IEC 62443 工控資安認證工程師訓練課程– IEC 62443 IACS Cybersecurity Certified Engineer Training Course

時間

Course

『第一天』

TOPIC-1

Basic
introduction of IEC 62443 Standards
(including Cyber Security Certifications in a National / European /
International Environment)

TOPIC-2

Basic
introduction of IEC 62443 Conformity Assessment Schemes
(including IECEE Scheme)

TOPIC-3

Basic
introduction of IEC System of Conformity Assessment Schemes for
Electrotechnical Equipment and Components (IECEE System)
Part I: Industrial Cyber Security Program
Part II: CB Scheme Test Certificates

TOPIC-4

General
assessment process for IEC 62443
– For IEC 62443-2-4
– For IEC 62443-4-1
– For IEC 62443-3-3 and IEC 62443-4-2

TOPIC-5

IEC
62443 in the future
– Concept of protection level
– Concept of profile
– Standard release in the future

『第二天』

TOPIC-1

Standard
introduction of IEC 62443-2-1
– Initiate CSMS Program
– High-level Risk Assessment
– Detailed Risk Assessment
– Establish policy, organization and awareness
– Select and implement countermeasures
– Maintain the CSMS
(including relationship between IEC 62443-2-1 and ISO/IEC 27001)
(including relationship between IEC 62443-2-1 and IEC 62443-3-2)

TOPIC-2

Standard
introduction of IEC 62443-2-4
– Functional Area: Solution staffing
– Functional Area: Assurance
– Functional Area: Architecture
– Functional Area: Wireless
– Functional Area: SIS
– Functional Area: Configuration management
– Functional Area: Remote access
– Functional Area: Event management
– Functional Area: Account management
– Functional Area: Malware protection
– Functional Area: Patch Management
– Functional Area: Backup/Restore
(including relationship between IEC 62443-2-4 and IEC 62443-3-2)

『第三天』

TOPIC-1

Standard
introduction of IEC 62443-4-1
– Security Management
– Specification of security Requirements
– Secure by Design
– Secure Implementation
– Security Verification and Validation testing
– Management of security-related issues
– Security Update Management
– Security Guidelines
(including relationship between IEC 62443-4-1, IEC 62443-3-3 and IEC
62443-4-2)
(including relationship between IEC 62443-4-1 and IEC 62443-3-2)
(including relationship between IEC 62443-4-1 and ISO/SAE 21434)

TOPIC-2

Standard
introduction of IEC 62443-3-3:2013 and IEC 62443-4-2
– Common constraints (for system/Component)
– FR1: Identification and authentication control (IAC)
– FR2: Use Control
– FR3: System integrity
– FR4: Data confidentiality
– FR5: Restricted data flow
– FR6: Timely response to events
– FR7: Resource availability

『第四天』

Exam
Duration: 9:30 – 12:30 (3 hours)