A focused graduate certificate that teaches hands-on skills for securing industrial control systems (ICS) and operational technology (OT). Suited to experienced infosec practitioners or OT professionals who want practical detection, incident response and hardening techniques for critical infrastructure environments.
The curriculum combines core ICS security courses, a specialization elective and a technical elective, delivered as SANS course + GIAC exam pairings. Core requirements (6 credits):
Specialization elective (3 credits) — choose one:
Technical elective (3 credits):
Skills emphasized include ICS and OT architecture analysis, threat detection in industrial environments, securing PLCs/SCADA/control networks, and risk assessment for critical infrastructure systems. The program integrates hands-on labs, incident response practice and GIAC certification preparation.
Admissions accept applications monthly; apply by the 15th of any month to receive a decision about 30 days later. Applicants must have professional experience and be currently working in an information security or related role. Courses start as soon as one month after admission depending on scheduling.
Graduates report strong earning potential; median reported earnings from program alumni are $156,000 USD. The certificate prepares practitioners for ICS/OT-focused roles involving detection, incident response, security engineering and risk assessment in critical infrastructure sectors. Earning included GIAC certifications supports employer recognition of skills and interview selection.
The program lists a total tuition cost of $22,800 USD and provides SANS.edu academic pricing on SANS courses and GIAC certifications. Prospective students should consult SANS Technology Institute for current funding options, installment plans, employer tuition support possibilities, and any scholarship offerings.
Shortlist scholarships and plan your application — free guidance from our advisors.