Rail Cyber Security and Operational Technology (OT) Fundamentals Course Code HSSICT0008

The Rail Cyber Security & Operational Technology (OT) Fundamentals Skill Set includes four days of structured training, followed by a fifth day for assessment finalisation and review.<br><strong>Day 1 – IT Security Foundations and Rail Cyber Threats</strong><br>• CIA/AIC security models and cyber security foundations<br>• Rail as critical infrastructure and the cyber threat landscape<br>• Human factors, security awareness and reporting culture<br>• ASD Essential Eight, data protection and privacy<br><strong>Day 2 – Operational Technology (OT) Security</strong><br>• Differences between IT and OT environments<br>• Rail network architecture and SCADA/ICS fundamentals<br>• Defensible network design and segmentation<br>• OT security monitoring and threat detection<br><strong>Day 3 – Standards, Compliance and Risk Management</strong><br>• IEC 62443 and TS 50701 rail cyber security standards<br>• Security levels, zones and lifecycle governance<br>• Threat modelling and cyber risk assessment<br>• Risk registers and risk treatment strategies<br><strong>Day 4 – Operations, Maintenance and Incident Response</strong><br>• OT patch management and configuration control<br>• Security monitoring and anomaly detection<br>• Incident response workflows and procedures<br>• Business continuity and post-incident reviews<br><strong>Day 5 – Assessment Finalisation and Review</strong><br>• Assessment completion and review activities<br>• Feedback and individual guidance as required<br><strong>Learning and Assessment</strong><br>Training is delivered through browser-based simulations rather than specialised OT hardware or laboratory facilities, supporting consistent delivery across the national TAFE network.<br>An integrated capstone exercise allows participants to apply the cyber security standards, frameworks and risk management practices covered during training to their own workplace context.