Competency and practice field guide
Industrial cybersecurity training: practice plan
Direct answer
The learner can map an OT asset and trust boundary, choose a defensible control, preserve operational evidence and rehearse a safe response with the right plant stakeholders.
Written for control engineers, technicians and security practitioners learning to reduce cyber risk without ignoring process safety, availability and recovery.
Scope
An OT learning objective bounded by process consequence, asset, threat and authorized scope.
Signal path
Zones, conduits, identities, remote access, engineering workstations, controllers and physical process impact.
Baseline practice
Asset inventory, least privilege, protected engineering changes, monitoring and recoverable backups.
Edge cases
Loss of view or control, degraded operation, remote-access failure and recovery priorities.
Fault practice
A controlled unauthorized-change, credential, removable-media or communications scenario.
Transfer to the job
Evidence-led containment, eradication, validation and return to operation with operations ownership.