You're now visiting the official Saudi
website of GLOMACS International

Process Control Cybersecurity

An Interactive 5-Day Training Course

Process Control Cybersecurity

Securing your Oil & Gas Assets

NASBA
Classroom Schedule
Date Venue Fees
20 - 24 Apr 2026 Dubai $ 5,950
29 Jun - 03 Jul 2026 London $ 5,950
21 - 25 Sep 2026 Dubai $ 5,950
02 - 06 Nov 2026 London $ 5,950
Online Schedule
Date Venue Fees
21 - 25 Sep 2026 Online $ 3,950

Introduction

This Process Control Cybersecurity training course will address the most important issues related to the protection of assets in a process control environment. Unlike traditional IT (information technology) systems, process control assets include IACS (Industrial Automation and Control Systems) which need to be protected.

Recently, three out of four organizations in the oil and natural gas industry in the Middle East have experienced a security compromise that resulted in the loss of confidential data or Operational Technology (OT) disruption. This is according to a recent study by Siemens and the Ponemon Institute. Another finding in the report is that – organizations believe that roughly one in every two cyber-attacks against the OT environment actually goes undetected. The report also notes that the oil and gas industry is the target of as much as one-half of all cyberattacks in the Middle East and given its importance for the region’s economies, the risks faced by the industry are all the more pressing. OT, which encompasses systems that monitor and control physical devices and industrial processes, is increasingly interconnected with IT networks. In spite of all its benefits, this IT/OT convergence is opening up new avenues for attacks.

This GLOMACS Process Control Cybersecurity training course will highlight:

  • Process Control Assets to be protected
  • The Current Industrial Security Environment
  • The Process Control Security Standard IEC 62443
  • Risk Assessment and Cybersecurity Counter-measures
  • Application diagnostics, troubleshooting, and incidence response

Objectives

At the end of this Process Control Cybersecurity training course, you will learn to:

  • List what process control assets need to be protected
  • Understand the Current Industrial Security Environment
  • List and explain the main components of the process control security standard IEC 62443
  • Understand how to perform risk assessment and apply cybersecurity counter-measures
  • Learn how to perform application diagnostics, troubleshooting, and incidence response

Training Methodology

This Process Control Cybersecurity training course will utilize a variety of proven adult learning techniques to ensure maximum understanding, comprehension and retention of the information presented. This would include, but not be limited to, effective presentations, open discussions, simulations, paper exercises, individual and group exercises, as well as small subject evaluations at the completion of every chapter. Questions are encouraged at all times.

Organisational Impact

Upon returning to their organization, delegates will be able to contribute to the successful execution of the following tasks and capabilities:

  • Discovering of threats, vulnerabilities affecting a process or plant
  • Performing appropriate asset identification and impact assessment
  • Using and implementing the standard IEC 62443
  • Performing appropriate risk analysis and risk identification
  • Addressing security risks
  • Protecting process and plant assets
  • Implementing process control security counter-measures
  • Performing application diagnostics and troubleshooting
  • Implementing cybersecurity operating procedures and incident response
  • Implementing a cybersecurity process
  • Having staff that can make valuable input pertaining to Cybersecurity Operating Procedures & Tools and Incident Response

Personal Impact

On this Process Control Cybersecurity training course, participants will gain knowledge and learn to apply themselves, fully, in matters pertaining to Process Control Cybersecurity. Such skills and knowledge should result in better career prospects within the organization, and will play a meaningful role in their abilities to be leaders in their field of expertise.

From a personal impact point of view, this Process Control Cybersecurity training course will increase your knowledge and experience involving:

  • Cybersecurity principles
  • The main cybersecurity standards
  • Cybersecurity best practices
  • The main cybersecurity counter-measures
  • Techniques for cybersecurity diagnostics and troubleshooting
  • Cybersecurity operating procedures  & tools
  • Procedures for cybersecurity incident response
  • Your ability to show to your organization that you are a valuable team member, and that you can be further developed for senior roles, where necessary

In addition, delegates will have an opportunity to share cybersecurity experiences and knowledge with fellow delegates and the Instructor.

Who should Attend?

This GLOMACS Process Control Cybersecurity training course is suitable to a wide range of professionals but will greatly benefit:

  • Operations and Maintenance Personnel
  • Process Control Operators, Engineers
  • Process, Plant, and Project Managers
  • Process Engineers and Managers
  • Instrumentation Technicians and Engineers
  • System Integrators
  • IT/OT Engineers and Managers Industrial Facilities
  • IT/OT Corporate / Security Professionals
  • Plant Safety, Security, and Risk Management
  • Security Personnel in all categories
  • Any individual that needs to address issues in the ever expanding and complex field of cybersecurity in the industrial environment
Course Outline
Day 1

Introduction and Cybersecurity Fundamentals

  • Introduction to Process Control Cybersecurity
  • Understanding the Current Industrial Security Environment
  • How IT and OT (Operational Technology) in the Plant Floor are Different and How They are the Same
  • Overview of Process Control
  • Overview of Industrial Communication Systems and Networks
  • How Cyber-attacks Happen:  Threats, Vulnerabilities, Attacks
  • Asset Identification and Impact Assessment
Day 2

Introduction to the IACS Cybersecurity Lifecycle and ISA99 / IEC 62443

  • Identification & Assessment Phase
  • Design & Implementation Phase
  • Operations & Maintenance Phase
  • Limits of a Conventional IT Approach
  • The IEC 62443 Security Approach and Standards
  • Risk Analysis Risk Identification, Classification, and Assessment
  • CAL (Cybersecurity Assurance Levels)
  • Functional Requirements of IEC 62443
Day 3

Addressing Security Risks: Process Control Security Counter-measures

  • Antivirus, Anti-spyware
  • Firewalls, Traffic Analyzers
  • Encryption, Virtual Private Networks (VPNs)
  • Passwords - Authentication Systems
  • Access Control - Intrusion Detection / Prevention
  • Network Segmentation
Day 4

Application Diagnostics and Troubleshooting

  • Interpreting Device Alarms and Event Logs
  • Early Indicators
  • Network Intrusion Detection Systems
  • Network Management Tools
  • Interpreting OS and Application Alarms and Event Logs
  • Application Management and Whitelisting Tools
  • Antivirus and Endpoint Protection Tools
  • Security Incident and Event Monitoring (SIEM) Tools
Day 5

IACS Cybersecurity Operating Procedures & Tools and Incident Response  

  • Developing and Following an IACS Management of Change Procedures
  • IACS Configuration Management Tools
  • Developing and Following an IACS Patch & Antivirus Management and Cybersecurity Audit Procedures
  • Patch Management Tools
  • Antivirus and Whitelisting Tools
  • Auditing Tools
  • Developing and Following an IACS Incident Response Plan
  • Incident Investigation and System Recovery
Certificates
  • On successful completion of this training course, GLOMACS Certificate will be awarded to the delegates. Continuing Professional Education credits (CPE): In accordance with the standards of the National Registry of CPE Sponsors, one CPE credit is granted per 50 minutes of attendance.
Providers and Associations

Endorsed Education Provider

KHDA
NASBA

In Association With

Options & Brochure
Related Courses
Frequently Asked Question

No. Saudi GLOMACS delivers courses in Saudi Arabia and internationally, including delivery across Europe and Asia. This allows organisations and professionals to access training both locally and abroad.

No. While governance and leadership are part of the portfolio, Saudi GLOMACS delivers training across the entire business and professional lifecycle, including administrative, technical, legal, regulatory, and sector-specific training.

Yes. Saudi GLOMACS designs and delivers bespoke in-house training tailored to organisational objectives, sector requirements, and workforce needs. Training can be delivered in Saudi Arabia or internationally, depending on requirements.

Courses delivered in Saudi Arabia are adapted to reflect local regulatory frameworks, organisational structures, sector conditions, and professional expectations. This ensures training is relevant, practical, and aligned with Saudi workplace realities.

GLOMACS has been delivering professional training for over thirty years, with courses delivered across Europe, the Middle East, Asia, and other international markets.

Saudi GLOMACS combines three decades of global training experience with a clear focus on Saudi market relevance. This allows it to deliver training that is both internationally credible and locally applicable, across a broader range of disciplines than niche or single-focus providers.

Saudi GLOMACS is a Saudi-based professional training provider delivering courses tailored to the Saudi market and applicable internationally. It operates within the global GLOMACS framework and draws on more than three decades of international training experience.

Saudi GLOMACS offers professional training across a wide range of disciplines, including administration, leadership and management, governance and regulation, law, oil and gas, energy, engineering, finance, digital technologies, and sector-specific specialisations.

Training supports professionals across all career stages, from operational roles to specialist and senior responsibilities.

Participants include professionals from public sector, semi-government, and private sector organisations, across a wide range of roles and industries. Attendees range from administrative and operational professionals to technical specialists, managers, and senior decision-makers.

Related Categories