Course Description
Segmentation is the single most effective control in industrial cyber security — the discipline of ensuring that a compromise in one place cannot propagate to a plant floor. But industrial networks resist textbook segmentation: legacy protocols, flat historic networks, vendor remote access and relentless pressure for IT/OT data flow all work against it.
This course develops practical capability in OT network security and segmentation. Participants learn industrial network architecture, the Purdue model and its realistic application, DMZ design, industrial firewalls and data diodes, secure remote access for vendors, IT/OT convergence, and how to segment brownfield environments that were never designed for it.
What you will achieve
By the end of this training course, participants will be able to:
- Explain industrial network architecture
- Apply the Purdue model realistically
- Design network segmentation for OT
- Design and implement an industrial DMZ
- Apply industrial firewalls and data diodes
- Secure remote access for vendors and support
- Manage IT/OT convergence securely
- Segment brownfield and legacy environments
How the course is delivered
The course combines network architecture with practical segmentation design exercises on realistic industrial networks. Participants work through zone design, DMZ architecture and remote access scenarios, including brownfield constraints.
The programme addresses the reality of legacy environments rather than assuming a greenfield design.
Designed for
This training course is ideal for:
- OT and control system engineers
- Network and infrastructure engineers
- Industrial cybersecurity professionals
- IT staff supporting industrial operations
- Anyone designing or securing OT networks
Daily programme
- Industrial network architecture
- The Purdue model in practice
- Why OT networks resist segmentation
- Network discovery and documentation
- Zones and conduits applied to networks
- Segmentation strategies
- Industrial DMZ design
- Micro-segmentation considerations
- Industrial firewalls
- Data diodes and unidirectional gateways
- Secure remote access for vendors
- Monitoring and network visibility
- IT/OT convergence
- Data flows and historians
- Segmenting brownfield environments
- Migration planning and workshop
Certification & accreditation
BII Certificate of Completion
BII Certificate of Completion Upon successful completion, participants receive a BII Development Institute Certificate of Completion with a unique reference code that is independently verifiable. Our certificates are recognised internationally and reflect successful completion of your chosen programme.
