- Operational Technology
OT102: Foundations of OT Cyber Security
A complete introduction to operational technology and its cyber security challenges.
- Fundamentals
- In-person
Course at a glance
Build a solid foundation in OT cyber security
This two-day course introduces you to the fundamentals of operational technology and the unique cyber security challenges it presents. Youโll explore OT components, ICS environments, and their importance in critical national infrastructure. Building on this foundation, youโll examine the threats, vulnerabilities, and attack techniques affecting OT systems, as well as the standards, frameworks, and best practice approaches used to protect them.
You can take OT102 as a complete two-day programme or choose one of its standalone modules OT100: Introduction to OT and OT101: Cyber Security Essentials for OT to fit your needs. For teams seeking deeper, scenario-based practice, our OT103: Applied Foundations adds a third day of custom-built labs designed around your specific business environment and goals.
Whoโs this course for?
Designed for those new to operational technology or seeking to broaden their understanding of OT security. Suitable for IT professionals, engineers, and anyone working in or with critical infrastructure.
Modules
Understand how key infrastructure sectors rely on OT, how systems interconnect, and what happens when they cascade.
- What is CNI? (Definitions from NCSC, NPSA)
- Different CNI sectors, their inter-dependencies, and cascading effects.
Understand the devices and workflows that keep OT systems operating, and why they matter.
- ICS/OT definitions, its use and cyber security
- Type of facilities (Site, Transmission, Generation, Distribution)
- Attacks on ICS (Oldmart Water Treatment, Colonial Pipeline, SPower, Stuxnet)
- Different ICS/OT terms (SCADA, DCS, PCS, EMS, AS, SIS).
- OT infrastructure components (Field Devices, Field Controllers, HMI, Engineering Workstations, Servers, Safety Systems)
- IT vs OT (Priorities, Security, Communication, Operations, Support)
- ICS Flow (Process, Communication, Data)
- OT Common Protocols (Modbus, DNP3, ICCP, Fieldbus, Profibus, Profinet, OPC)
- Manufacturing (Discrete and Process)
- Learning the Controllers (Basics and programming of PLCs)
Explore the key security concepts relevant to OT environments, including risks, vulnerabilities, threats, and consequences.
- Risk
- Risk Elements (Risk Equation)
- Elevated Risk (Cultural Factors and Technical Factors)
- Threat
- Human threat attributes (capability, intent and opportunity)
- Threat Actor Categories (Mainstream, Organised, Terrorist/Nation State)
- Insider Threats (Unintentional and Intentional)
- Vulnerability
- Identify Vulnerable Elements (ICS Attack Targets, Top Vulns, Other Vulns)
- Factors contributing to ICS Vulnerabilities
- Root cause of ICS Cyber Vulnerabilities
- Consequences
- Worst Case Scenarios
- Business Impacts
- Events that lead to disruptions
- Assessment, Evaluation, ICS Program
- Principles of OT Cybersecurity (Six Principles)
- Cybersecurity Standards (NIST-800-82 R3, eCAF, OG86, IEC 62443) and Frameworks (NIST CSF 2.0)
Hands-on Training
Engage in practical exercises, interactive discussions, and case studies to apply concepts in realistic OT security scenarios.
How will you learn?
Flexible training options
The OT102: Foundations of OT Cyber Security course can be completed as a full two-day programme or taken in smaller, focused modules to suit your learning needs:
OT100: Introduction to OT & CNI
Perfect for beginners, this module covers the fundamentals of OT, including its role, components, and applications in critical infrastructure.
OT101: Introduction to OT Risks and Standards
Focused on the core principles of OT cyber security, this module builds on OT100 but can also be taken independently if you already have a working knowledge of OT.
You can choose to take OT100 or OT101 individually, or combine them for the complete OT102 two-day learning experience.
Training Labs for Applied Learning
Looking for hands-on experience and training? Consider the OT103: Applied Foundations course , which adds a third day of scenario based labs designed specifically for OT organisations and environments.
Prerequisites
No previous experience with Operational Technology required, although some knowledge of cyber security would be beneficial.
Book your date…
Book for 19th November 2026
(Youโll be redirected to Cardiff Universityโs website to complete your booking)
Or find out more…
Book a meeting with our sales team
Make an enquiry
The APMG International and swirl device logo is a trade mark of the APM Group Limited, used under permission of The APM Group Limited. All rights reserved
Feedback from past attendees
- Training Courses
Working with Cyber Innovation Hub to deliver our Business Continuity and Cyber Threat Simulation Day was outstanding. Their facilitation encouraged โฏengagement from the team and created a safe space for honest reflection and learning. The scenarios tested our thinking and exposed areas for improvement, which led to tangible outcomes in refining our continuity plans and strengthening our overall resilience. Highly recommended for any organisations looking to test and or improve their Cyber security responses.
- Training Courses
โParticipating in the OT102: Foundations of OT Cybersecurity course, delivered by Cyber Innovation Hub, strengthened our understanding of OT risks and practices. The programme was relevant and expertly delivered, equipping staff with knowledge to safeguard infrastructure. We recommend this course to organisations seeking greater resilience.”
- Training Courses
โThe Cyber Innovation Hubโs Applied Foundations of OT Cybersecurity was a package that developed our understanding of OT and security control requirements. Well-paced and delivered, it gave us hands-on experience which consolidated learning. Iโm looking forward to future packages to build upon this foundation.โ
Related courses
Letโs build cyber resilience together
From training to testing to innovation, if you’re building something that needs to stay secure, weโre ready to help you simulate, learn , and protect what matters.