Why Study with PlanetCert?
The Latest Questions
Practice questions and exam topics aligned with the current exam objectives.
Detailed Explanations
Go beyond the answer. Master the material with comprehensive learning and professional explanations for every concept.
AI-Powered Insights
Personalized preparation guidance that adapts to your performance and identifies weak spots automatically.
Exam Information
Official specifications published by EC-Council
Exam Format
120 min
75
Not publicly disclosed
Specialist
Registration
$999 USD
ECC Exam Center or online proctoring
Validity
Not specified
Contact EC-Council for recertification requirements
ICS-SCADA Exam Topics and Domains
ICS-SCADA is organized into 8 weighted domains. Expect to work with BACnet tools, IDS platforms, Metasploit modules, Nessus, and more.
1
Introduction to ICS/SCADA Network Defense
16%
Typical Security Model
Security Architecture Fundamentals
- Understand typical security models for ICS/SCADA
- Identify security architecture components
ICS/SCADA Overview
Industrial Control Systems Fundamentals
- Describe ICS/SCADA components and architecture
- Understand differences between ICS and traditional IT systems
Risk Management
Risk Assessment and Analysis
- Perform risk assessments for ICS/SCADA environments
- Apply risk management frameworks
Security Policy
Policy Development and Implementation
- Develop security policies for ICS/SCADA
- Implement policy enforcement mechanisms
ICS/SCADA Attacks
Attack Vectors and Methods
- Identify common ICS/SCADA attack vectors
- Analyze real-world ICS/SCADA attacks
Attack Surface
Attack Surface Analysis
- Map ICS/SCADA attack surfaces
- Implement attack surface reduction techniques
Protocols and Siemens
Industrial Protocol Analysis
- Understand Siemens industrial protocols
- Identify protocol-specific vulnerabilities
Modbus and BACnet
Protocol Security Analysis
- Analyze Modbus and BACnet security
- Implement protocol-specific protections
Challenges with ICS/SCADA Risk
Unique Risk Challenges
- Identify unique ICS/SCADA risk challenges
- Develop risk mitigation strategies
Asset Identification and System Characterization
Asset Management
- Perform asset identification and inventory
- Characterize ICS/SCADA systems
Vulnerability Identification and Threat Modelling
Vulnerability and Threat Analysis
- Identify ICS/SCADA vulnerabilities
- Create threat models for industrial systems
SCADA Framework
Framework Implementation
- Understand SCADA frameworks
- Implement secure SCADA architectures
IT and ICS Comparison
IT vs OT Security
- Compare IT and ICS security requirements
- Address IT/OT convergence challenges
Standards
Industry Standards Overview
- Understand ICS/SCADA security standards
- Apply standards to industrial environments
2
TCP/IP 101
14%
Encapsulation and De-encapsulation
Data Encapsulation Process
- Understand network encapsulation
- Analyze protocol data units
TCP/IP
TCP/IP Protocol Suite
- Master TCP/IP fundamentals
- Identify TCP/IP security issues
IPv4, UDP, TCP Header
Protocol Header Analysis
- Analyze protocol headers
- Identify header-based attacks
Threat Containment
Network Threat Mitigation
- Implement threat containment
- Design network isolation strategies
Network Protocols
Protocol Security Analysis
- Analyze network protocol security
- Implement protocol protections
ICS/SCADA Protocols
Industrial Protocol Overview
- Understand ICS/SCADA protocols
- Identify protocol-specific risks
3
Introduction to Hacking
16%
Motives, Goals, and Objectives of Information Security Attacks
Attacker Motivation Analysis
- Understand attacker motivations
- Profile threat actors
Hacking and Ethical Hacking
Ethical Hacking Principles
- Apply ethical hacking principles
- Understand legal frameworks
Mindset of the Attacker
Attacker Psychology
- Think like an attacker
- Anticipate attack strategies
Types of Testing
Security Testing Methodologies
- Select appropriate testing methods
- Execute various testing types
Hacking Methodology
Attack Lifecycle
- Apply hacking methodology
- Execute attack lifecycle phases
Footprinting
Information Gathering
- Perform footprinting activities
- Gather target intelligence
Scanning
Network Scanning Techniques
- Execute network scanning
- Interpret scan results
Enumeration
Service Enumeration
- Perform service enumeration
- Extract detailed information
Vulnerability Research
Vulnerability Discovery
- Research vulnerabilities
- Validate exploits
Exploration
System Exploration
- Explore compromised systems
- Maintain persistence
Common ICS Architectures
ICS Architecture Patterns
- Analyze ICS architectures
- Identify architectural weaknesses
Modems and Wardialing
Modem Security
- Identify modem vulnerabilities
- Perform wardialing attacks
Penetration Testing
Penetration Testing Execution
- Execute penetration tests
- Document findings
ICS/SCADA Testing
ICS-Specific Testing
- Perform safe ICS testing
- Minimize operational impact
4
Vulnerability Management
13%
Defining Vulnerability
Vulnerability Concepts
- Define vulnerabilities
- Classify vulnerability types
Vulnerability Scanners
Scanner Tools and Techniques
- Configure vulnerability scanners
- Interpret scan results
Vulnerability Assessment
Assessment Methodology
- Conduct vulnerability assessments
- Validate findings
Malware Ecosystem
ICS Malware Analysis
- Analyze ICS malware
- Understand malware ecosystem
Vulnerability Management
Management Lifecycle
- Implement vulnerability management
- Prioritize remediation efforts
Asset Identification and Conpot
Honeypot Implementation
- Deploy ICS honeypots
- Analyze honeypot data
ICS/SCADA Scanning
Safe Scanning Practices
- Perform safe ICS scanning
- Minimize operational risks
Metasploit and ICS/SCADA
ICS Exploitation Framework
- Use Metasploit for ICS testing
- Develop ICS exploits
Metasploit and Modbus
Modbus Exploitation
- Exploit Modbus protocols
- Use Modbus-specific modules
Metasploit and BACnet
BACnet Exploitation
- Exploit BACnet protocols
- Use BACnet-specific modules
Vulnerability Severity
Severity Assessment
- Assess vulnerability severity
- Calculate risk scores
Common Vulnerability Scoring System (CVSS)
CVSS Implementation
- Calculate CVSS scores
- Apply CVSS in ICS environments
5
Standards and Regulation for Cybersecurity
6%
Standards and Regulations
Regulatory Overview
- Understand regulatory landscape
- Apply compliance requirements
ISO 27001
ISO 27001 Implementation
- Implement ISO 27001
- Maintain ISMS
CFATS
Chemical Facility Anti-Terrorism Standards
- Apply CFATS requirements
- Develop site security plans
IEC 62443
IEC 62443 Framework
- Implement IEC 62443
- Design secure ICS architectures
NIST SP 800-82
NIST ICS Security Guide
- Apply NIST SP 800-82
- Implement NIST controls
Defense in Depth Strategy
Layered Security Implementation
- Design defense in depth
- Implement layered security
Industry Best Practices for ICS
Best Practice Implementation
- Apply industry best practices
- Develop security baselines
ICS/SCADA Regulations Workshop
Practical Compliance Implementation
- Conduct compliance assessments
- Prepare for audits
6
Securing the ICS/SCADA Network
16%
Physical Security
Physical Access Controls
- Implement physical security
- Design access controls
Securing the ICS Protocols
Protocol Security Measures
- Secure ICS protocols
- Implement protocol protections
IPsec
IPsec Implementation
- Configure IPsec
- Implement secure tunnels
IPsec Modes
Transport and Tunnel Modes
- Select IPsec modes
- Configure mode-specific settings
IPsec Rules
Policy Configuration
- Create IPsec policies
- Manage security rules
Firewall Scripting
Automated Firewall Management
- Develop firewall scripts
- Automate rule management
Isolating a Server
Server Isolation Techniques
- Implement server isolation
- Design segmentation architectures
ICS Vulnerability Assessment and Risk Management
ICS Risk Assessment
- Assess ICS risks
- Develop mitigation plans
ICS Testing
Safe Testing Procedures
- Conduct safe ICS testing
- Develop test procedures
7
Bridging the Air Gap
6%
ICS/SCADA Connections
Connection Security
- Secure ICS connections
- Implement data diodes
Next Generation Firewall
NGFW Implementation
- Deploy NGFWs
- Configure advanced features
ICS Monitoring
Monitoring Solutions
- Implement ICS monitoring
- Detect anomalies
Log Aggregation
Centralized Logging
- Implement log aggregation
- Configure log collection
Zone Monitoring
Security Zone Monitoring
- Monitor security zones
- Detect zone violations
SIEM
SIEM Implementation
- Deploy SIEM solutions
- Develop correlation rules
Information Management
Security Information Management
- Manage security information
- Implement data governance
Reports and Alerts
Reporting and Alerting
- Create security reports
- Configure alerts
Incident Investigation and Response
Incident Response Procedures
- Investigate incidents
- Execute response procedures
Log Storage and Retention
Log Management
- Plan log storage
- Implement retention policies
8
Introduction to Intrusion Detection Systems (IDS) and Intrusion Prevention Systems (IPS)
13%
Why Intrusion Detection?
IDS Justification
- Justify IDS deployment
- Understand detection needs
Intrusion Detection 101
IDS Fundamentals
- Understand IDS fundamentals
- Compare detection methods
IDS Features
IDS Capabilities
- Evaluate IDS features
- Select appropriate capabilities
Topology Concerns
IDS Placement
- Design IDS topology
- Optimize sensor placement
Under Attack
Attack Detection
- Detect active attacks
- Minimize false positives
Intrusion Prevention
IPS Implementation
- Deploy IPS solutions
- Configure prevention rules
Types of IPS
IPS Categories
- Compare IPS types
- Select appropriate solutions
Intrusion Analysis
Alert Analysis
- Analyze intrusion alerts
- Reconstruct attacks
Signs of Compromise
IOC Detection
- Identify IOCs
- Detect system compromise
Log Analysis
Security Log Analysis
- Analyze security logs
- Identify attack patterns
Malware
Malware Detection and Analysis
- Detect malware
- Analyze malware behavior
APT Defined
Advanced Persistent Threats
- Understand APTs
- Detect APT activity
MITRE ATT&CK Matrix
ATT&CK Framework Application
- Apply ATT&CK framework
- Map detection capabilities
Event Correlation
Correlation Techniques
- Implement event correlation
- Develop correlation rules
ICS Malware
ICS-Specific Malware
- Identify ICS malware
- Implement ICS-specific detection
How do I earn this certification?
Passing ICS-SCADA earns the ICS/SCADA Cybersecurity Specialist certification. It sits in the Industrial Control Systems Security track.
Next Level Options
- CPENT - Certified Penetration Testing Professional
- LPT Master - Licensed Penetration Tester Master
- ECIH - EC-Council Certified Incident Handler
Alternative Paths
- CCISO - Certified Chief Information Security Officer Executive-level ICS security governance
- ECSA - EC-Council Certified Security Analyst Advanced ICS penetration testing skills
- CHFI - Computer Hacking Forensic InvestigatorICS incident investigation and forensics
- CTIA - Certified Threat Intelligence Analyst ICS threat intelligence and analysis
Practice with Precision
The PlanetCert Simulator mirrors the real exam environment with authentic questions and timed pressure.
How to study for this exam?
The most effective way to prepare for ICS-SCADA is by using the PlanetCert Simulator to practice questions and review detailed explanations.
What's changed on this exam?
Current Status
- ACTIVE
- Last content update: 2024-03-01
Updates
- OPC UA 1.05 Increased focus on OPC UA security in future exam updates • Release date: 2024-06-01
- IEC 61850 Edition 2.1 Enhanced coverage of substation automation security • Release date: 2024-03-15
- Modbus Security Modbus/TCP Security New Modbus security implementation guidelines • Release date: 2024-01-10
Who should take this exam?
This exam is typically taken by System Administrators, Engineers, and other IT professionals administering, patching, securing SCADA, and/or ICS and Security Consultants performing security assessments of SCADA and/or ICS.
- One year of work experience in Information Security domain
- Linux operating system fundamentals, including basic command line usage
- Conceptual knowledge of programming/scripting
- Solid grasp of essential networking concepts (OSI model, TCP/IP, networking devices, and transmission media)
- Understanding of basic security concepts (e.g., malware, intrusion detection systems, firewalls, and vulnerabilities)
- Familiarity with network traffic inspection tools (Wireshark, TShark, or TCPdump)