Day 1 (8 hours)

Morning (4 hours)

Introduction to Safety & Cybersecurity Convergence

• Evolution of industrial safety
• Limitations of the traditional safety approach
• Digitalization and new OT scenarios
• Impact of cyberattacks on personnel safety
• Industry 4.0 / 5.0 and connected systems

Regulatory Evolution in Europe

• Machinery Regulation (EU) 2023/1230
  • New EHSRs 1.1.9 and 1.2.1
• Cyber Resilience Act
  • Scope of application
  • Relationship with the Machinery Regulation
  • Product security vs functional safety

Regulatory Evolution in North America

• National Electrical Code (NEC 2026)
  • Requirements for connected systems
  • Impact on control panels, machinery, and industrial installations

‍

Afternoon (4 hours)

Comparison of European and North American Approaches

• Prescriptive vs risk-based approaches
• Responsibilities of:
  • OEMs
  • System integrators
  • End users
• Requirements for secure connectivity

‍

Harmonized Standards and Technical Standards

• Type-C EN standards and special-purpose machinery
• Cybersecurity applied to:
  • Industrial robots
  • Packaging machinery
  • Automated production lines

‍

Introduction to Digitalization and Cybersecurity

• Threats, threat actors, and impacts
• Current trends in industrial cybersecurity
• Introduction to the NIS2 Directive
• Defense strategies and best practices
• Case study: phishing and user protection

‍

‍

‍

Day 2 (8 hours)

Risk Assessment and IEC 62443 Standards

Morning (4 hours)

New ISO/DIS 12100 – 2025 Edition

• Evolution of risk assessment
• Cybersecurity and protection against corruption
• Integration of:
  • Safety risks
  • Cybersecurity risks
  • Reasonably foreseeable misuse

prEN 50742 – Protection against corruption

• The concept of corruption:
  • Software
  • Data
  • Signals
• Design and verification requirements
• Relationship with:
  • IEC 62443-3-2
  • IEC 62443-3-3

‍

Afternoon (4 hours)

The IEC 62443 Series

• Structure of the IEC 62443 series
• Roles and responsibilities:
  • Manufacturers
  • Suppliers
  • Integrators

‍

Key OT Security Concepts

• Zones & conduits
• Security Levels (SL)
• Defense in depth
• Secure OT/IT architectures

‍

Cyber-Physical Systems and Industrial Security

• IT vs OT: key differences
• Industrial control systems in Industry 5.0
• ICS components and architectures
• Historical cyberattacks and known vulnerabilities
• Exposure and attack surfaces

‍

‍

‍

Day 3 (8 hours)

‍

Practical Workshop and Application Cases

Morning (4 hours)

Secure Connectivity for Machinery and Industrial Systems

Best Practices and Technical Solutions

• Access management and authentication
• Network segmentation
• Patch management
• Logging and monitoring
• Incident response

‍

Risk Assessment in Industrial Systems

• Assessment methodologies
• Vulnerability identification
• Mitigation prioritization
• OT defense strategies

‍

‍

Afternoon (4 hours)

Practical VAPT Workshop

• Introduction to vulnerabilities
• CVE and CVSS
• Vulnerability Assessment process
• Scanning tools and techniques
• Introduction to Penetration Testing
• Operational methodologies

‍

‍

Hands-on Session

Practical applications on:

• Collaborative robots
• Automated machinery
• Complex industrial systems

Laboratory activities:

• Machinery analysis according to IEC 62443-3-2
• Safety + cybersecurity integration
• Identification of non-conformities
• OT assessment simulation

Laboratory Requirements

• Laptop computer
• Minimum 75 GB of available storage space

The course is designed for all members of the technical department, from technical managers to design engineers.

Modules 1 and 2 are also suitable for project managers, technical sales professionals, IT managers, quality managers, and compliance professionals.

Module 3 is entirely hands-on and specifically designed for technical professionals.

‍