Evergreen Alliance Training Program for GIAC Global Industrial Cyber Security Professional Certification (GICSP)

Endpoint Hardening & Protection
You will learn how to deploy endpoint security software, implement hardening techniques, and manage patching to secure both Windows and Unix-based operating systems commonly used in Industrial Control Systems (ICS) environments.

ICS Components & Architecture
You will learn to identify the assets within the Purdue Reference Architecture from levels 0 through 3 and understand how to integrate these into a secure architecture. You will also learn the role of levels and zones in defining a secure ICS architecture and the types of devices used at each level and zone.

ICS Overview & Concepts
You will learn about high-level ICS processes, as well as the roles and responsibilities within ICS. Additionally, you will gain an understanding of the key differences between ICS and IT environments, including physical security considerations.

ICS Program & Policy Development
You will learn the best practices and steps involved in developing a security program and creating enforceable security policies specific to ICS environments.

Intelligence Gathering & Threat Modeling
You will learn how to assess the threat landscape of an ICS and gain an understanding of the fundamental concepts of threat modeling in this context.

PERA Level 0 & 1 Technology Overview and Vulnerabilities
You will learn about the technologies and devices used in PERA Level 0 and Level 1, as well as how these technologies are vulnerable to attacks.

PERA Level 2 & 3 Technology Overview and Vulnerabilities
You will learn about the technologies and devices used in PERA Level 2 and Level 3, and how these devices and technologies can be targeted and compromised.

Protocols, Communications, & Vulnerabilities
You will learn about the basic structures and protocols used for communications within an ICS, and how these communications can be compromised. This includes both TCP/IP and ICS-specific protocols. You will also gain a foundational understanding of cryptographic methods used to protect communications.

Risk-Based Disaster Recovery & Incident Response
You will learn how risks are measured and how to apply this information to inform disaster recovery planning and incident response strategies.

Wireless Technologies & Vulnerabilities
You will learn about the various wireless communication technologies used in ICS, how they are targeted by adversaries, and the methods to defend against such attacks.