EN61: Design and Implementation of Cybersecurity Recommendations in Zones and Conduits

Industrial Cybersecurity Training Program

ORGANIZED BY
Arpel WisePlant

Introduction

The purpose of the EN61 course is to manage the development and incorporation of the necessary and sufficient actions to mitigate all intolerable risks identified during the risk assessment, complying with the requirements of the ISA/IEC-62443 series of standards in a manner consistent with the other disciplines of industrial risk. In addition, if necessary, comply with the requirements of popular regulations.

The proper implementation of compensatory protections, with minimal interference in plant activities, is essential for those systems that are in operation with the main objective of creating industrial infrastructures resilient to all types of threats, even the most persistent.

Elaboration of industrial cybersecurity specifications (CSRS) and influencing the design of industrial systems and the plant to ensure that industrial plants will be operated with all cyber risks mitigated from the start-up of the new system.

This course is developed with a focus on the energy, oil and gas industries. It means complying with all the requirements of the ISA/IEC-62443 series of standards, harmonizing with the typical regulations of these sectors, which are NERC, C2M2, TSA, and other popular regulations.

Course Outline

At the end of the course you will be able to:

• Understand and use the results of the Cyber Risk Assessment (ASSESSMENT).

• In existing systems, incorporate by design the recommendations obtained in the previous stage (ASSESSMENT).

• Define the optimal architecture, design the incorporation of necessary changes as a result of detailed risk analysis.

• Visualize, monitor, and manage cybersecurity progress for each area and pipeline as recommendations are incorporated.

• Visualize how the current security level (SLA) is approaching the target security level (SLT).

• Elaboration of Industrial Cybersecurity Specifications (CSRS) for Zones and Conduits.

• Prioritize the implementation of security recommendations based on the greatest contribution to risk reduction, cost, effort, Security Level Capability, etc..

• Even if the system operates below risk tolerance, you will be able to create policies to monitor and supervise incidents of the remaining risks.

• Define and configure the appropriate cybersecurity policies for each zone and pipeline necessary for the next stage of monitoring and maintenance (MAINTENANCE).

 

This course is developed with a focus on the energy, oil and gas industries. It means complying with all the requirements of the ISA/IEC-62443 series of standards, harmonizing with the typical regulations of these sectors, which are NERC, C2M2, TSA, and other popular regulations.

 

You will cover the following topics in the course:

  1. Design of Zones and Conduits to comply with the safety recommendations of the previous phase, ensuring risk mitigation with efficiency and effectiveness.
  2. Incorporate the requirements of standards and regulations, such as: • ISA/IEC-62443 International Standards.
  3. National Standards, Laws and Regulations (NIST, NERC, C2M2, etc.)
  4. Developing your own rules and regulations.
  5. Design and development of Industrial Cyber Security Specifications (CSRS) in Zones and Ducts for systems in the engineering phase, complying with the FR, SR, and RE of the ISA/IEC-62443-3-3 standard.
  6. Implementation of security in Zones and Conduits, prioritizing countermeasures according to effectiveness and efficiency to mitigate residual cyber risk, maintaining consistency between: 
  7. Procedural Countermeasures,
  8. TechnologicalCountermeasures, and
  9. PhysicalCountermeasures.
  10. Manage the implementation of countermeasures for the effective, reliable and credible mitigation of Industrial Cyber Risk up to the Tolerable Risk by the organization.
  11. Design specifications for detection, monitoring and alerting systems (ARMS) for the rationalization of alerts and event response plans, minimizing false positives. This specification is the entry into the MAINTAIN (Operation and Maintenance) phase.
  12. For industrial systems with unmitigated risk,
  13. For industrial systems with risk mitigation.

 

Recognitions

All participants who meet the course requirements and who successfully pass the final exam with a good grade will be awarded a Digital Badge. The Digital Badge certifies that the participant has attended the EN61 training course and has executed the final assessment test with a good grade, verifying that the participant has assimilated the new knowledge in a reasonable way.

 

Requirements

It requires that you have taken and passed the EN60. It is recommended that the professional has knowledge of some of the following: International Cybersecurity Standards by industry consensus ISA/IEC-62443, Corporate Cybersecurity or Information Security Standards ISO-27000, Industrial Risk Management Standards such as ISA/IEC-61511, functional safety, National Regulations and/or standards such as NIST, NERC, and others; Experience in corporate project management and cultural change management, Other industrial risk management standards (worker safety, environmental safety, etc.).

 

 

MORE INFO

Instructor

  • Maximillian Kon
    Maximillian Kon General Director, WisePlant
    Maximillian Kon

    Maximillian Kon

    General Director, WisePlant


    Maximillian is the CEO, General Director, and Founder of WisePlant. He is an electronic engineer specializing in industrial automation, an active member of the ISA99 Committee - Working Group 8, an active member of the ISA Secure Committee, director of the WiseSecurity consulting services division, and an official ISA RTP Training instructor for Industrial Cybersecurity.

    He has developed his professional career in South America, accumulating over 20 years of experience in industrial systems and critical systems across various industries including oil, gas, energy, food, pharmaceuticals, chemicals, petrochemicals, water, paper, metallurgy, mining, smart buildings, and others.

Registrations

COURSE EN61

Arpel Members: 650 USD

Others: 850 USD

 

CYBERSECURITY TRAINING PROGRAM


COURSES: EN50 - EN60 - EN61 - EN62 - EN99

Arpel Members: 2.450 USD

Others: 3.200 USD

Thu 07 Mar
Webinar

Improving Process Safety Performance

More info
Mon 08 Apr
Conference

Arpel-Naturgas Week 2024

More info
Tue 23 Apr
Workshop

Just Energy Transitions in Latin America and the Caribbean

More info
Thu 25 Apr
Webinar

Status of Net Zero Reporting in the Latin American Oil and Gas sector

More info
Tue 04 Jun
Conference

4th. Suriname Energy, Oil & Gas Summit & Exhibition

More info
Tue 11 Jun
Workshop

Workshop of the Arpel Sustainability Commitee 2024

More info
Thu 13 Jun
Webinar

The Road Ahead: Upstream Strategies in the Energy Transition

More info
Tue 25 Jun
Conference

Latin America Climate Summit

More info
Thu 27 Jun
Workshop

Reducing of methane and CO2 emissions in upstream operations

More info
Mon 08 Jul
Webinar

Global launch of RETOS™

More info
Tue 23 Jul
Webinar

Fair Market Valuation in Upstream Oil & Gas

More info
Tue 24 Sep
Conference

Becht HF Alkylation Summit

More info
Tue 19 Nov
Conference

Energy Summit 2024

More info
Tue 07 May
COURSE

EN50: Industrial Cybersecurity Management for projects in the Energy, Oil & Gas sector

More info
Mon 27 May
COURSE

EN60: Cyber Risk Assessment in New and Existing Industrial Systems in Energy, Oil & Gas.

More info
Tue 25 Jun
COURSE

EN61: Design and Implementation of Cybersecurity Recommendations in Zones and Conduits

More info
Tue 16 Jul
COURSE

EN62: Monitoring and Maintenance of Industrial Cybersecurity in Zones and Conduits

More info
Tue 06 Aug
COURSE

EN99: Handling and Management of Industrial Cybersecurity Alerts Applying the ISA/IEC-62443 Standard

More info
Tue 27 Aug
PROGRAM

Industrial Cybersecurity Training Full Program

More info
Tue 27 Aug
COURSE

EN50: Industrial Cybersecurity Management for projects in the Energy, Oil & Gas sector

More info
Tue 17 Sep
COURSE

EN60: Cyber Risk Assessment in New and Existing Industrial Systems in Energy, Oil & Gas.

More info
Tue 15 Oct
COURSE

EN61: Design and Implementation of Cybersecurity Recommendations in Zones and Conduits

More info
Tue 22 Oct
PROGRAM

ARPEL Leadership Program 3rd edition

More info
  • Tags:
    • Cybersecurity

Related content

courses (4)
EN99: Handling and Management of Industrial Cybersecurity Alerts Applying the ISA/IEC-62443 Standard

Cybersecurity

EN99: Handling and Management of Industrial Cybersecurity Alerts Applying the ISA/IEC-62443 Standard

More info
EN50: Industrial Cybersecurity Management for projects in the Energy, Oil & Gas sector

Cybersecurity

EN50: Industrial Cybersecurity Management for projects in the Energy, Oil & Gas sector

More info
EN60: Cyber Risk Assessment in New and Existing Industrial Systems in Energy, Oil & Gas.

Cybersecurity

EN60: Cyber Risk Assessment in New and Existing Industrial Systems in Energy, Oil & Gas.

More info
EN62: Monitoring and Maintenance of Industrial Cybersecurity in Zones and Conduits

Cybersecurity

EN62: Monitoring and Maintenance of Industrial Cybersecurity in Zones and Conduits

More info
News (4)
Cyber Risk Assessment and Industrial Cybersecurity Management in Arpel's Training Program for Oil and Gas Companies

Cybersecurity

Cyber Risk Assessment and Industrial Cybersecurity Management in Arpel's Training Program for Oil and Gas Companies

On May 7 and 8, the EN-50 course “Industrial Cybersecurity Management for Projects in the Energy,... Read more
Arpel 2023 Annual Report

Environment, Energy Transitions, Sustainability

Arpel 2023 Annual Report

The Report includes links to virtual workshops developed throughout the year and to new... Read more
Innovarpel 2023, First Edition of Technical Event Dedicated to Digitalization and Cybersecurity in Oil and Gas Companies

Cybersecurity, Digitalization

Innovarpel 2023, First Edition of Technical Event Dedicated to Digitalization and Cybersecurity in Oil and Gas Companies

On November 21st and 22nd at the Hilton Colon Hotel in Quito, Ecuador, Arpel organized Innovarpel... Read more
Editorial: Arpel’s 58th Anniversary

Environment, Energy Transitions, Sustainability

Editorial: Arpel’s 58th Anniversary

As ever, an Industry in Constant Change, with new Challenges and Opportunities in the Energy... Read more
Events (1)
Arpel-Naturgas Week 2024

Refinement, Terminals, Gas

Arpel-Naturgas Week 2024

Arpel, the Association of Oil, Gas, and Renewable Energy Companies of Latin America and the... More info
Publications (4)
Industrial Cybersecurity Maturity Benchmarking in the oil and gas industry for Latin America and the Caribbean

Cybersecurity

Industrial Cybersecurity Maturity Benchmarking in the oil and gas industry for Latin America and the Caribbean

This manual provides a general description of the methodology developed by Arpel to carry out the... More info
Arpel Annual Report 2021

Cybersecurity

Arpel Annual Report 2021

This document compiles the activities carried out during 2021 to drive the four strategic lines:... More info
Arpel Annual Report 2020

Cybersecurity

Arpel Annual Report 2020

The document contains information on Governance and Membership of Arpel. In addition, it compiles... More info
Modelo I3. Cautivando el interés de la junta directiva en los temas de ciberseguridad

Cybersecurity, Security

Modelo I3. Cautivando el interés de la junta directiva en los temas de ciberseguridad

In an asymmetric information scenario and with permanent changes at the political, economic,... More info
Arpel Channel (4)
Arpel-Naturgas Week 2024 - April 8th to 12th in Cartagena de Indias

Environment, Energy Transitions, Sustainability

Arpel-Naturgas Week 2024 - April 8th to 12th in Cartagena de Indias

Watch video
Innovarpel 2023, first edition of a technical event dedicated to Digitalization and Cybersecurity

Digitalization, Cybersecurity, Supply Chain

Innovarpel 2023, first edition of a technical event dedicated to Digitalization and Cybersecurity

Watch video
VIDEO SUMMARY: Arpel-Naturgas Week 2024. From April 8th to April 12th in Cartagena de Indias, Colombia

Environment, Energy Transitions, Sustainability

VIDEO SUMMARY: Arpel-Naturgas Week 2024. From April 8th to April 12th in Cartagena de Indias, Colombia

Watch video
Arpel Webinar: Cybersecurity in the Industrial Cloud: Protecting the Connected Future

Digitalization, Cybersecurity

Arpel Webinar: Cybersecurity in the Industrial Cloud: Protecting the Connected Future

Watch video

Would you like to receive a notification when a new course is launched?

Subscribe now to receive updates about courses!

Subscribe

ASSOCIATION OF OIL, GAS AND RENEWABLE ENERGY COMPANIES OF LATIN AMERICA AND THE CARIBBEAN

Av. Luis A. de Herrera 1248, WTC, Tower 2, 7th Floor, Office 717. Montevideo, Uruguay.
Phone: (+598) 2623 6993 – Email: info@arpel.org.uy