Background
This cybersecurity training couses has been developed in collaboration with AIT, The Austrian Institute of Technology and has been successfully delivered worldwide over the past three years. It supports a diverse array of nuclear security stakeholders, ranging from well-established nuclear facilties to emerging initiatives exploring nuclear new-build opportunities.
As existing nuclear facilities are modernised and new ones constructed, their dependence on digital systems is increasing dramatically. This includes the integration of digital systems into everything from business systems to nuclear safety and security systems. These digital technologies are generally categorised as Information Technology (IT) or Operational Technologies (OT). This growing dependence on digital systems brings an ever increasing need to implement strong defense measures to protect digital systems, both IT and OT, from compromise.
Cybersecurity is the protection of digital systems and the information contained within these systems against cyberattacks. Specifically, cybersecurity seeks to protect the confidentiality, integrity and availability of digital systems and the associated data and processes they maintain. Cybersecurity is a subset of information security which looks at the broader protection of information in both digital and physical form. Along with physical protection, cybersecurity needs to be part of the overall security strategy at a nuclear facility, and enhancing cybersecurity capabilities in the nuclear industry is a main priority for WINS.
Objectives
This comprehensive five-day training course is designed to equip nuclear industry professionals with the latest expertise and practical tools for developing and managing robust cybersecurity programmes. Covering data security, information technology (IT), and operational technology (OT), this course blends operational experience with cutting-edge best practices to ensure the effective implementation of cybersecurity within nuclear facilities.
Industry-leading instructors bring real-world cybersecurity experience to the training, ensuring that the course can be tailored to meet the specific capacity-building needs of individual organisations, countries, and regions. As working practioners, they continuously update the material and exercises in line with the latest developments in this fast-paced field.
Upon completion, participants will be prepared to pursue the prestigious WINS Academy Nuclear Security Professional Certification with a specialisation in cybersecurity. Delegates will be offered the opportunity to access the online course materials and to take the certification exam at a PearsonVue Test Centre or OnVUE online proctored exam. This certification is recognised by the UK National College for Nuclear (NCfN) and internationally by IAEA INFCIRC 901.
Audience
There are 20 delagate places.
The target audience of this training are delegates from the UK who have a responsibility for operations of IT and OT systems and equipment and delegates who have a responsibility for managing and leading cybersecurity to protect UK nuclear assets from potential cyberthreats.
The course is also applicable for international delegates wishing to gain deeper understanding of cybersecurity for the nuclear sector.
The training is also appropriate for:
- Facility operators and engineers of OT and IT systems
- Cyber and threat analysts
- Government officials and security officers
- Regulatory inspectors
The course has been designed for anyone new to cybersecurity within the nuclear sector and individuals with no or limited experience with cybersecurity for operational technology. The training will also benefit CISOs and SIROs who are looking for a better understanding of cybersecurity and in particular the balance of IT versus OT. Throughout the course, everything is framed firmly in the nuclear context.
Learner Quotes
The course provides good clarification on what is involved and is required to manage cybersecurity. Terminology explained well.
Really engaging course, thank you. Good resources and learnt a lot. Presentations and Exercises are dynamic too!
Great examples of the importance of understanding vulnerabilities to protect OT and IT systems from cyberattack.
Process
The course will be delivered by a team of tutors with extensive and firsthand knowledge of cybersecurity in the UK and international nuclear sector. Discussion will focus on relevant cybersecurity incidents and the lessons learned from these events, and the lectures will use scenario-based discussions, demonstrations and group exercises related to implementing and managing cybersecurity at a fictitious nuclear power plant to embed the learning. Participant discussions and questions are greatly encouraged.
The training course will be held in English. As with all WINS events, the discussions will be unclassified but subject to Chatham House rules (what was said can be reported, but not attributed).
The venue for the training course is The School of Computing and Communications, InfoLab21, Lancaster University, Lancaster, United Kingdom LA1 4WA
Note: Refreshments and food will be provided during the course and a soiree social evening will be organised on one of the evenings. Please advise of any dietary preferences in advance to ensure they are accommodated.
The per delegate fee for attending the training course is 2,875.00 GBP
Delegates will also need to arrange suitable travel and accommodation. It is recommended that delegates book as early as possible to secure accommodation in close proximity to the Lancaster University campus.
The closest hotel is Lancaster House Hotel, which is situated next to the LU south campus, with footpath connection and a 5 minute walk to InfoLab21. Alternatively, on the LU campus and 10 minutes walk to InfoLab21 is the is onsite: Bed & Breakfast - Lancaster University Additional hotels are available centrally in Lancaster, approximately 10 minutes drive from the campus.
Participants are encouraged to register as soon as possible to secure their seat. Once registration is confirmed, this will be followed up for invoicing and payment to be made prior to attending the training.
