OT Cybersecurity Training in India- Mumbai

Update-The next batch on 27th and 28th November 2025.

Join the IEC 62443 training workshop here.

What is the OT Cybersecurity training in India all about?

Abhisam will be conducting the 8th batch of the popular Instructor led OT Cybersecurity Training in India in Mumbai on 20th and 21st June 2025.

This OT cyber security training workshop is titled “Understanding OT Cybersecurity and IEC 62443”. It will include the published parts of IEC 62443 (with the changed structure) as well as practical hands on exercises including a demo of an attack on a famous brand PLC in a network.

What are OT systems? How are they different from IT systems?

OT stands for Operational Technology. These are computer systems that monitor and control physical objects. They are also known as cyber physical systems. They process data as well as manipulate physical objects. On the other hand IT systems (where IT stands for Information Technology) process only data without having any physical equipment connections.

Examples of OT systems are Industrial Automation & Control Systems (DCS/PLC/SCADA), Ship Steering systems, Port Cranes, Train Control Systems and similar computer connected physical systems. Examples of IT systems include banking, ERP, web service portals, hotel booking systems and similar systems that process only data but are not connected to any physical objects.

The techniques of cybersecurity for OT systems and IT systems are different. OT cybersecurity is also known as Industrial Cybersecurity.

What is included in the OT Cybersecurity Training Workshop?

The Abhisam Understanding OT Cybersecurity and IEC 62443 will include the following. Note that the structure of the IEC 62443 has changed in the recent past. If you have taken any training related to IEC 62443 before the last quarter of the year 2024 then be aware that many things related to the standard have changed.

1. Introduction to Operational Technology (OT) systems.

2. Differences between OT security and IT security.

3. Basic Concepts of OT security- Threats, Vulnerabilities & Attacks

4. Case Study of an OT attack

5. Evaluating OT System architectures for vulnerabilities and weaknesses

6. Overview of different standards & practices related to OT cybersecurity (IEC 62443, NIST 800-82, ISO 27000, NIS 2)

7. Introduction to IEC 62443 & Changed Structure in 2024

8. Overview of following (published) parts of IEC 62443

- - - - IEC 62443-1-1
        
        IEC 62443-2-1 (updated version)
        
        IEC 62443-2-3
        
        IEC 62443-2-4 (updated version)
        
        IEC 62443-3-1
        
        IEC 62443-3-2
        
        IEC 62443-3-3
        
        IEC 62443-4-1
        
        IEC 62443-4-2

9. Carrying out an OT Security Risk Assessment.

10. Tabletop Exercises– Network assessment, partitioning, Red /Blue Team game, Role Play, design Product according to IEC 62443-4-1

11. Hardware Demo: Attacking a branded PLC in a network with Open-Source Tools, manipulating the actual PLC outputs as well as values seen on SCADA/HMI without modifying the PLC program.

Why has OT Cybersecurity training become important?

In the past few years, there have been several cyber attacks on OT Systems. This is because many OT systems are vulnerable to attacks from various kinds of adversaries, who may want to not only steal information like product recipes but also cause destruction to equipment and consequential damages. OT systems are cyber physical systems and an attack may result in fires, explosions, loss of containment, injuries to people, damage to assets in addition to theft of information.

Many of these attacks are not reported in the media at all.

People who work with OT systems such as Industrial Automation & Control Systems (whether DCS/PLC/SCADA) or similar cyber physical systems such as Ship Steering systems, Port Cranes, Train Control Systems and must be well trained in securing these systems, to protect them as well as the connected equipment from being damaged.

Furthermore if you have attended any IEC 62443 training earlier than Q3 of the year 2024, you need to be aware that the structure of the standard has changed. Here is a picture of the new standard. You need to keep yourself updated and the best way is to attend this training.

IEC 62443 infographic — IEC 62443 changes

Who should attend this OT Cybersecurity training?

Any technical professional who has some work experience in working with any IT system or OT system can attend. Participants should have a basic understanding of computers, networking and preferably be familiar with typical industrial operations. Some typical attendee profiles are:

* Instrumentation & Industrial Automation, Control System Professionals from any industry

* IT Heads (CIOs) from manufacturing or Critical Infrastructure, Marine Transportation, Defense, Manufacturing, Oil & Gas, Chemicals or similar organizations having cyber-physical systems.

* IT Cybersecurity Professionals including CISOs who wish to understand OT security in more detail.

* IT Cybersecurity Auditors

* Smart OT Device Developers & Evaluators

* OT related Software & application developers

* Process Safety Professionals

* Industrial Plant or Process Engineers, Plant Managers

* Electrical Engineers involved in Electrical SCADA/ Electrical Grid/ Distribution/Load Dispatch/ Sub stations

* Government Regulatory authorities

* Cybersecurity Management consultants

Who has attended these workshops earlier?

Previous workshops have been attended by people from marquee organizations such as Schneider, Thyssenkrupp, Worley, GACL, Toyo Engineering, DRDO, ISRO, Bharat Electronics, Deloitte and many others.