Cybersecurity| Information Training and Certification

What is ICS Security? What is SCADA Security?

ICS is short for  Industrial Control Systems. These are also referred to as IACS , which is Industrial Automation and Control Systems. Security of these systems is referred to as ICS security, which implies it is the same as Industrial Cybersecurity. 

SCADA is short for Supervisory Control and Data Acquisition System. These are used in industrial facilities as a higher level monitoring and control system. Typically the lower level units could be PLCs (Programmable Logic Controllers) or RTU (Remote Terminal Units). These along with other parts included wired and wireless networks can form a SCADA. Thus SCADA security can also be referred to as Industrial Cybersecurity.

What is DCS Security?

DCS is short for Distributed Control System. This name has a historical background, without going into too many details, we can say that a DCS is a system with several controllers (which may have several cards inside to interface inputs (sensors, transmitters, switches, push buttons, etc)  and outputs ( valves, actuators, motors, drives, displays,etc), CPUs, communication cards and so on.

These controllers typically can control entire plant units (such as Distillation, Filtration, etc) and are themselves networked using proprietary bus networks. Note that the sensors and actuators may also use analog (e.g.4-20 mA) or digital (e.g.FOUNDATION Fieldbus or Profibus). All of these are linked via several Operator Stations and Human Machine Interfaces (HMI panels). The cybersecurity of these systems is referred to as DCS security. As you can guess, it is the same as Industrial Cybersecurity.

What is OT Security?

OT Security is short for Operations Technology security. It is distinct from IT security which is short for Information Technology security, which covers cybersecurity of Information Technology systems (e.g. those used in banks, or online stock trading, or e-commerce). OT security refers to security of systems used in Operational areas such as manufacturing, oil and gas processing, etc. So OT security encompasses DCS Security, SCADA security, ICS security and more. We can consider OT security and Industrial Cybersecurity as being the same.

What is so different about Industrial Systems security?

One of the biggest myths present in laypersons is that a DCS, SCADA or a PLC is “just a computer controlling machinery”. No, it is not. It is much more than just a computer. These systems are hardwired to thousands of sensors, transmitters, switches, actuators, valves and motors that are in turn used to control  the plant (like an oil refinery for instance). Thus these systems are better classified as “cyber-physical systems”. Any deviation in their working can cause a disaster. This not true for a business IT system, where for example, malfunctioning of the system cannot result in any physical damage to physical assets or harm people physically.

Thus the techniques and methods that are used to protect business IT systems are completely different from those that are used to protect Industrial Systems.

Hence it is a different ball game altogether. To understand the subject you must have a good background in Industrial Systems, as well as IT security concepts.

But don’t worry, we have you covered. When you take the Abhisam Industrial Cybersecurity course, you will be a pro.

To understand more about why is Industrial Cyber Security different from conventional IT cyber security, please read this free Abhisam Whitepaper on Industrial Cyber security myths.

To know more about the latest Industrial Cyber Security threats and vulnerabilities, please see here.

Safety instrumented systems and security standards

Safety Instrumented Systems are those safety critical industrial control systems that are used to either maintain the plant in a safe state or to shut it down safely in case of a problem. These systems are also known by various names such as Emergency Shutdown Systems, Safety PLCs and HIPPS (High Integrity Pressure Protection Systems). These are very critical to ensure the safety of the plant, people and the environment (as any malfunction could lead to a disaster that will almost certainly damage physical assets, cause injuries and fatalities among the people working there or in the nearby areas and could also pollute the surrounding environment. Most of these systems are built according to IEC 61508 standard. The users in the process industry also follow IEC 61511 (a related standard). Historically these standards mostly dealt with random hardware failures and systematic failures but did not consider malicious attacks. The newer versions do and this is where these systems need to be cyber secure. When you take the Abhisam Industrial Cybersecurity course, you will learn about these relevant clauses of the above standards too.

Popular Cyber Security Courses

We have the following Online Courses and E-learning courses related to Cybersecurity. Each of these courses consist of several modules that have text, animations & simulations, graphics, assessments, examples, real life case studies that help you become a professional. You can complete them from the comfort of your home or office or anywhere else. You can either take them online over the internet (Online version). On passing the associated exam, you can get qualified as a professional, earn an electronic certificate with a unique ID number and a badge issued via Badgr, that can be added to your Linked In Profile or other places online such as email signatures. This displays your qualifications and competencies to your colleagues, peers, bosses and potential employers and clients.