Converged Security: Managing Cyber and Physical Threats
Inquiry This course is not yet bookable.
When digital and physical disruptions happen together, security, IT and crisis leaders need to work together. For one site, you determine who assesses reports, coordinates protective measures and decides when priorities conflict.
In the course case, digital access control fails while physical interference with a network cabinet is reported. IT recommends disconnecting it; site security needs controlled access for responders. Compare two options: disconnect immediately and arrange manual access, or continue operating under monitoring for a short period. What must be in place, and who decides?
Record confirmed information separately from possible causes, arrange handovers between IT, site security and crisis leadership, and write the initial assignments. Develop a procedure for your site or the course case that you can take forward with the responsible specialists.
What you will work on
Organise cyber and physical reports into a shared incident picture that separates facts from hypotheses
Decide when IT, site security and crisis leadership should share information and who makes further decisions
You reconcile conflicting recommendations during an access-control failure.
Who it is for
Security managers
Information security officers
Crisis management leads and site managers
Topics
Cyber-physical dependencies at a site
Report assessment and uncertain causes
Protecting people and maintaining services
Who needs to be informed and who can decide
Service providers, cover arrangements and response interfaces
Your result
Your procedure records who receives digital and physical reports, when IT and site security hand them over and who initiates the first protective actions.
Prerequisites
Basic knowledge of security or information security, or comparable experience in site or crisis work, and authorised information about one site or process. A course case can replace sensitive details.
Format and approach
Planned as four to five hours of self-paced study with a written incident walkthrough and self-checks with explanations. You work through a case involving both digital and physical security.
During a security incident at an energy utility, operations, IT/OT and management need to know who decides and when to involve others. Develop an incident plan for a supply area, including responsibilities and deputies, for discussion with management.
Assess the physical security risks at a site and prepare an action plan. You decide which measures to prioritise and consider how they can be implemented. The plan supports internal review, commissioning and budgeting. Work with your organisation or a course case.
Disconnecting an affected system immediately can limit the spread of a cyber incident, but it also interrupts a critical service. In this course, you decide how to proceed during the first 120 minutes: define the escalation route, prepare a situation picture and issue initial instructions.