CompTIA SecOT+ (SOT-001) Complete OT Security Course

Prepare for the CompTIA SecOT+ SOT-001 exam covering OT security, ICS/SCADA risks, threat intelligence, architecture, and response to incidents.

  • 8 sections · 51 lessons · 10h 20m total
  • Online, self-paced

Get On Udemy (opens in a new tab)

CompTIA SecOT+ (SOT-001) Complete OT Security Course

What you'll learn

  • Implement OT safety protocols, foundational control theories, and knowledge of industrial protocols to safeguard individuals and processes in ICS and SCADA settings.
  • Evaluate and prioritize risks to OT cybersecurity, decide on appropriate responses, and manage transitions without disturbing plant operations.
  • Recognize OT threat actors, analyze attack vectors, and study actual incidents, utilizing indicators of compromise and TTPs for threat hunting.
  • Develop secure OT systems architecture incorporating network segmentation, device hardening, identity and access control, and network monitoring.
  • Conduct OT security operations, focusing on asset inventory, log examination, patch application, vulnerability oversight, and control of removable media.
  • Handle OT incidents through proper evidence management, effective containment, eradication approaches, and safe recovery practices.
  • Engage in a comprehensive capstone project related to a water plant incident, with performance assessed by examination domains to inform your review process.
  • Craft a preparation strategy for the CompTIA SecOT+ SOT-001 exam, including tips for exam day and a detailed breakdown of the six domains.

Course outline

8 sections · 51 lessons · 10h 20m total

Module 1 — OT Systems and Safety Foundations Domain 1.0, 14% 5 lessons · 1h 6m
  1. 1.1 Safety Comes Before the Keyboard (objective 1.1) Free Preview On Udemy 10:52
  2. 1.2 Inside the Plant: What Makes OT Different (objective 1.2) Free Preview On Udemy 12:44
  3. 1.3 How the Plant Decides: Control Theory Basics (objective 1.3) 11:42
  4. 1.4 How the Plant Talks: Mediums and Protocols (objective 1.4) 16:04
  5. 1.5 Old Iron, New Stack: OT Infrastructure (objective 1.5) 14:40
Module 2 — OT Risk Management Domain 2.0, 17% 5 lessons · 1h 10m
  1. 2.1 Security Answers to the Business (objective 2.1) Free Preview On Udemy 12:34
  2. 2.2 Running the Program: OT Security Management (objective 2.2) 15:10
  3. 2.3 Measuring Danger: OT Risk Assessment (objective 2.3) 17:12
  4. 2.4 After the Assessment: Deciding and Watching (objective 2.4) 12:52
  5. 2.5 Change Without Chaos: OT Change Management (objective 2.5) 12:17
Module 3 — OT Threat Intelligence Domain 3.0, 14% 7 lessons · 1h 45m
  1. 3.1 Know Your Adversary: Threat Intelligence (objective 3.1) Free Preview On Udemy 14:22
  2. 3.2 Direct-Impact OT Cyber Events (objective 3.2) 18:03
  3. 3.3 Indirect-Impact OT Cyber Events (objective 3.2) 15:43
  4. 3.4 Who's Coming for the Plant? (objective 3.3) 14:40
  5. 3.5 Every Way Into the Plant (objective 3.3) 17:04
  6. 3.6 Where Intelligence Comes From (objective 3.4) 13:17
  7. 3.7 Hunting for Trouble (objective 3.4) 11:51
Module 4 — OT Cybersecurity Architecture, Design, & Engineering Domain 4.0, 18% 12 lessons · 2h 36m
  1. 4.1 Built to Contain (objective 4.1) Free Preview On Udemy 12:59
  2. 4.2 Built to Keep Running (objective 4.1) 13:10
  3. 4.3 Guard the Physical Site (objective 4.2) 15:33
  4. 4.4 Harden the Controller (objective 4.3) 14:12
  5. 4.5 Trust Starts in the Hardware (objective 4.3) 14:03
  6. 4.6 Defend Every Host (objective 4.4) 12:14
  7. 4.7 Run Only What You Trust (objective 4.4) 12:55
  8. 4.8 Who Gets On, What Gets Through (objective 4.5) 12:13
  9. 4.9 Draw the Lines Between Zones (objective 4.5) 12:56
  10. 4.10 Watch the Network (objective 4.5) 12:03
  11. 4.11 Know Who's Knocking (objective 4.6) 11:37
  12. 4.12 One Door, Checked Every Time (objective 4.6) 11:54
Module 5 — OT Security Operations Domain 5.0, 22% 11 lessons · 2h 3m
  1. 5.1 Find What You Own (objective 5.1) Free Preview On Udemy 11:22
  2. 5.2 Describe What You Found (objective 5.1) 11:36
  3. 5.3 Read the Process and the Wire (objective 5.2) 11:26
  4. 5.4 Read the Hosts and the Hunt (objective 5.2) 12:47
  5. 5.5 Tune the Tools (objective 5.2) 12:03
  6. 5.6 Choose the Fix (objective 5.3) 11:16
  7. 5.7 Fix It Without Stopping the Plant (objective 5.3) 10:37
  8. 5.8 Find the Weakness (objective 5.4) 11:16
  9. 5.9 Rank, Fix, Prove (objective 5.4) 10:27
  10. 5.10 Every Stick Is a Visitor (objective 5.5) 10:13
  11. 5.11 Guests With Laptops (objective 5.5) 10:08
Module 6 — OT Incident Management Domain 6.0, 15% 8 lessons · 1h 22m
  1. 6.1 Incident Management Frameworks (objective 6.1) Free Preview On Udemy 11:10
  2. 6.2 Who Responds (objective 6.2) 09:54
  3. 6.3 Who Helps and Who's Told (objective 6.2) 09:39
  4. 6.4 Preparing for Incidents (objective 6.3) 09:43
  5. 6.5 Get Ready to Respond (objective 6.4) 10:19
  6. 6.6 Impact and Evidence (objective 6.4) 11:15
  7. 6.7 Analyzing IR Data Sets (objective 6.5) 09:30
  8. 6.8 Containment, Eradication, and Recovery (objective 6.6) 10:20
Module 7 - Capstone Project and Course Closeout 3 lessons · 18m
  1. 7.1 Capstone Night Shift 06:04
  2. 7.2 Capstone Project Debrief 07:23
  3. 7.3 Course Closeout 04:34
Final Practice Test 0 lessons

About this course

This course incorporates artificial intelligence usage.

Prepare for the CompTIA SecOT+ (SOT-001) certification with a comprehensive on-demand course focused on OT cybersecurity, aligned with every exam domain. This SecOT+ course adheres to the official exam objectives, allowing you to study confidently from the very beginning.

Operational technology oversees essential services like power grids, water treatment facilities, refineries, factories, and building systems. Ensuring its security involves safeguarding processes and personnel, not just data. This course is designed for control engineers new to cybersecurity and IT professionals who are new to the operational environment.

What you'll learn:

  • Foundations of OT systems and safety: established safety measures, control principles, industrial communication protocols, and legacy systems
  • Management of OT risks: governance, compliance, assessing risks, responding to risks, and managing changes
  • Understanding OT threat intelligence: various threat actors, methods of attack, real incidents, sources of intelligence, and hunting with indicators
  • Creating secure OT architecture: network segmentation, device hardening, control of identity and access, and monitoring networks
  • Executing OT security operations: maintaining an asset inventory, analyzing logs, applying patches, managing vulnerabilities, and controlling removable media
  • Managing OT incidents: frameworks for response, handling evidence, containment strategies, elimination of threats, and recovery processes

Course format:

  • Concise video lessons focused on exam objectives
  • Practical examples drawn from ICS, SCADA, and critical infrastructure situations
  • Interactive online toolkits for practical experience that require no installation
  • A complete capstone project, "Night Shift at the Water Plant," that evaluates everything in one incident and provides scoring by domain
  • A final summary that discusses study strategies and preparation for exam day

Recommended experience: CompTIA suggests having at least three years in hands-on OT roles and two years in OT security implementation, but driven learners with either an engineering or IT background can keep pace.

This course serves as an independent resource for study. It is not created by, endorsed by, or associated with CompTIA. CompTIA and SecOT+ are trademarks of CompTIA, Inc.

Who this course is for

  • Control engineers, technicians, and operators transitioning into roles in OT cybersecurity.
  • IT security professionals, analysts, and SOC personnel tasked with securing industrial settings.
  • OT cybersecurity engineers and ICS/SCADA security experts readying for the CompTIA SecOT+ SOT-001 exam.
  • Professionals in plants, utilities, and manufacturing accountable for risk management, compliance, or incident response in critical infrastructure.

CompTIA SecOT+ (SOT-001) Complete OT Security Course

Get On Udemy (opens in a new tab)