時間

課程內容

第一天

TOPIC-1

Basic introduction of ISA/IEC 62443 Standards
(including Cyber Security Certifications in a National / European / International Environment)

TOPIC-2

Basic introduction of ISA/IEC 62443 Conformity Assessment Schemes 
(including ISASecure and IECEE Scheme)

TOPIC-3

Basic introduction of IEC System of Conformity Assessment Schemes for Electrotechnical Equipment and Components (IECEE System)
Part I: Industrial Cyber Security Program
Part II: CB Scheme Test Certificates

TOPIC-4

General assessment process for IEC 62443
– For IEC 62443-2-4
– For IEC 62443-4-1
– For IEC 62443-3-3 and IEC 62443-4-2

TOPIC-5

IEC 62443 in the future
– Concept of protection level
– Concept of profile
– Standard release in the future

第二天

TOPIC-1

Standard introduction of IEC 62443-2-1:2010
– Initiate CSMS Program
– High-level Risk Assessment
– Detailed Risk Assessment
– Establish policy, organization and awareness
– Select and implement countermeasures
– Maintain the CSMS
(including relationship between IEC 62443-2-1 and ISO/IEC 27001)
(including relationship between IEC 62443-2-1 and IEC 62443-3-2)

TOPIC-2

Further discussion of IEC 62443-2-1:2019 (Draft)
(including relationship between IEC 62443-2-1 to IEC 62443-2-4, IEC 62443-3-3, IEC 62443-4-2)

TOPIC-3

Standard introduction of IEC 62443-2-4:2015
– Functional Area: Solution staffing
– Functional Area: Assurance
– Functional Area: Architecture
– Functional Area: Wireless
– Functional Area: SIS
– Functional Area: Configuration management
– Functional Area: Remote access
– Functional Area: Event management
– Functional Area: Account management
– Functional Area: Malware protection
– Functional Area: Patch Management
– Functional Area: Backup/Restore
(including relationship between IEC 62443-2-4 and IEC 62443-3-2)

第三天

TOPIC-1

Standard introduction of IEC 62443-4-1:2018
– Security Management
– Specification of security Requirements
– Secure by Design
– Secure Implementation
– Security Verification and Validation testing
– Management of security-related issues
– Security Update Management
– Security Guidelines
(including relationship between IEC 62443-4-1, IEC 62443-3-3 and IEC 62443-4-2)
(including relationship between IEC 62443-4-1 and IEC 62443-3-2)
(including relationship between IEC 62443-4-1 and ISO/SAE 21434)

TOPIC-2

Standard introduction of IEC 62443-3-3:2013 and IEC 62443-4-2:2019
– Common constraints (for system/Component)
– FR1: Identification and authentication control (IAC)
– FR2: Use Control
– FR3: System integrity
– FR4: Data confidentiality  
– FR5: Restricted data flow
– FR6: Timely response to events
– FR7: Resource availability

第四天

Exam
Duration: 13:30 – 16:30 (3 hours)