Cybersecurity Revolution: SANS Launches Groundbreaking OT Penetration Testing Course
Summary
- Debut Course: SANS Institute launches ICS613, an OT penetration testing course focused on critical infrastructure.
- Hands-On Training: The course teaches practical skills for protecting operational technology.
- Target Audience: Aimed at both professionals already in cybersecurity and those looking to specialize in OT security.
- Industry Challenges: OT attacks are rising, and so is demand for specialized training.
- Expert Guidance: Instructors with field experience teach from real cases.
SANS adds an OT pentesting course
The SANS Institute has launched ICS613, a penetration testing course for operational technology (OT). It is meant to give security professionals the skills to test and secure critical infrastructure, as attacks on OT environments become more frequent and more sophisticated.
The Emergence of OT Cyber Threats
Rising Vulnerabilities in Critical Infrastructure
The line between Information Technology (IT) and Operational Technology keeps blurring, and that creates new weak points in infrastructure society depends on. Attacks on OT in energy, water and manufacturing are rising. A successful OT breach can have physical consequences, which is why practitioners need specialized skills.
ICS613: Equipping Cyber Defenders
What Makes ICS613 Unique?
ICS613 focuses on hands-on work. Students practice on realistic scenarios and build plans for responding to OT attacks. The emphasis on practical application is meant to turn theory into skills they can use on the job.
Start your morning with the signal that matters.
Weekday mornings. Five minutes. What changed in security, why it matters.
By subscribing you agree to our Privacy Policy.
Free. Weekday mornings. 5 minutes or less.
Tailored for Professionals and Aspiring Specialists
The course is built for two groups: experienced professionals who want to deepen their OT security skills, and newcomers who want to enter the field. The curriculum runs from basic concepts to advanced techniques, taught by experienced instructors.
Challenges and Opportunities in OT Cybersecurity
A Growing Demand for Expertise
Demand for skilled OT security professionals keeps outpacing supply. Organizations around the world face threats that require specialized knowledge, and the gap between risk and available expertise is widening. For people willing to specialize, that shortage means real career opportunities.
Adapting to a Dynamic Threat Landscape
OT security changes fast. ICS613 tries to keep up by teaching current tools and methods, and by training students to anticipate attacks instead of only reacting to them.
Start your morning with the signal that matters.
Weekday mornings. Five minutes. What changed in security, why it matters.
By subscribing you agree to our Privacy Policy.
Free. Weekday mornings. 5 minutes or less.
Who should take ICS613
As IT and OT systems merge, OT security matters more for national security. ICS613 is SANS’s attempt to close part of the skills gap, and it gives professionals a structured way into the field. Attacks on critical sectors are rising. For defenders who want to move into OT, now is a good time to start, and ICS613 is one clear option.
Newer CyberExperts coverage on this topic
This article still works as background. If you want the current picture, start with the freshest related coverage below and today's brief.
Citrix NetScaler CVE-2026-19490: The Auth Bypass That Went From PoC to Probes in a Day
CVE-2026-19490 is a CVSS 9.3 NetScaler Gateway/AAA auth bypass. A public PoC on Sept 2 was followed by live probes within a...
PaperCut NG/MF: The Print Server That Learned Remote Code Execution Again
CVE-2026-81578 and CVE-2026-82078 chain to pre-auth RCE on PaperCut Application Server. Confirm Emergency Patch Release 2, restrict admin exposure, and hunt like...
JFrog Artifactory CVE-2026-82329: Empty Join Key, Full Admin Token, Busy Scanners
CVE-2026-82329 lets attackers forge Artifactory admin tokens via a deterministic empty join key. Mass scanning peaked near 406,000 attempts; patch fixed builds...
Friday’s brief: Apache’s HTTP/2 fix, then Check Point break-ins, a ScreenConnect add-on and a GitHub secret stealer
The fastest way to catch up on what changed after this article was published.
Start your morning with the signal that matters.
Get the biggest cybersecurity developments, why they matter, and where to go deeper on CyberExperts.
By subscribing you agree to our Privacy Policy.
Free. Weekdays. Built for operators.