CISA Industrial Control Systems Evaluation
CISA's free online course on evaluating the cybersecurity posture of an industrial control system, delivered through its Virtual Learning Portal. It centers on CISA's CSET tool and a simulated ICS scenario, runs roughly 15 to 20 hours over a two-week period, and issues a completion certificate plus continuing education units under IACET accreditation. ICS300 and ICS301 are not required first.
What you'll prove
- Conduct a structured self-evaluation of an industrial control system network
- Use CISA's CSET tool within a simulated ICS scenario to assess cybersecurity posture
- Analyze, evaluate, and document the cybersecurity posture of an ICS environment
Frequently asked
Is ICS401 free?
Yes. CISA states there is no tuition cost, and the completion certificate and continuing education units are included. Enrollment requires a corporate, government, military, or education email address and an approval step before access is granted.
Do I need ICS300 or ICS301 before ICS401?
No. CISA states explicitly that completing ICS300 and ICS301 is not a prerequisite for this course, so you can take the evaluation course on its own.
What does ICS401 actually cover?
It walks through analyzing, evaluating, and documenting the cybersecurity posture of an industrial control system, using CISA's CSET tool against a simulated ICS scenario. It is the evaluation and self-assessment counterpart to the defense-focused ICS300 course.