NotPetya arrived inside a mandatory tax software update. Within hours, Maersk lost 45,000 workstations and 4,000 servers across one flat network. Chapter 7 shows which security program elements were missing.
“ICS/OT Cybersecurity Fundamentals”
How to Secure the Industrial Systems You Answer For, Without Becoming a Hacker or Breaking the Process
1111. In November 2023, that factory default password let a group tied to Iran's Revolutionary Guard into industrial controllers at US water utilities. Chapter 10 explains why default passwords survive commissioning, and Appendix A gives you the worksheet that finds them.
Built on public sources: the IEC 62443 series, the NIST Cybersecurity Framework, MITRE ATT&CK for ICS, and published incident reports
Three Incidents the Book Takes Apart
Each one traced to the control that would have changed the outcome
A German steel mill lost control of a blast furnace after an attack that began with email to the office. Chapter 8 names the three detection gaps that were open at the same time.
Engineers at energy sites downloaded an update from their vendor's official website. It installed a reconnaissance tool. Chapter 13 shows how IEC 62443 judges the vendors and service providers you already trust.
What You'll Learn in this Book
Thirteen chapters in five parts, from what a PLC actually does to an IEC 62443 risk assessment, plus 22 printable reference cards and worksheets
- What PLCs, HMIs, SCADA, DCS, RTUs and historians actually do, and where each one sits in the five Purdue levels
- Why a plant puts safety and availability ahead of confidentiality, and which IT habits that rules out
- How industrial protocols work, why Modbus has no authentication, and what normal OT traffic looks like
- The five beliefs that leave plants exposed, and the seven layers of defense in depth
- How to design zones, conduits and security levels, worked through on a complete SCADA example
- What an OT security program needs: the lifecycle, the eight program elements, maturity, and what regulation actually makes mandatory
- How to see and detect on a network you must not scan: passive monitoring, MITRE ATT&CK for ICS, and patching without stopping production
- Which firewalls, data diodes and DMZ designs hold, and why one gate with no depth fails
- Remote access that holds up: jump servers, MFA in field conditions, vendor sessions, default credentials and wireless
- The IEC 62443 risk assessment workflow, from the system under consideration to security level targets, and how to judge vendors against the 12 service provider areas
Everything You Get for $19.99
The book, a printable toolkit for your site, and both formats
The Book: Value $19.99
ICS/OT Cybersecurity Fundamentals, 13 Chapters
Five parts, from what a PLC actually does to an IEC 62443 risk assessment. Every chapter closes with questions about your own environment: which connections make you uncomfortable, where the IT and OT boundary sits, what you could answer from your logs today. Use them alone, or take one chapter a week to a team meeting.
The Toolkit: Value $49
22 Printable Reference Cards, Checklists and Worksheets
The zone and conduit design checklist, the OT DMZ design checklist, the secure remote access controls checklist, the default credential audit worksheet, the ICS risk assessment worksheet, the zone security level gap analysis worksheet, and sixteen more. Every one is reproduced in Appendix A, and all 22 come as full-size printable PDFs in one download. Each page names the chapter it comes from.
Both Formats: Included in the Book Price
PDF and EPUB, Both Yours
Search the PDF on your laptop when a question comes up in a design review. Read the EPUB on a phone, a tablet or an e-reader on the way to site. In the EPUB, tap any diagram to open it full screen.
Total value: $68.99. Your price today: $19.99, one payment.
You're Covered By Our 30-Day Money-Back Guarantee
Read it for 30 days. If the book is not what you needed, for any reason, write to us through the Contact page within 30 days of your order and we refund you in full. No questions, no conditions. The risk is ours.
Read the Refund Policy and Terms and Policies.
Who Wrote It
HK School of Management
HK School of Management trains the people who run, maintain and protect industrial systems, along with project managers and delivery teams. On the industrial side we teach ICS/OT Cybersecurity Fundamentals, OT Incident Drills and Exercises, and the free Industrial Control Systems Introduction.
This book covers the same ground as our ICS/OT Cybersecurity Fundamentals video course, in a form you can keep on the desk and search when a real question lands.
Get the Book and the 22 Printables for $19.99
Total value $68.99. Yours today for $19.99. Covered by our 30-day money-back guarantee.