IEC 62443工控專家訓練課程 IEC 62443 Industrial Automation and Control System(IACS) Expert training course

近年來高科技產業資安事件頻傳，隨著工業物聯網(IIoT)與智慧製造快速發展，工業控制系統與設備所面臨的網路攻擊風險亦日益增加。企業除了重視資訊安全(IT Security)外，也需將營運技術安全(OT Security)納入考量，以降低工業通訊網路與關鍵基礎設施可能面臨的資安威脅。IEC 62443 為國際廣泛採納和認可的工業資安標準，可提供完整且具結構性的資安框架與方法，協助企業於工控系統與產品開發過程中建立安全開發流程，並強化系統、設備與供應鏈之安全性，以符合各產業對工業資安與國際合規要求之最佳實務。

0.0

(0)

18 時

關於課程

課程日期	定價	早鳥優惠價
平日班 2026/9/14-17	NT$ 60,000	NT$ 45,000

時數與費用

課程時數：
     前3日 18小時 09:30 – 16:30 (6小時/日)
     第4日上午考試 09:30-12:30 (3小時)
課程費用：$ 60,000  優惠價：$ 45,000
點數：15

課程重點

本次課程將深度解析IEC 62443工控資安標準架構，內容涵蓋IEC 62443標準介紹、適用產業與應用情境、成熟度與安全等級要求、風險評估方法、評鑑機制與導入流程等核心內容，並進一步說明IEC 62443-2-1、-2-4、-3-2、-3-3、-4-1、-4-2 等重要章節標準之架構與實務應用，包含資安管理制度要求、系統安全需求、產品開發生命週期、技術安全控制措施及元件安全要求等內容。協助學員建立完整的工業控制系統資安觀念，企業能了解 IEC 62443核心重點、稽核評估方向及供應鏈資安要求，以因應智慧製造、工業自動化與國際資安合規之需求。

適合對象

公司工業控制與工業物聯網物事業部及專案主管、採購主管、品保主管，品管主管。
供應商管理過程管理者、供應商審核員與各部門相關作業人員。
希望取得IEC 62443的從業者。

時間	課程內容
Day 1	▫ Basic introduction of IEC 62443 Standards ▫ Basic introduction of IEC 62443 Conformity Assessment Schemes ▫ Basic introduction of IEC System of Conformity Assessment Schemes for electrotechnical equipment and components (IECEE System) - Part I: Industrial Cyber Security Program - Part II: CB Scheme Test Certificates ▫ General assessment process for IEC 62443 - For IEC 62443-2-4 - For IEC 62443-4-1 - For IEC 62443-3-3 and IEC 62443-4-2 ▫ IEC 62443 in the future - Concept of protection level - Concept of profile - Standard release in the future
Day 2	▫ Standard introduction of IEC 62443-2-1 - Initiate CSMS Program - High-level Risk Assessment - Detailed Risk Assessment - Establish policy, organization and awareness - Select and implement countermeasures - Maintain the CSMS (including relationship between IEC 62443-2-1 and ISO/IEC 27001) (including relationship between IEC 62443-2-1 and IEC 62443-3-2) ▫ Further discussion of IEC 62443-2-1 (including relationship between IEC 62443-2-1 to IEC 62443-2-4, IEC 62443-3-3, IEC 62443-4-2) ▫ Standard introduction of IEC 62443-2-4 - Functional Area: Solution staffing - Functional Area: Assurance - Functional Area: Architecture - Functional Area: Wireless - Functional Area: SIS - Functional Area: Configuration management - Functional Area: Remote access - Functional Area: Event management - Functional Area: Account management - Functional Area: Malware protection - Functional Area: Patch Management - Functional Area: Backup/Restore (including relationship between IEC 62443-2-4 and IEC 62443-3-2)
Day 3	▫ Standard introduction of IEC 62443-4-1 - Security Management - Specification of security Requirements - Secure by Design - Secure Implementation - Security Verification and Validation testing - Management of security-related issues - Security Update Management - Security Guidelines (including relationship between IEC 62443-4-1, IEC 62443-3-3 and IEC 62443-4-2) (including relationship between IEC 62443-4-1 and IEC 62443-3-2) (including relationship between IEC 62443-4-1 and ISO/SAE 21434) ▫ Standard introduction of IEC 62443-3-3 and IEC 62443-4-2 - Common constraints (for system/Component) - FR1: Identification and authentication control (IAC) - FR2: Use Control - FR3: System integrity - FR4: Data confidentiality - FR5: Restricted data flow - FR6: Timely response to events - FR7: Resource availability
Day 4	Exam: 9:30 - 12:30 (3 hours)