Do I need a PLC background?

It helps for the PLC hardening course. ICS Security Foundations starts from the basics.

Is IEC 62443 covered?

Yes, in depth in the IEC 62443 course and applied in the PLC, BMS and assessment courses.

How is OT security different from IT security?

Availability and safety come first, and many plant systems cannot be patched or scanned the way office systems are.

Is it free, and is there a certificate?

Every lesson, note and assessment is free. The EDWartens certificate is optional and paid, and it is not an ISA or IEC certification.

Category · Free · No card

Free OT and ICS security courses with certificate

Free OT and ICS cybersecurity courses for engineers and security staff: ISA/IEC 62443, defence in depth, hardening Siemens and Rockwell PLCs, securing BMS and BACnet, and assessing a live plant without stopping it.

Browse all free courses

5 courses · 57 modules · 67h 29m of video · Updated 27 September 2026

FreeCybersecurityBeginner

ICS Security Foundations: Control Systems, Defence in Depth and the 62443 Requirements

The ground floor of industrial cyber security, taught through the systems themselves: what a DCS, PLC, SCADA, BACS and safety system actually do, the Purdue model, why OT is not IT, how industrial attacks unfold, defence in depth and a layered architecture, then the seven ISA/IEC 62443 foundational requirements one at a time, asset registers, segmentation, discovery, IDS and IPS, secure remote access, SIEM and endpoint protection.

Tell a DCS, PLC, SCADA, BACS and safety system apart
Place any device on a Purdue level and defend the choice
Explain why an IT security policy cannot be applied to a plant

11 modules 4h 46mView course

FreeCybersecurityIntermediate

OT and ICS Cybersecurity with ISA/IEC 62443

Defensive cybersecurity for plants: ICS/OT fundamentals and threats, protocols, the Purdue model, zones and conduits, secure architecture, the ISA/IEC 62443 series, security levels, risk assessment, asset inventory, vulnerability management, incident response, governance, implementation, an introduction to authorised OT testing and certification mock tests.

Explain OT versus IT security and the threat landscape
Map plants with the Purdue model into zones and conduits
Apply ISA/IEC 62443 parts, roles and security levels

16 modules 43h 50mView course

FreeCybersecurityIntermediate

OT Security Assessment: Testing a Plant Without Stopping It

The assessment half of OT security, for engineers who have to do it on a plant that is running. Rules of engagement first, then passive capture, careful enumeration, what an attacker does with a protocol that has no authentication, the Windows machines nobody mentions, the logging that would have caught it, and a report written in the language of consequence.

Write rules of engagement with a window, a named owner and an abort condition, for a plant that cannot stop
Draw the zones yourself and test each conduit from the side it is meant to protect
Capture and read ICS traffic in Wireshark, tshark and Zeek before sending a single packet

12 modules 8h 50mView course

FreeCybersecurityIntermediate

Cybersecurity for PLC Programmers: Hardening Siemens and Rockwell Controllers

Harden the PLCs you already program: Siemens access levels, know-how, copy and project protection, secure communication and users, Rockwell source protection, CIP Security and zones, and the Top 20 Secure PLC Coding Practices, from the people who wrote them.

Explain how controllers are attacked and which controls break each step
Set Siemens access levels and use the TIA Portal security wizard
Apply know-how, write, copy and project protection

9 modules 4h 51mView course

FreeCybersecurityIntermediate

Cybersecurity for Building Automation: BMS and BACnet

Secure the building management systems you design, install or run: real building hacks, BMS network architecture and its weak points, hardening controllers and front ends, secure design with zones and conduits, BACnet Secure Connect, defence in depth for BACnet/IP, secure vendor remote access and zero trust.

Explain how buildings have been hacked and why a BMS can be a way into the business
Describe BMS architecture and find the weak points in BACnet, Modbus and MS/TP networks
Harden controllers, servers and accounts in the building's priorities

9 modules 5h 12mView course

Compare the OT and ICS security courses

Course	Level	Modules	Video	Brand
ICS Security Foundations: Control Systems, Defence in Depth and the 62443 Requirements	Beginner	11	4h 46m	Vendor-neutral
OT and ICS Cybersecurity with ISA/IEC 62443	Intermediate	16	43h 50m	Vendor-neutral
OT Security Assessment: Testing a Plant Without Stopping It	Intermediate	12	8h 50m	Vendor-neutral
Cybersecurity for PLC Programmers: Hardening Siemens and Rockwell Controllers	Intermediate	9	4h 51m	Vendor-neutral
Cybersecurity for Building Automation: BMS and BACnet	Intermediate	9	5h 12m	Vendor-neutral

How to choose

Start with ICS Security Foundations if OT security is new to you, then OT/ICS Cybersecurity with IEC 62443 for zones, conduits, security levels and risk assessment.

PLC programmers should take Cybersecurity for PLC Programmers; BMS and facilities engineers, Building Automation Cybersecurity. OT Security Assessment is for the person asked to assess a running plant.

Questions

Do I need a PLC background?: It helps for the PLC hardening course. ICS Security Foundations starts from the basics.
Is IEC 62443 covered?: Yes, in depth in the IEC 62443 course and applied in the PLC, BMS and assessment courses.
How is OT security different from IT security?: Availability and safety come first, and many plant systems cannot be patched or scanned the way office systems are.
Is it free, and is there a certificate?: Every lesson, note and assessment is free. The EDWartens certificate is optional and paid, and it is not an ISA or IEC certification.