The Cyber Scheme launches course for IoT/ICS security testers

The Cyber Scheme has launched a new CSII Practitioner Training Course, specifically designed as a detailed IoT/ICS hacking course. This course aims to equip participants with the necessary skills for conducting secure tests and assessments on connected systems and devices across consumer, industrial, and critical infrastructure settings. Targeted at beginner to intermediate security professionals, including engineers, technicians, analysts, or penetration testers, the course is structured to impart knowledge essential for understanding, identifying, and addressing vulnerabilities within IoT or OT environments.

Delivered in-person, the curriculum encompasses a broad spectrum of knowledge and skills required to navigate, discover, and respond to security weaknesses found in IoT or OT settings. It incorporates both traditional hacking/penetration testing methodologies and hardware hacking, alongside a focus on the practical aspects of consulting within these specialised environments, ensuring a balanced emphasis on technical and advisory capabilities.

Charles While, CEO of The Cyber Scheme, highlighted the critical importance of IoT/OT security in 2024, stating: “Our reliance on smart technology only continues to escalate, making robust IoT/OT security indispensable for protecting individuals, organisations, and society. The CSII practitioner training course was developed to assist organisations in bolstering their security consultants’ understanding of IoT/OT security challenges, facilitating both threat mitigation and opportunity realisation.”

The Cyber Scheme’s initiative seeks to cultivate a talent pool capable of transitioning into this domain, leveraging their pre-existing skills, whether from a software or hardware engineering perspective or from web-based security testing backgrounds. The training is designed to produce well-rounded consultants, adept at identifying and addressing vulnerabilities within these specialised areas.

Upon completing the CSII Practitioner training course, participants will emerge as autonomous, billable consultants proficient in detecting and advising on vulnerabilities without the need for supervision from senior consultants. Having IoT/OT expertise available, whether on-site as a full-time employee or as an independent consultant, becomes a pivotal element of an offensive security team, enabling the exploration and assessment of infrastructures beyond the scope of traditional penetration testing services.

There’s plenty of other editorial on our sister site, Electronic Specifier! Or you can always join in the conversation by commenting below or visiting our LinkedIn page.