Skip to main content

CISA Advanced Cybersecurity for Industrial Control Systems

IntermediateOT / ICS SecurityFreeCompletion

CISA's advanced online course on defending industrial control systems, delivered through its Virtual Learning Portal and operated by Idaho National Laboratory. There is no tuition cost. It runs about 12 to 20 hours of coursework, ends in an assessment, and issues a completion certificate plus continuing education units under IACET accreditation. Passing at 80% also qualifies you to attend the in-person ICS301 course.

What you'll prove

  • Apply advanced cybersecurity techniques to defend industrial control system environments
  • Analyze ICS network and component security building on core IT networking fundamentals
  • Meet the 80% assessment standard that qualifies attendance for CISA's in-person ICS301 course

Frequently asked

Is CISA's ICS300 course really free?

Yes. CISA states there is no tuition cost to attend, and the completion certificate and continuing education units are included. The one gate is enrollment: the Virtual Learning Portal requires a corporate, government, military, or education email address.

ICS300 vs a paid ICS certification like GICSP, how do they compare?

They are different kinds of credential. ICS300 is free CISA training that ends in a completion certificate and CEUs, good for building and evidencing OT security knowledge. GICSP is a proctored, exam-based GIAC certification (around $999) that many employers weigh more heavily for hiring. Working professionals often do both: CISA training to learn, a GIAC or similar exam to certify.

What do I get for completing ICS300?

A certificate of completion plus continuing education units under IACET accreditation. Passing the end-of-course exam at 80% or above also makes you eligible to attend CISA's in-person ICS301 course, which adds a hands-on control-systems exercise.