|
所在平台: Udemy |
课程主页: https://www.udemy.com/course/learn-ot-security-nist-csf-framework/
课程评论:没有评论
课程名称:学习NIST800-82风险管理框架OT安全第二部分 课程概述:在本课程中,参与者将深入了解NIST框架的五个核心功能:识别、保护、检测、应对和恢复,特别关注OT安全领域的独特挑战和解决方案。本课程是《ICS/OT网络安全全能课程》的续集,按照NIST更新的第3版进行,但也可以单独学习。 主要内容: 1. **识别**:重点关注资产管理、治理、风险评估、风险管理策略和供应链风险管理。您将学习如何创建资产的完整清单并有效管理相关风险。 2. **保护**:接下来,我们深入研究身份管理和访问控制、意识与培训、数据安全等关键领域,包括信息保护流程和程序、维护、保护技术,以及人员安全的细微差别。本部分将使您具备加强OT环境抵御潜在威胁的技能。 3. **检测**:在此部分,我们覆盖异常和事件、安全持续监测和检测流程。您将培养识别网络安全事件的专业知识,确保能够及时介入。 4. **应对**:在这个关键阶段,我们讨论应对计划、沟通、分析、缓解和改进。学习者将接受制定和执行有效应对策略的培训,以最小化网络安全事件的影响。 5. **恢复**:最后,课程强调恢复计划、改进和沟通。您将学习如何在事件后恢复和改善系统,确保操作的弹性和连续性。 无论您是希望提升专业知识,还是想转向OT安全领域,本课程都提供了您成功所需的知识和技能。加入我们,导航OT安全的复杂性,深入理解如何有效应用NIST 800-82风险管理框架,为关键基础设施和工业系统的韧性未来奠定基础。
In this course, participants will gain a deep understanding of the five pivotal functions of the NIST framework: Identify, Protect, Detect, Respond, and Recover, with a special focus on the unique challenges and solutions in the OT security domain. This course is the continuation of ICS/OT Cybersecurity All in One as per the NIST Updated Rev 3 course, but can be done individually as well.Identify: We focus on Asset Management, Governance, Risk Assessment, Risk Management Strategy, and Supply Chain Risk Management. You'll learn how to create a comprehensive inventory of your assets and manage the associated risks effectively.Protect: Next, we delve into Identity Management and Access Control, Awareness and Training, Data Security, and several other key areas including Information Protection Processes and Procedures, Maintenance, Protective Technology, and the nuances of Personnel Security, among others. This section equips you with the skills to fortify your OT environment against potential threats.Detect: Moving on, we cover Anomalies and Events, Security Continuous Monitoring, and Detection Processes. Here, you'll develop the expertise to identify cybersecurity events, ensuring timely intervention swiftly.Respond: In this crucial phase, we discuss Response Planning, Communications, Analysis, Mitigation, and Improvements. Learners will be trained on crafting and executing effective response strategies to minimize the impact of cybersecurity incidents.Recover: Lastly, the course emphasizes Recovery Planning, Improvements, and Communications. You'll learn how to restore and improve systems post-incident, ensuring resilience and continuity of operations. Whether you're looking to enhance your expertise or pivot into the OT security field, this course offers the knowledge and skills you need to succeed.Join us to navigate the complexities of OT security and emerge with a robust understanding of how to apply the NIST 800-82 Risk Management Framework effectively. Secure your place in shaping a resilient future for critical infrastructure and industrial systems.