments.
• Develop resilient and highly available SCADA systems.
• Establish and manage effective security testing programs for SCADA and ICS environments.
• Understand incident management, business continuity, security monitoring, and performance evaluation.
• Support and lead teams responsible for managing SCADA security risks and improving industrial cybersecurity.

Target Audience

This training course is intended for:

• Cybersecurity and information security professionals seeking specialized SCADA security competencies.
• IT professionals looking to enhance their technical knowledge of industrial cybersecurity.
• IT managers and risk managers responsible for industrial control system security.
• SCADA system developers and architects.
• SCADA engineers and operators.
• SCADA and ICS security professionals.
• Operational technology (OT) security specialists.
• Consultants advising organizations on industrial cybersecurity, risk management, and critical infrastructure protection.

Course Content

Day 1: Introduction to SCADA and Industrial Control Systems

• Course objectives and structure
• Fundamental principles and concepts of SCADA systems
• Introduction to SCADA security
• Overview of Industrial Control Systems (ICS)
• Characteristics of industrial control environments
• SCADA and ICS architectures and components
• Common threats and vulnerabilities affecting industrial systems
• Security challenges in industrial and operational technology environments

Day 2: Designing a Security Program and Network Security Architecture

• Developing a SCADA security program
• SCADA/ICS security risk assessment
• Identifying, evaluating, and managing industrial cybersecurity risks
• Security policies and vulnerability management
• Designing secure network architectures for SCADA systems
• Network segmentation and defense-in-depth principles
• Applying relevant security guidance, including NIST SP 800-82
• Planning the implementation of SCADA security controls

Day 3: Implementing ICS Security Controls, Incident Management, and Business Continuity

• Implementation of security controls for SCADA systems
• Management and operational security controls
• Technical controls for industrial control environments
• SCADA/ICS security incident management
• Incident response planning and coordination
• Integration of security incident management with business continuity
• Security monitoring and performance measurement
• Analysis and evaluation of SCADA security controls
• Improving operational resilience and system availability

Day 4: Security Testing of SCADA Systems

• Fundamental principles of security testing
• Legal, ethical, and operational considerations
• Penetration testing approaches for industrial environments
• Security testing methodologies for ICS
• Planning and managing a penetration test
• Documentation of testing activities
• Quality review and preparation of security testing reports
• Maintaining an effective security testing program
• Competence and evaluation of SCADA Security Managers
• Course review and examination preparation

Day 5: Certification Examination

• Review of SCADA and ICS security principles
• Revision of risk management and security program implementation
• Review of network security architecture and security controls
• Examination preparation
• PECB Certified Lead SCADA Security Manager examination

Examination and Certification

Examination Details

• Examination duration: 3 hours
• Examination: PECB Certified Lead SCADA Security Manager Exam
• Examination framework: PECB Examination and Certification Programme (ECP)

The examination evaluates participants’ understanding of SCADA security management, ICS characteristics, threats and vulnerabilities, security program development, network security architecture, security controls, system resilience, and security testing.

The examination covers the following competency domains:

1. Fundamental Principles and Concepts of SCADA and SCADA Security
2. Industrial Control Systems (ICS) Characteristics, Threats, and Vulnerabilities
3. Designing and Developing an ICS Security Program Based on NIST SP 800-82
4. Network Security Architecture for SCADA Systems
5. Implementation of Security Controls for SCADA Systems
6. Developing Resilient and Robust Systems
7. Security Testing of SCADA Systems

Certification Requirements

Candidates who successfully pass the examination can apply for the appropriate credential based on their professional experience, SCADA security project experience, and compliance with PECB certification requirements.

The applicable PECB certification requirements must be fulfilled before the corresponding credential is awarded.

Course Benefits

• Specialized Industrial Cybersecurity Knowledge: Develop a comprehensive understanding of SCADA and ICS security principles, risks, and protection requirements.
• Risk Management Expertise: Learn how to identify, assess, and manage cybersecurity risks affecting industrial environments.
• Security Program Development: Gain the knowledge required to plan and implement structured SCADA security programs.
• Secure Network Architecture: Understand how to design segmented, resilient industrial networks using defense-in-depth principles.
• Incident Management and Business Continuity: Develop knowledge of incident response, business continuity, and operational resilience.
• Security Testing Capabilities: Understand how to plan, manage, document, and evaluate security testing activities for industrial systems.
• Improved System Resilience: Learn approaches to strengthening the security, reliability, and availability of SCADA environments.
• Professional Development: Build competencies for SCADA security management and pursue the relevant PECB credential based on professional and project experience.

Training Materials and CPD Credits

• Participants will receive training materials containing over 450 pages of information and practical examples.
• Participants will receive a participation certificate worth 31 Continuing Professional Development (CPD) credits.
• Training course and examination fees are included in the course price.
• Candidates who fail the examination may retake it free of charge within 12 months, subject to applicable PECB rules and policies.

Prerequisites

No specific prerequisite certification or qualification is stated in the provided course information. However, prior knowledge of networking, information security, industrial control systems, SCADA technologies, or operational technology environments is beneficial.

Certification Body

PECB provides the training, examination, and certification framework for the Lead SCADA Security Manager certification pathway.