ISA/IEC 62443：2018 工控系統資安認證工程師訓練課程(四日班)

隨著國際及台灣陸續發生工廠遭到病毒入侵的情況，工控系統的資安議題備受關注，
而工控系統安全上建議可參考 IEC 62443此標準，透過風險評鑑、網路分段區隔、防火牆、修補程式管理及入侵檢測等流程，
以及加強人員資安意識（Awareness），有助建立並達成工業自動化及工控系統安全。
 

• 講師是由 IRCA (International Register of Certified Auditors) 認可之資深教師親自授課。
• 本課程的目的是為學員提供ISA/IEC 62443工控系統知識和執行審核所需的技能。
• 為學員提供訓練基礎，成為一個稱職的系統維護及流程應用與開發的角色。

Day1

• Basic introduction of ISA/IEC 62443 Standards(including Cyber Security Certifications in a National / European / International Environment)
• Basic introduction of ISA/IEC 62443 Conformity Assessment Schemes(including ISASecure and IECEE Scheme)
• Basic introduction of IEC System of Conformity Assessment Schemes for Electrotechnical Equipment and Components (IECEE System)
  • Part I: Industrial Cyber Security Program
  • Part II: CB Scheme Test Certificates
• General assessment process for IEC 62443
  • - For IEC 62443-2-4
  • - For IEC 62443-4-1
  • - For IEC 62443-3-3 and IEC 62443-4-2
• IEC 62443 in the future
  • - Concept of protection level
  • - Concept of profile
  • - Standard release in the future

Day2

• Standard introduction of IEC 62443-2-1:2010
  • - Initiate CSMS Program
  • - High-level Risk Assessment
  • - Detailed Risk Assessment
  • - Establish policy, organization and awareness
  • - Select and implement countermeasures
  • - Maintain the CSMS
  • (including relationship between IEC 62443-2-1 and ISO/IEC 27001)
  • (including relationship between IEC 62443-2-1 and IEC 62443-3-2)
• Further discussion of IEC 62443-2-1:2019 (Draft)
  • (including relationship between IEC 62443-2-1 to IEC 62443-2-4, IEC 62443-3-3, IEC 62443-4-2)
• Standard introduction of IEC 62443-2-4:2015
  • - Functional Area: Solution staffing
  • - Functional Area: Assurance
  • - Functional Area: Architecture
  • - Functional Area: Wireless
  • - Functional Area: SIS
  • - Functional Area: Configuration management
  • - Functional Area: Remote access
  • - Functional Area: Event management
  • - Functional Area: Account management
  • - Functional Area: Malware protection
  • - Functional Area: Patch Management
  • - Functional Area: Backup/Restore
  • (including relationship between IEC 62443-2-4 and IEC 62443-3-2)

Day3

• Standard introduction of IEC 62443-4-1:2018
  • - Security Management
  • - Specification of security Requirements
  • - Secure by Design
  • - Secure Implementation
  • - Security Verification and Validation testing
  • - Management of security-related issues
  • - Security Update Management
  • - Security Guidelines
  • (including relationship between IEC 62443-4-1, IEC 62443-3-3 and IEC 62443-4-2)
  • (including relationship between IEC 62443-4-1 and IEC 62443-3-2)
  • (including relationship between IEC 62443-4-1 and ISO/SAE 21434)
• Standard introduction of IEC 62443-3-3:2013 and IEC 62443-4-2:2019
  • - Common constraints (for system/Component)
  • - FR1: Identification and authentication control (IAC)
  • - FR2: Use Control
  • - FR3: System integrity
  • - FR4: Data confidentiality 
  • - FR5: Restricted data flow
  • - FR6: Timely response to events
  • - FR7: Resource availability

Day4

• Exam
• Duration: 13:30 - 16:30 (3 hours)

• 社會新鮮人，提升進入職場之工作能力及工作要求的人。
• 想要增加個人資歷，提升職場工作能力的人。
• 工業控制與工業物聯網之相關部門及專案主管、採購主管、品保主管，品管主管。
• 供應商管理過程管理者。
• 供應商審核員與各部門相關作業人員。
• 希望取得ISA/IEC 62443的企業。

• 04/06-04/08、04/11，台北場