Cybersecurity Revolution: SANS Launches Groundbreaking OT Penetration Testing Course

By Dan Evert, CCNP   Published: 05/20/25   Updated: 10/29/26   3 min read

Cybersecurity Revolution: SANS Launches Groundbreaking OT Penetration Testing Course

Summary

SANS adds an OT pentesting course

The SANS Institute has launched ICS613, a penetration testing course for operational technology (OT). It is meant to give security professionals the skills to test and secure critical infrastructure, as attacks on OT environments become more frequent and more sophisticated.

The Emergence of OT Cyber Threats

Rising Vulnerabilities in Critical Infrastructure

The line between Information Technology (IT) and Operational Technology keeps blurring, and that creates new weak points in infrastructure society depends on. Attacks on OT in energy, water and manufacturing are rising. A successful OT breach can have physical consequences, which is why practitioners need specialized skills.

ICS613: Equipping Cyber Defenders

What Makes ICS613 Unique?

ICS613 focuses on hands-on work. Students practice on realistic scenarios and build plans for responding to OT attacks. The emphasis on practical application is meant to turn theory into skills they can use on the job.

Tailored for Professionals and Aspiring Specialists

The course is built for two groups: experienced professionals who want to deepen their OT security skills, and newcomers who want to enter the field. The curriculum runs from basic concepts to advanced techniques, taught by experienced instructors.

Challenges and Opportunities in OT Cybersecurity

A Growing Demand for Expertise

Demand for skilled OT security professionals keeps outpacing supply. Organizations around the world face threats that require specialized knowledge, and the gap between risk and available expertise is widening. For people willing to specialize, that shortage means real career opportunities.

Adapting to a Dynamic Threat Landscape

OT security changes fast. ICS613 tries to keep up by teaching current tools and methods, and by training students to anticipate attacks instead of only reacting to them.

Who should take ICS613

As IT and OT systems merge, OT security matters more for national security. ICS613 is SANS’s attempt to close part of the skills gap, and it gives professionals a structured way into the field. Attacks on critical sectors are rising. For defenders who want to move into OT, now is a good time to start, and ICS613 is one clear option.

Stay Current

Newer CyberExperts coverage on this topic

This article still works as background. If you want the current picture, start with the freshest related coverage below and today's brief.

Latest Daily Brief

Friday’s brief: Apache’s HTTP/2 fix, then Check Point break-ins, a ScreenConnect add-on and a GitHub secret stealer

The fastest way to catch up on what changed after this article was published.

Read Today's Brief

Dan Evert, CCNP

Dan Evert is a self proclaimed Router Jockey. Dan got heavily involved in networking right out of high school and has never looked back! Dan is giving back by working with high school students to get them involved and interested in Networking and Security.