PECB Certified ISA/IEC 62443 Lead Implementer
Master implementation and management of industrial automation and control systems (IACS) security programs in alignment with the ISA/IEC 62443 standards
The target audience for training
- Managers, engineers, and consultants seeking to develop or enhance their competence in implementing IACS security programs3
- Professionals responsible for or involved in IACS security activities who wish to deepen their understanding of the ISA/IEC 62443 series of standards
- Security practitioners and risk managers looking to strengthen their skills in applying industrial cybersecurity controls, assessing maturity, and managing IACS security
- Individuals pursuing a career in IACS cybersecurity who want to learn a comprehensive methodology for designing, implementing, and maintaining security programs aligned with ISA/IEC 62443
What you will learn
Cybersecurity threats targeting IACS are increasing in sophistication, scale, and impact. The most effective defense against these risks is the systematic implementation and management of industrial cybersecurity controls and best practices. In today’s environment, strong IACS security is also a core expectation of regulators, customers, and other stakeholders.
This training course is designed to prepare participants to implement and manage an IACS security program based on the ISA/IEC 62443 series of standards. It provides a comprehensive understanding of the best practices, processes, and life cycle management principles required to establish, maintain, and continually improve an organization’s industrial cybersecurity posture.
After attending the training course, you can take the exam. If you successfully pass it, you can apply for the “PECB Certified ISA/IEC 62443 Lead Implementer” credential, which demonstrates your ability and practical knowledge to implement and manage an IACS security program based on the requirements of the ISA/IEC 62443 standards.
Training programme
- Duration: 5 days
Day 1 : Foundations of ISA/IEC 62443 and IACS security
- Training course objectives and structure
- Terms, definitions, and key technologies
- Purpose and scope
- Key concepts
- IACS networks
Day 2 : Security requirements, maturity models, and threat landscape
- System security requirements
- Maturity models
- Security levels and principles as defined in ISA/IEC 62443
- Threat landscape and actors
- Access control
- Supply chain management
- Audit and certifications
- Patching
Day 3 : Establishing and managing an IACS security program
- Introduction to the IACS security program
- IACS security program establishment
- Risk assessment
- Policy development
- IACS organization
Day 4 : Training, incident response, and sector-specific standards
- Training
- Incident response
- Testing IACS security
- Monitoring
- Other relevant standards
- Closing of the training course
Day 5 : Certification exam www
The “PECB ISA/IEC 62443 Lead Implemeter” exam fully meets the PECB Examination and Certification Program (ECP) requirements. It covers the following competency domains : Duration : 3 hours
- Domain 1 : Fundamental principles and concepts of industrial automation and control systems (IACS)
- Domain 2 : Application of ISA/IEC 62443 standards for uptime, resilience, and critical infrastructure protection
Training objectives
- Explain the fundamental concepts and principles of an industrial automation and control systems (IACS) security program based on the ISA/IEC 62443 series of standards
- Interpret the ISA/IEC 62443 requirements, recommendations, and technical reports from the perspective of an implementer
- Manage threats by implementing security controls, assessing maturity, securing assets and supply chains, and plan patching
- Design and maintain an IACS security program aligned with ISA/IEC 62443, assess and manage risks, and define clear security roles and responsibilities
Provide ongoing security awareness and training, monitor IACS environments for threats, conduct regular security testing, and respond swiftly to incidents
Training prerequisites
A basic understanding of cybersecurity concepts, industrial control systems (OT), and information security management principles is recommended to successfully follow this training course.
Examination guide
Download the exam guide
- Language : French
- Level : Fundamental
- Certification body : 0
- Certification: Yes
- Accessibility : Yes
- Duration: 5 days
Important information:
Our courses are not registered with the Répertoire National des Certifications Professionnelles (RNCP), but they do comply with the requirements of the Répertoire Spécifique (RS).