CompTIA SecOT+- eLearning (Exam Included)

What Will You Learn?

1. OT Systems and Safety Foundations

   Module 1

   • Apply OT workplace safety practices, including lockout/tagout, JSA, PPE, and hazard identification.
   • Explain OT environments, IT/OT convergence, industrial devices, and critical infrastructure.
   • Understand control theory, control logic, process variables, and control languages.
   • Identify OT communication media and protocols, including Modbus, DNP3, BACnet, and Profinet.
   • Compare legacy, embedded, virtualized, cloud, and edge OT infrastructure.

2. OT Risk Management

   Module 2

   • Explain governance, risk, compliance, and business continuity.
   • Manage cybersecurity programs, risk registers, maturity assessments, roadmaps, and documentation.
   • Apply risk assessment frameworks, evaluate controls, and determine risk treatments.
   • Monitor risks through audits, reporting, and escalation.
   • Apply change management procedures for testing, communication, and approval.

3. OT Threat Intelligence

   Module 3

   • Understand threat intelligence and frameworks such as MITRE ATT&CK, Diamond Model, and Cyber Kill Chain.
   • Analyze historical OT attacks, including Stuxnet and Industroyer.
   • Identify OT threat actors, attack vectors, vulnerabilities, and techniques.
   • Use threat feeds, IoCs, TTPs, and information-sharing platforms to support cyberdefense.

4. OT Cyber Security Architecture, Design, and Engineering

   Module 4

   • Apply secure architecture principles, including least privilege and defense in depth.
   • Evaluate physical security and hardware protection measures.
   • Implement host, application, and firmware security practices.
   • Design network security controls, segmentation, encryption, and intrusion detection.
   • Apply identity and access controls, MFA, PKI, and secure remote access.

5. OT Security Operations

   Module 5

   • Manage OT asset inventories, discovery, and configurations.
   • Analyze logs, threat-hunting data, SIEM, and SOAR outputs.
   • Identify, assess, prioritize, and remediate vulnerabilities.
   • Secure removable media, mobile devices, and external equipment.

6. OT Incident Management

   Module 6

   • Apply incident management frameworks, including PICERL and ICS4ICS.
   • Coordinate cybersecurity and physical incident response.
   • Develop incident response plans, playbooks, and exercises.
   • Perform incident triage, evidence collection, and root cause analysis.
   • Analyze system and network logs, baselines, and anomalies.
   • Execute containment, eradication, recovery, validation, and reporting procedures.