CompTIA SecOT+

Understand the fundamentals of OT environments, including IT/OT convergence, PLCs, HMIs, SCADA systems, distributed control systems, control logic, set points, I/Os, timers, process variables, and control languages. Learn how serial, Ethernet, and wireless OT protocols, including Modbus, DNP3, BACnet, and Profinet, operate, and compare legacy, embedded, modern, virtualized, cloud, and edge infrastructure. This module also covers OT safety practices, including lockout/tagout, PPE, hazard identification, and safety-first operational priorities.

Learn how to align OT security with operational continuity, safety, compliance, and business objectives. This module covers risk assessments, risk registries, risk variables, scoping, control selection, and risk treatment. It also addresses cybersecurity program management, maturity assessments, roadmaps, RACI models, SLAs, training, documentation, audits, reporting, escalation, risk disposition, and structured change management.

Explore OT-specific threat actors, attack vectors, vulnerabilities, tactics, techniques, and procedures (TTPs). Learn to apply threat-intelligence frameworks, including the Diamond Model, MITRE ATT&CK, and the Cyber Kill Chain. This module examines indicators of compromise (IoCs), threat feeds, information-sharing channels, and lessons from major industrial cyber incidents, including Stuxnet and Industroyer.

Develop secure, resilient, and auditable OT architectures using segmentation, defense in depth, least privilege, interoperability, and compartmentalization. Learn to apply physical access controls, surveillance, barriers, and inspections; hardware controls such as secure boot, TPM, firmware updates, port management, backups, and tamper protection; and host and application controls including endpoint protection, host access controls, OS benchmarks, code signing, and patching. The module also covers identity and access management, account governance, MFA, PKI, directory services, encryption, IDS/IPS, secure remote access, and secure network design.

Build practical skills in OT asset and software inventory, discovery processes, configuration management, security monitoring, log analysis, SIEM, SOAR, and threat hunting. Learn to identify, validate, triage, prioritize, and verify vulnerabilities using multiple data sources, while accounting for OT operational constraints. This module covers remediation planning, patching, testing, coordination, implementation, and validation, as well as authorization and validation for removable media, mobile devices, and external devices.

Learn to prepare for and respond to OT incidents while protecting safety, availability, and operational continuity. This module covers incident-response planning, playbooks, exercises, triage, evidence handling, containment, recovery, root-cause analysis, and reporting. It also addresses the PICERL model, ICS4ICS framework, cyber-physical incident response, integration of cybersecurity and physical response, escalation and notification, mutual aid, system and network baselines, log analysis, deviation detection, and mandatory reporting requirements.