CB1

Cybersecurity of automation systems – SCADA under protection – level 1

3 days, 21 hours Duration

Training mode

Open training

Course level

CB1

Prerequisites

General technical knowledge, basic knowledge of automation systems and networking issues.

Course Objective

Course objective:

How ETHERNET works
How to ensure cybersecurity of industrial networks
How to monitor your IDS network infrastructure

Course program

day 1

Introduction to industrial networks.

How does an ETHERNET network work?
ISO/OSI network model.
Ethernet communication – the basics.
Layer 3 (L3) communication.
Transport layer (L4) protocols.
Application layer (L7) protocols.

day 2

How to ensure cybersecurity of industrial networks?

Introduction – basic information.
- Overview of vulnerabilities and sources of threats.
- Standards, good practices, security policies (Defense in depth, NIST, IEC 62443, Incident response).
- Inventory is the basis of security.
- Security audits - network security examination.
- Secure transmission.
Passive protection – how to monitor a SCADA network.
- Basic issues (SOC, SIEM, SOAR, IDS, Honeypot).
- IDS – a key SCADA network monitoring system.
Active protection – How to protect control systems, i.e. PLCs under protection?
- Basic issues (Defense in Depth concept, Cyber Killchain).
- Technologies used (Firewall, IPS, Data Diode, NG Firewall, DPI Firewall).
- DPI Firewall – protection of PLC and HMI controllers.

day 3

Monitoring network infrastructure IDS system - practical workshops.

1. Monitoring system architecture.
2. Introduction to the IDS system interface.

Dashboard, alarms, inventory, reporting, security rules, etc.

Case study.
- Identification of a new device on the network.
- Detection of active network reconnaissance.
- Identification of an incorrect command of the selected protocol (e.g. Modbus, S7+, PROFINET).
- Man in the middle attack.
- Malware detection.
- Creating security policies.
  - Detection of unauthorized query for driver register value.
  - Detection of unauthorized change to registry parameters.
Summary.

Laboratory equipment

The training rooms and laboratories are air-conditioned, large, and spacious. Student workstations are specially equipped.

Each training participant has at their disposal a station intended for learning and solving tasks based on industrial ETHERNET communication networks.

The sets enable the creation of extensive networks and allow for the performance of tasks and exercises on a wide range of topics.

NO Online

Open training Training mode

YES Certificate

Gliwice,
EMT-Systems Headquarters Training location See the map

4700 PLN(net) +23% VAT

Ask about training

Card payment

Online

In installments 0%

Najbliższe terminy kursu

See more dates

Haven't found a date? We offer closed training,
with an individual deadline,
cost, place and program. Ask about the course

Training objectives

After completing the training, the participant:

How ETHERNET works
How to ensure cybersecurity of industrial networks
How to monitor your IDS network infrastructure

Training partner:

Check the course dates

Rok 2026

Sierpień 2026

Pn	Wt	Śr	Cz	Pt	So	Nd
					1	2
3	4	5	6	7	8	9
10	11	12	13	14	15	16
17	18	19	20	21	22	23
24	25	26	27	28	29	30
31

Wrzesień 2026

Pn	Wt	Śr	Cz	Pt	So	Nd
	1	2	3	4	5	6
7	8 Cyberbezpieczeństwo systemów automatyki – SCADA pod ochroną – poziom 1 8 – 10 września 2026 Zgłoś udział	9 Cyberbezpieczeństwo systemów automatyki – SCADA pod ochroną – poziom 1 8 – 10 września 2026 Zgłoś udział	10 Cyberbezpieczeństwo systemów automatyki – SCADA pod ochroną – poziom 1 8 – 10 września 2026 Zgłoś udział	11	12	13
14	15	16	17	18	19	20
21	22	23	24	25	26	27
28	29	30

Październik 2026

Pn	Wt	Śr	Cz	Pt	So	Nd
			1	2	3	4
5	6 Cyberbezpieczeństwo systemów automatyki – SCADA pod ochroną – poziom 1 6 – 8 października 2026 Zgłoś udział	7 Cyberbezpieczeństwo systemów automatyki – SCADA pod ochroną – poziom 1 6 – 8 października 2026 Zgłoś udział	8 Cyberbezpieczeństwo systemów automatyki – SCADA pod ochroną – poziom 1 6 – 8 października 2026 Zgłoś udział	9	10	11
12	13	14	15	16	17	18
19	20	21	22	23	24	25
26	27	28	29	30	31

Listopad 2026

Pn	Wt	Śr	Cz	Pt	So	Nd
						1
2	3 Cyberbezpieczeństwo systemów automatyki – SCADA pod ochroną – poziom 1 3 – 5 listopada 2026 Zgłoś udział	4 Cyberbezpieczeństwo systemów automatyki – SCADA pod ochroną – poziom 1 3 – 5 listopada 2026 Zgłoś udział	5 Cyberbezpieczeństwo systemów automatyki – SCADA pod ochroną – poziom 1 3 – 5 listopada 2026 Zgłoś udział	6	7	8
9	10	11	12	13	14	15
16	17	18	19	20	21	22
23	24	25	26	27	28	29
30

Grudzień 2026

Pn	Wt	Śr	Cz	Pt	So	Nd
	1	2	3	4	5	6
7	8 Cyberbezpieczeństwo systemów automatyki – SCADA pod ochroną – poziom 1 8 – 10 grudnia 2026 Zgłoś udział	9 Cyberbezpieczeństwo systemów automatyki – SCADA pod ochroną – poziom 1 8 – 10 grudnia 2026 Zgłoś udział	10 Cyberbezpieczeństwo systemów automatyki – SCADA pod ochroną – poziom 1 8 – 10 grudnia 2026 Zgłoś udział	11	12	13
14	15	16	17	18	19	20
21	22	23	24	25	26	27
28	29	30	31

Training hours

day 19:00 – 16:00

day 29:00 – 16:00

day 39:00 – 16:00

By requirements

General technical knowledge, basic knowledge of automation systems and networking issues.

Training program

1. Introduction to industrial networks.

How does an ETHERNET network work?
ISO/OSI network model.
Ethernet communication – the basics.
Layer 3 (L3) communication.
Transport layer (L4) protocols.
Application layer (L7) protocols.

1. How to ensure cybersecurity of industrial networks?

Introduction – basic information.
Overview of vulnerabilities and sources of threats.
Standards, good practices, security policies (Defense in depth, NIST, IEC 62443, Incident response).
Inventory is the basis of security.
Security audits - network security examination.
Secure transmission.
Passive protection – how to monitor a SCADA network.
Basic issues (SOC, SIEM, SOAR, IDS, Honeypot).
IDS – a key SCADA network monitoring system.
Active protection – How to protect control systems, i.e. PLCs under protection?
Basic issues (Defense in Depth concept, Cyber Killchain).
Technologies used (Firewall, IPS, Data Diode, NG Firewall, DPI Firewall).
DPI Firewall – protection of PLC and HMI controllers.

1. Monitoring network infrastructure IDS system - practical workshops.

Monitoring system architecture.
Introduction to the IDS system interface.

2. Dashboard, alarms, inventory, reporting, security rules, etc.

Case study.
Identification of a new device on the network.
Detection of active network reconnaissance.
Identification of an incorrect command of the selected protocol (e.g. Modbus, S7+, PROFINET).
Man in the middle attack.
Malware detection.
Creating security policies.
Detection of unauthorized query for driver register value.
Detection of unauthorized change to registry parameters.
Summary.

Who is the training for?

IT Department

Security Department

Automation department of manufacturing companies

Certificate

After completing the training, each participant receives a bilingual, personal certificate descriptively confirming the acquired skills in accordance with the system implemented at EMT-SYSTEMS Sp. z o.o. quality management PN-EN ISO 9001:2015, supervised and certified by TUV Nord Poland.

Opinions

Nothing speaks volumes about the value of a training program better than the opinions of those who have already participated. Check out our participants' reviews – find out what they appreciated most, what results they achieved, and why they recommend it to others.

Our laboratory

The training rooms and laboratories are air-conditioned, large, and spacious. Student workstations are specially equipped.

Each training participant has at their disposal a station intended for learning and solving tasks based on industrial ETHERNET communication networks.

The sets enable the creation of extensive networks and allow for the performance of tasks and exercises on a wide range of topics.

Learn more

Hardware and software used

Information

The workshops are conducted using an advanced simulator that reflects the industrial environment, including its components such as SCADA, PLC, HMI, servers, engineering and operator stations, etc., as well as any cybersecurity threats that may threaten industrial infrastructure.

Confirmation of cooperation

FORGLASS Sp. z o. o.

MELLARIUS Integration and Training Michał Bartnik

technical inspection authority

Opinions

7+ positive reviews

Zeno,

Verified opinion

Great atmosphere, lots of up-to-date knowledge and examples, I recommend it to people dealing with security issues in industrial networks.

Wojciech, Kwidzyn

Verified opinion

The instructor's knowledge and experience are the greatest strengths of this training. I've never participated in a theoretical training session where knowledge was conveyed in such an engaging way.

Oscar, Szczecin

Verified opinion

The instructor's in-depth knowledge of current industry topics for IT and OT. Knowledge of regulations and the ability to analyze and present case studies proposed by students.

Jakub, Tarnobrzeg

Verified opinion

A wide range of knowledge. The opportunity to discuss real-life issues. Contact with the instructor regarding unanswered questions. Excellent location conditions. Access to a good buffet and free coffee. A wide range of training material.

Paul, Stalowa Wola

Verified opinion

The EMT training ignited my interest in self-development, improving my skills, and gaining knowledge. I'd love to participate in future training sessions (ideally all of them). :)

, Anonymous

Verified opinion

I recommend this training to IT professionals working in network security. I especially appreciated the way the training was prepared and delivered, including the presentations.

, Anonymous

Verified opinion

I highly recommend this training to anyone working with industrial networks. I enjoyed the illustrations with specific attack examples.