Course Overview
The CompTIA Security OT+ certification validates essential cybersecurity skills for securing Operational Technology (OT) environments such as industrial control systems (ICS), SCADA, manufacturing, and critical infrastructure. The course bridges IT and OT, focusing on risk-driven security, compliance, and resilience in industrial contexts.
Audience
OT Engineers, ICS/SCADA Specialists
IT Security Professionals entering OT roles
Network Architects, Industrial Operators
Professionals securing manufacturing, utilities, or energy sectors
Learning Objectives
By the end of this course, participants will be able to:
Assess OT security risks using impact-driven methodologies.
Apply OT-specific compliance and regulatory frameworks.
Implement system hardening and secure OT architectures.
Manage third-party and supply chain risks effectively.
Secure and integrate legacy OT systems with modern defenses.
Course Outline Day by day breakdown:
Day 1:
Module 1 – Introduction to OT Security
IT vs. OT security challenges
Critical infrastructure threats and attack vectors
The SecOT+ certification framework
Day 2:
Module 2 – Risk Assessment in OT Environments
Threat modeling for OT systems
Safety, uptime, and availability considerations
Prioritizing risks by operational impact
Module 3 – OT Compliance & Regulations
Industry standards (IEC 62443, NERC CIP, ISA/IEC)
Regulatory drivers for critical infrastructure
Audit and reporting requirements
Day 3:
Module 4 – Hardening & Secure Configuration
Network segmentation and defense-in-depth
Secure system baselining and patch management
Fail-safe and redundancy strategies
Module 5 – Third-Party & Supply Chain Security
Vendor risk assessment frameworks
Managing external dependencies in OT
Secure procurement and vendor controls
Day 4:
Module 6 – Legacy System Security
Challenges of unpatchable/unsupported systems
Isolation, monitoring, and compensating controls
Migration and modernization strategies
Module 7 – Hands-On Practical Scenarios
Incident response in an OT environment
Simulated ICS/SCADA attack remediation
Forensic analysis and lessons learned
Day 5:
Module 8 – Exam Preparation
Review of domains and terminology
Practice questions and case studies
Study strategies for SecOT+ success