This three-day course builds a working foundation in industrial automation and control system (IACS) security using the ISA/IEC 62443 series. You learn to think in zones, conduits and security levels, and you prepare for the ISA/IEC 62443 Cybersecurity Fundamentals Specialist exam, the entry point of the ISA certificate path. The course mixes short lectures, plant-based case studies and exam-style practice, so that engineers from IT and OT backgrounds leave with a shared vocabulary and a method they can reuse on their own sites.
Formats : Live virtual class · In-person in Casablanca · On-site (intra-company)
Languages : French or English
Exam facts : 90 multiple-choice questions · 2 h · closed book · pass/fail result
Exam voucher : IC32 exam: access to the ISA exam is tied to registering for IC32 with ISA or an ISA-recognized provider. We guide you through the process — contact us.
Explain how securing an OT environment differs from securing business IT
Navigate the ISA/IEC 62443 series and pick the right document for your role
Partition a facility into zones and conduits and justify a target security level
Apply a defense-in-depth approach to risk reduction
Recognize the requirements placed on asset owners, integrators and product suppliers
Approach the Cybersecurity Fundamentals Specialist exam with confidence
Program
Why industrial cybersecurity is different
Typical IACS architecture
Availability and safety constraints
Notable incidents and lessons learned
The ISA/IEC 62443 series at a glance
General, policy, system and component documents
Roles: asset owner, integrator, supplier
Security profiles
Industrial networks and protocols
Network security basics
Common industrial protocols and their weaknesses
Segmentation and filtering
Risk assessment, zones and conduits
Risk assessment approach
Zone and conduit model
Target and achieved security levels
Documenting and communicating residual risk
Security across the lifecycle
Asset owner security program
Patch management in OT
Secure product development
Exam preparation
Targeted review
Practice questions with debrief
Prerequisites
No mandatory prerequisites
Recommended: one to three years of cybersecurity experience with some industrial exposure, or equivalent knowledge
Target audience
Control system engineers and managers
System integrators
IT engineers working in industrial facilities
CISOs and plant managers in energy, oil and gas, manufacturing and water
The exam
The ISA exam has 90 multiple-choice questions, lasts two hours, is closed book, and is taken at a test center or online through Meazure Learning. ISA reports only pass or fail. Important: exam eligibility is tied to registering for the IC32 course with ISA or an ISA-recognized provider, after which candidates have six months to test. Our course prepares you for the content, and we guide you through registration. The certificate does not need renewal and unlocks the next certificates in the ISA/IEC 62443 path.
Preparation tips
Learn where each document in the series fits and which role it targets
Practice drawing zones and conduits on a real plant diagram
Master the security-level vocabulary before exam day
Frequently asked questions (FAQ)
Does the ISA/IEC 62443 certificate need to be renewed?
No. According to ISA, ISA/IEC 62443 certificates do not require renewal, so there are no annual fees or continuing education credits to track once you have passed.
How many questions are on the IC32 exam?
The Fundamentals Specialist exam has 90 multiple-choice questions to answer in two hours, closed book.
Can I take the exam online?
Yes. ISA offers the exam either online with remote proctoring or at a test center, both through Meazure Learning. Plan a quiet room and a stable connection if you choose the online option.
What comes after this first certificate?
The Fundamentals certificate is required before the other three (risk assessment, design, maintenance), which can be taken in any order. Holding all four earns Expert recognition.
Is this course suitable for IT people with no plant experience?
Yes, as long as you are comfortable with networking basics. We spend dedicated time on OT specifics such as availability constraints, safety systems and industrial protocols to close the gap with plant engineers.
Securevalley training — online and in-person sessions. Contact us for pricing and registration terms.
Securevalley is not a training partner of ISA. ISA and ISA/IEC 62443 are trademarks of ISA (International Society of Automation).