T05. Workshop on Forensic Analysis in an Industrial Automation Environment
Evaluate the need to conduct forensic analysis in industrial environments and determine the criteria to be applied in handling electronic evidence found in critical systems
What is the Workshop on Forensic Analysis in an Industrial Automation Environment and why take it?
The T05 Forensic Analysis Workshop is based on a practical case study to learn how to conduct forensic analysis in an industrial automation and control environment. It directly applies the best practices guide for forensic analysis of industrial automation and control systems, an essential document included in the workshop materials.
The variety of incidents that can occur in these environments is so diverse that each incident can be considered unique, even if it involves the same infrastructure and specific equipment. This training is crucial and indispensable for assessing the need for forensic analysis in industrial settings. It is an essential tool for determining the criteria to apply in handling electronic evidence found in critical systems.
Through the presented use case, students will follow the step-by-step process of a forensic investigation: from evidence collection to the preparation of the forensic report. Working with different samples of digital evidence, participants will use forensic analysis tools to uncover the causes of the incident. The practice will cover gathering the necessary information to prepare the corresponding forensic report.
What you will learn in this training
What are the criteria for correctly applying the best practices guide for forensic analysis of industrial automation and control systems?
Workshop Program:
- Industrial Automation Technologies and Risk Scenarios
- Presentation of Use Case
- Characteristics of Forensic Analysis
- Forensic Analysis in OT Systems
- Forensic Analysis in Industrial Networks
- Forensic Analysis in IT/OT Integration
- Practical Forensic Analysis in an OT Environment
- Presentation of Practice Results
Who is it for?
The Forensic Analysis Workshop is primarily aimed at professionals from industrial organizations, engineering firms, IT/OT integrators, cybersecurity professionals, and forensic experts who need the knowledge to conduct forensic analysis in cybersecurity within an industrial organization.
Workshop teaching team
Organisations that have entrusted the training of their professionals to the ICC College
ONLY 15 PLACES AVAILABLE
Exclusive training!
Frequently asked questions
Do I need prior knowledge of cybersecurity?
We consider it essential that students have an initial knowledge of industrial environments, including aspects of automation and industrial communications, ideal for this Diagnostic Workshop.
To facilitate this foundation, prior to the start of the course, the JRC will provide access to a virtual and dynamic educational resource. This material aims to provide students with a solid understanding of these fundamental concepts.
Our ongoing goal is to ensure maximum success for our students and participants.
Why attend the workshop on forensic analysis in an industrial automation environment?
You will learn about the types of technological crimes in an industrial organization, the evidence and its characteristics, as well as its custody.
- Share important aspects that should be considered in the forensic analysis of an automation and control environment with other professionals.
- Understand the main techniques and tools that can be used in forensic analysis of an OT environment.
- Learn how to prepare a forensic report.
When will the sessions be held?
The training will take place in 2 sessions from 15:00h to 18:30h (Spain time – CET).
What support material will I receive?
Each student will receive:
One copy for individual use of the following documents:
Best Practices for Cybersecurity Diagnostics in Industrial Environments (Market value 250€).
Guide + Tool – Cybersecurity Requirements for Service Providers.
Presentations used in the course training
Case studyCan my company subsidise this training?
Yes, you will be able to subsidise the number of hours included in this training using your training credit through FUNDAE (State Training for Employment Training).
The Centro de Ciberseguridad Industrial is not in charge of the management and processing of your bonus, but we will provide you with all the information and documentation you need so that you can do it.
Are the classes live or are they video recorded?
The training modality is SYNCHRON ONLINE (with free access from any location, you only need a stable internet connection).
The sessions will be live via the videoconference system provided by the JRC. These sessions will be recorded and will be available for subsequent viewing by the student for a limited time.
How long will the material be available to me after the end of the training?
The training material as well as the recording of the sessions and everything shown during the training will be available to the student for a period of 1 calendar month. During this time, the student will be able to enjoy the training with total freedom and availability with remote access.
Which document proves my participation?
At the end of the training and having fulfilled the necessary requirements, you will receive an accreditation certificate from the school certifying your attendance, participation and compliance with the training requirements. The CCI School is an internationally recognised organisation whose training, experience, teaching staff and professional team accredit it.
Along with the accreditation certificate, you will receive the White Professional Credential (which is obtained through the student’s knowledge acquired during the training) of our CCI Industrial Cybersecurity Commitment Recognition Programme.
What are the payment methods?
Payment must be made by credit/debit card. If you can only pay by bank transfer, please contact us for support in this process at escuela@cci-es.org.
Can my company subsidise this training?
Yes, you will be able to subsidise the number of hours included in this training using your training credit through FUNDAE (State Training for Employment Training).
The Centro de Ciberseguridad Industrial is not in charge of the management and processing of your bonus, but we will provide you with all the information and documentation you need so that you can do it.
Prices and enrolment conditions
This workshop has personalised prices for members of the CCI ecosystem. Conditions that allow exclusive benefits and price reductions in the School’s training courses.
- Non-CCI Member: 400€
- Basic Member: 360€
- Professional Member: 340€
- Enterprise Member: 340€
- Platform Member: 320€
Prices do not include VAT or taxes.
FUNDAE subsidised by FUNDAE
Only 15 students per edition