EN61: Design and Implementation of Cybersecurity Recommendations in Zones and Conduits

Industrial Cybersecurity Training Program

ORGANIZED BY
Arpel WisePlant

Introduction

The purpose of the EN61 course is to manage the development and incorporation of the necessary and sufficient actions to mitigate all intolerable risks identified during the risk assessment, complying with the requirements of the ISA/IEC-62443 series of standards in a manner consistent with the other disciplines of industrial risk. In addition, if necessary, comply with the requirements of popular regulations.

The proper implementation of compensatory protections, with minimal interference in plant activities, is essential for those systems that are in operation with the main objective of creating industrial infrastructures resilient to all types of threats, even the most persistent.

Elaboration of industrial cybersecurity specifications (CSRS) and influencing the design of industrial systems and the plant to ensure that industrial plants will be operated with all cyber risks mitigated from the start-up of the new system.

This course is developed with a focus on the energy, oil and gas industries. It means complying with all the requirements of the ISA/IEC-62443 series of standards, harmonizing with the typical regulations of these sectors, which are NERC, C2M2, TSA, and other popular regulations.

Course Outline

At the end of the course you will be able to:

• Understand and use the results of the Cyber Risk Assessment (ASSESSMENT).

• In existing systems, incorporate by design the recommendations obtained in the previous stage (ASSESSMENT).

• Define the optimal architecture, design the incorporation of necessary changes as a result of detailed risk analysis.

• Visualize, monitor, and manage cybersecurity progress for each area and pipeline as recommendations are incorporated.

• Visualize how the current security level (SLA) is approaching the target security level (SLT).

• Elaboration of Industrial Cybersecurity Specifications (CSRS) for Zones and Conduits.

• Prioritize the implementation of security recommendations based on the greatest contribution to risk reduction, cost, effort, Security Level Capability, etc..

• Even if the system operates below risk tolerance, you will be able to create policies to monitor and supervise incidents of the remaining risks.

• Define and configure the appropriate cybersecurity policies for each zone and pipeline necessary for the next stage of monitoring and maintenance (MAINTENANCE).

 

This course is developed with a focus on the energy, oil and gas industries. It means complying with all the requirements of the ISA/IEC-62443 series of standards, harmonizing with the typical regulations of these sectors, which are NERC, C2M2, TSA, and other popular regulations.

 

You will cover the following topics in the course:

  1. Design of Zones and Conduits to comply with the safety recommendations of the previous phase, ensuring risk mitigation with efficiency and effectiveness.
  2. Incorporate the requirements of standards and regulations, such as: • ISA/IEC-62443 International Standards.
  3. National Standards, Laws and Regulations (NIST, NERC, C2M2, etc.)
  4. Developing your own rules and regulations.
  5. Design and development of Industrial Cyber Security Specifications (CSRS) in Zones and Ducts for systems in the engineering phase, complying with the FR, SR, and RE of the ISA/IEC-62443-3-3 standard.
  6. Implementation of security in Zones and Conduits, prioritizing countermeasures according to effectiveness and efficiency to mitigate residual cyber risk, maintaining consistency between: 
  7. Procedural Countermeasures,
  8. TechnologicalCountermeasures, and
  9. PhysicalCountermeasures.
  10. Manage the implementation of countermeasures for the effective, reliable and credible mitigation of Industrial Cyber Risk up to the Tolerable Risk by the organization.
  11. Design specifications for detection, monitoring and alerting systems (ARMS) for the rationalization of alerts and event response plans, minimizing false positives. This specification is the entry into the MAINTAIN (Operation and Maintenance) phase.
  12. For industrial systems with unmitigated risk,
  13. For industrial systems with risk mitigation.

 

Recognitions

All participants who meet the course requirements and who successfully pass the final exam with a good grade will be awarded a Digital Badge. The Digital Badge certifies that the participant has attended the EN61 training course and has executed the final assessment test with a good grade, verifying that the participant has assimilated the new knowledge in a reasonable way.

 

Requirements

It requires that you have taken and passed the EN60. It is recommended that the professional has knowledge of some of the following: International Cybersecurity Standards by industry consensus ISA/IEC-62443, Corporate Cybersecurity or Information Security Standards ISO-27000, Industrial Risk Management Standards such as ISA/IEC-61511, functional safety, National Regulations and/or standards such as NIST, NERC, and others; Experience in corporate project management and cultural change management, Other industrial risk management standards (worker safety, environmental safety, etc.).

 

 

MORE INFO

Instructor

  • Maximillian Kon
    Maximillian Kon General Director, WisePlant
    Maximillian Kon

    Maximillian Kon

    General Director, WisePlant


    Maximillian is the CEO, General Director, and Founder of WisePlant. He is an electronic engineer specializing in industrial automation, an active member of the ISA99 Committee - Working Group 8, an active member of the ISA Secure Committee, director of the WiseSecurity consulting services division, and an official ISA RTP Training instructor for Industrial Cybersecurity.

    He has developed his professional career in South America, accumulating over 20 years of experience in industrial systems and critical systems across various industries including oil, gas, energy, food, pharmaceuticals, chemicals, petrochemicals, water, paper, metallurgy, mining, smart buildings, and others.

Registrations

COURSE EN61

Arpel Members: 650 USD

Others: 850 USD

 

CYBERSECURITY TRAINING PROGRAM


COURSES: EN50 - EN60 - EN61 - EN62 - EN99

Arpel Members: 2.450 USD

Others: 3.200 USD

Thu 07 Mar
Webinar

Improving Process Safety Performance

More info
Mon 08 Apr
Conference

Arpel-Naturgas Week 2024

More info
Tue 23 Apr
Workshop

Just Energy Transitions in Latin America and the Caribbean

More info
Thu 25 Apr
Webinar

Status of Net Zero Reporting in the Latin American Oil and Gas sector

More info
Tue 04 Jun
Conference

4th. Suriname Energy, Oil & Gas Summit & Exhibition

More info
Tue 11 Jun
Workshop

Workshop of the Arpel Sustainability Commitee 2024

More info
Thu 13 Jun
Webinar

The Road Ahead: Upstream Strategies in the Energy Transition

More info
Tue 25 Jun
Conference

Latin America Climate Summit

More info
Thu 27 Jun
Workshop

Reducing of methane and CO2 emissions in upstream operations

More info
Mon 08 Jul
Webinar

Global launch of RETOS™

More info
Tue 23 Jul
Webinar

Fair Market Valuation in Upstream Oil & Gas

More info
Mon 19 Aug
Webinar

Powering an increasingly decarbonized world

More info
Thu 29 Aug
Webinar

Designing a matrix of roles and responsibilities in industrial cybersecurity

More info
Tue 03 Sep
Webinar

The meaning of just energy transitions for our region

More info
Thu 12 Sep
Workshop

Workshops on Carbon Markets

More info
Thu 19 Sep
Webinar

Reducing Failures and Energy Consumption in Ecopetrol's Artificial Lifting Systems

More info
Tue 24 Sep
Others

Becht HF Alkylation Summit

More info
Tue 24 Sep
Webinar

Introduction to the Escazú Agreement

More info
Thu 03 Oct
Others

Third EAGE Workshop on EOR

More info
Thu 10 Oct
Webinar

Data Management in Exploration: Security, Knowledge, and Resources

More info
Thu 17 Oct
Webinar

Sustainability reporting 101: introduction and essential steps in producing your sustainability report

More info
Tue 29 Oct
Webinar

Materiality assessments for sustainability reports

More info
Wed 06 Nov
Webinar

Process Safety Implementation for an Early Production Facility (EPF) – Upstream

More info
Tue 12 Nov
Webinar

Prevention of Major Emergencies in the Exploitation of Unconventional Fields

More info
Tue 19 Nov
Others

Energy Summit 2024

More info
Tue 26 Nov
Workshop

Workshops on Carbon Markets

More info
Wed 02 Apr
Others

Cuba Energy Summit

More info
Tue 01 Oct
PROGRAM

Arpel Leadership Program - 3rd edition

More info
Tue 07 May
COURSE

EN50: Industrial Cybersecurity Management for projects in the Energy, Oil & Gas sector

More info
Mon 27 May
COURSE

EN60: Cyber Risk Assessment in New and Existing Industrial Systems in Energy, Oil & Gas.

More info
Tue 25 Jun
COURSE

EN61: Design and Implementation of Cybersecurity Recommendations in Zones and Conduits

More info
Tue 16 Jul
COURSE

EN62: Monitoring and Maintenance of Industrial Cybersecurity in Zones and Conduits

More info
Thu 22 Aug
COURSE

EN99: Handling and Management of Industrial Cybersecurity Alerts Applying the ISA/IEC-62443 Standard

More info
Tue 27 Aug
COURSE

EN50: Industrial Cybersecurity Management for projects in the Energy, Oil & Gas sector

More info
Tue 17 Sep
COURSE

EN60: Cyber Risk Assessment in New and Existing Industrial Systems in Energy, Oil & Gas.

More info
Tue 15 Oct
COURSE

EN61: Design and Implementation of Cybersecurity Recommendations in Zones and Conduits

More info
Tue 05 Nov
COURSE

EN62: Monitoring and Maintenance of Industrial Cybersecurity in Zones and Conduits

More info
Tue 26 Nov
PROGRAM

Industrial Cybersecurity Training Full Program

More info
Tue 26 Nov
COURSE

EN99: Handling and Management of Industrial Cybersecurity Alerts Applying the ISA/IEC-62443 Standard

More info
  • Tags:
    • Cybersecurity

Related content

courses (4)
EN99: Handling and Management of Industrial Cybersecurity Alerts Applying the ISA/IEC-62443 Standard

Cybersecurity

EN99: Handling and Management of Industrial Cybersecurity Alerts Applying the ISA/IEC-62443 Standard

More info
EN50: Industrial Cybersecurity Management for projects in the Energy, Oil & Gas sector

Cybersecurity

EN50: Industrial Cybersecurity Management for projects in the Energy, Oil & Gas sector

More info
EN60: Cyber Risk Assessment in New and Existing Industrial Systems in Energy, Oil & Gas.

Cybersecurity

EN60: Cyber Risk Assessment in New and Existing Industrial Systems in Energy, Oil & Gas.

More info
EN61: Design and Implementation of Cybersecurity Recommendations in Zones and Conduits

Cybersecurity

EN61: Design and Implementation of Cybersecurity Recommendations in Zones and Conduits

More info
News (4)
Institute of the Americas and Arpel sign memorandum of understanding at La Jolla Energy Conference 2024

Environment, Energy Transitions, Sustainability

Institute of the Americas and Arpel sign memorandum of understanding at La Jolla Energy Conference 2024

Within the framework of the XXXIII La Jolla Energy Conference, which took place on October 16 and... Read more
Trafigura: new active member of Arpel

Environment, Energy Transitions, Sustainability

Trafigura: new active member of Arpel

Arpel welcomes Trafigura as a new active member. Trafigura is a multinational commodity trading... Read more
Ancap and Ecopetrol Upstream Webinars: Exploration data management and reducing failures in artificial lifting systems

Cybersecurity, Digitalization, Production

Ancap and Ecopetrol Upstream Webinars: Exploration data management and reducing failures in artificial lifting systems

More than 200 professionals participated in the last two webinars to exchange best practices in... Read more
Arpel-CCI Webinar on the design of the matrix of roles and responsibilities in Industrial Cybersecurity

Cybersecurity

Arpel-CCI Webinar on the design of the matrix of roles and responsibilities in Industrial Cybersecurity

More than 110 professionals from Ancap, Ecopetrol, Enap, EP Petroecuador, Honeywell, Petroperú,... Read more
Events (2)
Arpel-Naturgas Week 2024

Refinement, Terminals, Gas

Arpel-Naturgas Week 2024

Arpel, the Association of Oil, Gas, and Renewable Energy Companies of Latin America and the... More info
Designing a matrix of roles and responsibilities in industrial cybersecurity

Cybersecurity

Designing a matrix of roles and responsibilities in industrial cybersecurity

Industrial Cybersecurity Best Practices Exchange Talks More info
Publications (4)
Industrial Cybersecurity Maturity Benchmarking in the oil and gas industry for Latin America and the Caribbean

Cybersecurity

Industrial Cybersecurity Maturity Benchmarking in the oil and gas industry for Latin America and the Caribbean

This manual provides a general description of the methodology developed by Arpel to carry out the... More info
Arpel Annual Report 2021

Cybersecurity

Arpel Annual Report 2021

This document compiles the activities carried out during 2021 to drive the four strategic lines:... More info
Arpel Annual Report 2020

Cybersecurity

Arpel Annual Report 2020

The document contains information on Governance and Membership of Arpel. In addition, it compiles... More info
Modelo I3. Cautivando el interés de la junta directiva en los temas de ciberseguridad

Cybersecurity, Security

Modelo I3. Cautivando el interés de la junta directiva en los temas de ciberseguridad

In an asymmetric information scenario and with permanent changes at the political, economic,... More info
Arpel Channel (4)
Arpel-Naturgas Week 2024 - April 8th to 12th in Cartagena de Indias

Environment, Energy Transitions, Sustainability

Arpel-Naturgas Week 2024 - April 8th to 12th in Cartagena de Indias

Watch video
Innovarpel 2023, first edition of a technical event dedicated to Digitalization and Cybersecurity

Digitalization, Cybersecurity, Supply Chain

Innovarpel 2023, first edition of a technical event dedicated to Digitalization and Cybersecurity

Watch video
VIDEO SUMMARY: Arpel-Naturgas Week 2024. From April 8th to April 12th in Cartagena de Indias, Colombia

Environment, Energy Transitions, Sustainability

VIDEO SUMMARY: Arpel-Naturgas Week 2024. From April 8th to April 12th in Cartagena de Indias, Colombia

Watch video
Arpel Webinar: Cybersecurity in the Industrial Cloud: Protecting the Connected Future

Digitalization, Cybersecurity

Arpel Webinar: Cybersecurity in the Industrial Cloud: Protecting the Connected Future

Watch video

Would you like to receive a notification when a new course is launched?

Subscribe now to receive updates about courses!

Subscribe

ASSOCIATION OF OIL, GAS AND RENEWABLE ENERGY COMPANIES OF LATIN AMERICA AND THE CARIBBEAN

Av. Luis A. de Herrera 1248, WTC, Tower 2, 7th Floor, Office 717. Montevideo, Uruguay.
Phone: (+598) 2623 6993 – Email: info@arpel.org.uy

Contact Us