- Operational Technology
OT103: Applied Foundations of OT Cyber Security
Apply OT security principles in a customised, business-focused learning environment.
- Fundamentals
- In-person

Course at a glance
Build a solid foundation in OT cyber security
This three-day course tailors OT security training to your business. The first two days mirror OT102 fundamentals, covering OT threats, risks, standards, and best practices. On day three, youโll work with our trainers and cyber engineers to test your knowledge and understanding of an OT environment as you engage with our OT scenario based labs. Learn applied techniques such as active threat modelling, ICS attack methods, security layering, and incident response planning, all within the OT context.
Whoโs this course for?
Ideal for those new to OT environments who need practical, hands-on experience applying security principles, tailored to the real systems and risks they manage.
Modules
See how key infrastructure sectors rely on OT, how systems interconnect, and what happens when they cascade.
- What is CNI?
- Different CNI Sectors, Inter-dependencies and Cascading effects
Understand the devices and workflows that keep OT systems operating, and why they matter.
- Different ICS/OT Terms – SCADA/DCS/PCS/EMS/AS/SIS
- OT infrastructure components – HMI, Field Controllers, Field Devices, Servers, Engineering Workstations, Safety Systems
- Attacks On ICS – Oldmart Water Treatment, Colonial Pipeline, SPower, Stuxnet
- IT and ICS – Priorities (OT Cybersecurity Tenets); Security, Communication, Operations, Support, Convergence
- Types of Facilities – Site, Transmission, Generation, Distribution
- Manufacturing -Discreet and process (Continuous, batch, hybrid)
- ICS Flow – Process Flow; Communication Flow; Data Flow
- Common Protocols – Modbus; DNP3; ICCP; Fieldbus; Profibus; Profinet; OPC
- Learning the controllers – Basics and programming of PLCs,
Explore the key security concepts relevant to OT environments, including risks, vulnerabilities, threats, and consequences.
- Risk Elements; Threat, Vulnerability, Consequence, Elevated Risk, risk factors
- Vulnerability: Vulnerable Elements in an ICS, vulnerability root causes and Factors Contributing to ICS Vulnerabilities.
- Threats: Hazards Vs. Threats, Human Threat Attributes, Threat Actor Categories; Insider Threats
- Consequences: Worst Case Scenario, Business Impacts, Events that lead to disruptions
Gain an overview of the core principles of OT cybersecurity and the recognised industry standards that support secure and compliant operations in CNI.
- Principles of OT Cybersecurity
- Introduction to Cybersecurity Standards
- NIST-800-82 R3*(*NIST In-Depth)
- eCAF
- OG86
- Test your knowledge and understanding of an OT environment
Hands-on Training
Work with our trainers and cyber engineers to test your knowledge and understanding of an OT environment as you engage with our OT scenario based labs.



How will you learn?
Learn applied techniques such as active threat modelling, ICS attack methods, security layering, and incident response planning, all within the OT context.
Prerequisites
No previous experience with Operational Technology required, although some knowledge of cyber security would be beneficial.
Get started…


The APMG International and swirl device logo is a trade mark of the APM Group Limited, used under permission of The APM Group Limited. All rights reservedย
Feedback from past attendees
- Training Courses
Working with Cyber Innovation Hub to deliver our Business Continuity and Cyber Threat Simulation Day was outstanding. Their facilitation encouraged โฏengagement from the team and created a safe space for honest reflection and learning. The scenarios tested our thinking and exposed areas for improvement, which led to tangible outcomes in refining our continuity plans and strengthening our overall resilience. Highly recommended for any organisations looking to test and or improve their Cyber security responses.

- Training Courses
โParticipating in the OT102: Foundations of OT Cybersecurity course, delivered by Cyber Innovation Hub, strengthened our understanding of OT risks and practices. The programme was relevant and expertly delivered, equipping staff with knowledge to safeguard infrastructure. We recommend this course to organisations seeking greater resilience.”

- Training Courses
โThe Cyber Innovation Hubโs Applied Foundations of OT Cybersecurity was a package that developed our understanding of OT and security control requirements. Well-paced and delivered, it gave us hands-on experience which consolidated learning. Iโm looking forward to future packages to build upon this foundation.โ

Related courses

Letโs build cyber resilience together
From training to testing to innovation, if you’re building something that needs to stay secure, weโre ready to help you simulate, learn , and protect what matters.
