Learn to secure both enterprise IT and industrial OT/ICS systems — network segmentation, the Purdue model, risk assessment, identity and access management, cryptography, IEC 62443, the NIST Cybersecurity Framework, vulnerability management, incident response, and NERC CIP compliance.
18 modules in 5 phases, with worked examples, interactive tools, labs and a quiz in every one, and a certificate of completion.
Compare detection results and document false-alarm trade-offs.
Meridian Fastener Works operates a single mid-size manufacturing plant producing precision fasteners for automotive and aerospace customers: three CNC machining cells, an automated heat-treat line, a robotic packaging cell, a wastewater pretreatment skid required by the local discharge permit, and a warehouse with barcode-driven WMS terminals. The plant's OT network was built the way most brownfield plants are built…
Selected training excerpt, not a complete design or a project submission. The full project includes its assumptions, methods and checks.
Build your own phase-by-phase workbook, record the evidence behind your decisions and download your work.
Review a set of flagged cases. Change the number of correct detections and false alarms to compare precision.
Precision = true positives ÷ (true positives + false positives) × 100
A small illustrative evaluation set; production decisions also need recall, representative data and cost/risk analysis. This free exercise does not mark a paid module complete.
Related full-program tool: Vlan Segmentation lab →Choose a phase to explore its lessons and project work.
Start with the free lesson →Covers Cybersecurity Fundamentals for Industrial & Enterprise Systems, Network Security Fundamentals, The Purdue Model & OT Network Segmentation, Risk Assessment & Threat Modeling, Identity & Access Management and Cryptography Fundamentals.
CIA triad, threat landscape, IT vs. OT security, and the scope of this program.
Firewalls, VLANs, DMZs, and network segmentation basics.
The 5-level Purdue model, zones and conduits, and industrial DMZs.
Asset inventory, risk registers, and threat modeling for critical systems.
Authentication, authorization, least privilege, and role-based access control.
Symmetric/asymmetric encryption, hashing, PKI, and TLS basics.
Project checkpoint: Record the assumptions, calculations and evidence behind this phase’s outcome in your project workbook.
Covers ISA/IEC 62443 Fundamentals, Vulnerability Management, Cloud & Remote Access Security and Security Monitoring & SIEM.
The IEC 62443 series structure, security levels, and zones/conduits model.
Scanning, patch management, and vulnerability lifecycle for OT constraints.
Secure remote access to OT, cloud connectivity risks, and VPN/jump-host patterns.
Log aggregation, SIEM basics, and anomaly detection for OT/IT environments.
Project checkpoint: Record the assumptions, calculations and evidence behind this phase’s outcome in your project workbook.
Covers NIST Cybersecurity Framework 2.0, Incident Response Planning and NERC CIP Compliance Basics.
The 6 CSF functions (Govern, Identify, Protect, Detect, Respond, Recover).
IR lifecycle, playbooks, and OT-specific incident response challenges.
NERC CIP standards overview for bulk electric system cybersecurity.
Project checkpoint: Record the assumptions, calculations and evidence behind this phase’s outcome in your project workbook.
You apply what you have learned to 3 complete designs, starting with Real Project: Manufacturing Plant Network Segmentation.
Segmenting a manufacturing plant per the Purdue model and IEC 62443 zones.
Hardening a municipal water utility SCADA system against common attack vectors.
Building a full incident response plan for a mid-size enterprise.
Project checkpoint: Record the assumptions, calculations and evidence behind this phase’s outcome in your project workbook.
Covers Documentation & Resource Kit and Practice & Certification.
A downloadable kit of real project templates.
A final capstone assignment and your certificate of completion.
Project checkpoint: Record the assumptions, calculations and evidence behind this phase’s outcome in your project workbook.
By the end: Covers Cybersecurity Fundamentals for Industrial & Enterprise Systems, Network Security Fundamentals, The Purdue Model & OT Network Segmentation, Risk Assessment & Threat Modeling, Identity & Access Management and Cryptography Fundamentals.
Security evaluation workbook: Compare detection results and document false-alarm trade-offs. Keep a result and a verification note for each phase.
Your All-Access includes the project workbook, lesson notes, self-review checklists and portfolio downloads. Try the free lesson above to see a worked example.
Your name
Industrial & Enterprise Cybersecurity Professional ProgramEngineersUniverse · self-paced learning
Finish all required module quizzes to unlock your certificate of completion. Modules with a score requirement must meet that requirement. Your project portfolio and skills summary are separate downloads for your own learning record.
A certificate of completion is not a professional license or accreditation.
A kit of real project templates — an asset inventory and risk register worksheet, a network segmentation and zones/conduits diagram checklist, an incident response plan and playbook template, a vulnerability management tracking sheet, an access control and least-privilege review worksheet, and a NIST CSF self-assessment checklist. Available for download from Module 15 (Documentation & Resource Kit) once you've unlocked the program.