
We offer a variety of training options, enabling companies to develop tailored learning pathways for their staff. Our team shares their knowledge through deep dive “Masterclasses”, leveraging Armexa’s extensive experience from countless projects and deep understanding of industry standards and best practices.
These Masterclasses are designed to provide top-tier OT cybersecurity training in either a traditional classroom seeing or remotely via a virtual environment. Topics include:
• Cyber PHA Deep Dive Masterclass
• OT Cyber HAZOP Risk Assessment Masterclass
• OT Bowtie Analysis In-Depth Masterclass
• TSA Pipeline Security Directives & Guidelines for Operations Masterclass
Click below for more details on each Masterclass
Maritime FSO & VSO Cybersecurity Training
Training course focused on cybersecurity fundamentals for Facility Security Officers (FSO) and Vessel Security Officers (VSO). Participants will be instructed on relevant regulatory requirements, such as those established by the Maritime Transportation Security Act (MTSA), the US Coast Guard and the International Maritime Organization (IMO).
- Provide cybersecurity fundamentals for maritime Facility Security Officers (FSOs)
- Explain regulatory requirements of MTSA & IMO
- Introduce fundamental concepts of IT and OT cybersecurity
- Introduce industry cybersecurity standards such as NIST, ISO, ISA and IEC
- Learn how to specify and perform a cybersecurity FSA
- Learn how to interpret the findings from FSA and incorporated into the existing facility security plan (FSP)
- Learn cybersecurity principles and the “jargon” needed to communicate with internal and external cybersecurity consultants
- Be better prepared to meet the intent of the regulations and standards
OT Cyber HAZOP Risk Assessment Masterclass
Course Overview:
Vulnerabilities are not the same as risk, yet many companies base their OT security strategies on vulnerability assessments and the number of vulnerabilities discovered by detection tools.
The course provides in-depth training on applying the Cyber HAZOP risk assessment methodology which has been proven for over a decade to be the leading consequence-based methodology for assessing the true risk of cyber incidents to operations and to express that risk in terms that senior leadership appreciates, such as health, safety, environment, financial, and business interruption.
The Cyber HAZOP method, introduced in 2013, is the integration of process safety hazard analysis with cybersecurity threat modeling. The methodology is fully aligned with the requirements in the global OT security standard, ISA/IEC 62443-3-2, “Security Risk Assessment for System Design”, and has been used to assess hundreds of OT systems around the globe in a wide variety of industries and applications.
This course was developed for those responsible for managing OT cybersecurity risk at the corporate, plant level, or system level. It was created by the experts who pioneered the methodology, chaired the development of the ISA/IEC standard, and facilitated countless assessments.
In this 2-day course, you will:
- Learn about industrial process and machine safety and how it relates to cybersecurity
- Understand OT cybersecurity standards and regulatory requirements regarding risk assessment and management
- Learn the Cyber HAZOP process for both greenfield and brownfield applications
- Be introduced to products and utilities that can be used to facilitate and accelerate the process
- Receive valuable templates, checklists, and other job aids to use after the class
- Participate in a “mock” Cyber HAZOP workshop
OT Bowtie Analysis In-Depth Masterclass
More details coming soon
TSA Pipeline Security Directives & Guidelines for Operations Masterclass
Course Overview:
This course equips OT personnel and pipeline operations managers with the knowledge and skills to meet TSA Pipeline Security Directives. It focuses on security measures specific to control rooms, field operations, and pipeline stations, with practical exercises, real-world case studies, and comparisons to other OT cybersecurity standards.
Course Objectives:
Participants will be able to:
1. Understand TSA Pipeline Security Directives & Guidelines and their relevance to OT personnel.
2. Identify gaps in existing physical and cyber security controls in OT environments.
3. Conduct OT cybersecurity risk assessments and use the results to develop a practical roadmap to remediate intolerable risk.
4. Understand how the TSA Security Directives relate to OT cybersecurity standards such as ISA/IEC 62443, NIST 800-82, and API 1164.
5. Support the development, review and application of Cybersecurity Implementation Plan (CIP) and Cybersecurity Assessment Program (CAP) documents
6. Develop security incident response plans and exercises for pipeline operations.
7. Foster a security-minded culture within operations and maintenance.
Target Audience:
· OT Personnel in Pipeline Operations Centers, Terminals, and Stations
· Field Technicians, Engineers, Supervisors, and Pipeline Operations Managers
Prerequisites:
· Basic understanding of pipeline operations and OT systems
· Familiarity with basic security concepts and critical infrastructure protection
Want to learn more? Complete this form: