Growth of tech-infused, connected manufacturing facilities demands new security models.
CompTIA, the leading global provider of vendor-neutral information technology (IT) training and certification products, announced that it will begin development of a new certification focused on critical cybersecurity skills in operational technology (OT).
CompTIA’s proposed SecOT+ certification will bridge critical knowledge and skill gaps between OT and IT. The certification will equip OT positions such as floor technicians and industrial engineers, and cybersecurity engineers and network architects on the IT side, with a common skills toolkit to manage, mitigate and remediate security risks in manufacturing and critical infrastructure environments.
“With technology continuing to expand across physical environments, it presents both opportunities and challenges,” said Katie Hoenicke, senior vice president, product development, CompTIA. “As the industry-recognised leader in building and validating security skills, CompTIA is eager to bring this rigour and dedication to the OT space.”
CompTIA’s best-in-class, ISO-accredited certification development process will formally begin later this year on SecOT+. As with all CompTIA certifications, practical, hands-on training with real-world scenarios will be emphasised.
Increasingly, manufacturing plants, power grids, water utilities, oil and gas production and transmission facilities and other industries are the targets of a variety of cyberattacks, including malware, ransomware and denial-of-service attacks. These attacks threaten continuity, integrity and safety in industrial networks and critical infrastructures.
“Governments, industry leaders and cybersecurity techs are struggling to address the human and economic impact of critical infrastructure attacks,” said James Stanger, chief technology evangelist, CompTIA. “It’s time to streamline these efforts by creating a scalable, cutting-edge and cost-effective programme. That’s the best way to counter the emergence of AI-powered cyberattacks on our global infrastructure.”
CompTIA’s proposed SecOT+ certification will focus on the following core domains:
- Risk assessment-driven approaches to cybersecurity
- Compliance and regulatory frameworks for OT
- Hardening techniques and secure configurations
- Managing third-party risks and supply chain security
- Integrating and securing legacy systems
According to CompTIA analysis of Lightcast job posting data, US employers attempted to recruit candidates for more than 180,000 positions across operational technology job roles during 2024. This is in addition to an employment base of millions of OT professionals employed in industry sectors.