ICS4ICS Specific Training

These training courses were developed to provide more information about ICS4ICS.
ICS4ICS Overview training provides information about the ICS4ICS methodology that brings together multiple disciplines: 

Incident Command System

Cybersecurity Incident Response

Industrial Control Systems

hero-jobbies-7

ICS4ICS TRAINING MODULES

ICS4ICS Overview Training is available to help you better understand the approach. This training course will prepare you to attend an ICS4ICS Exercise, and provide knowledge about the three components of ICS4ICS:

  • Incident Command System and the Planning P processes used to manage incidents
  • Cybersecurity basic principles, including an overview of Computer Incident Response Team (CIRT) processes
  • Industrial Control Systems (ICS) overview, including the challenges required to manage and secure these systems

Duration: 2 hours

Training Modules:

The ICS4ICS Workshop provides in-depth information about how the Incident Command System is used to manage cybersecurity incidents impacting Industrial Control Systems.

Workshop Modules:
Meeting and Briefing information that will be used in the ICS4ICS Exercise:

ICS4ICS Training to Obtain Credentials

These are the training courses required to obtain ICS4ICS Type 4 credentials that would (single company, single asset) leadership roles to manage a cyber incident:

Course

Course Registration

Prerequisite

Type of learning

Cost

Course Duration

IS-100: Introduction to the Incident Command System, ICS-100

https://www.firstrespondertraining.gov/frts/npccatalog?id=2304

none

Distance learning

Free

2 hours

IS-700: National Incident Management System, An Introduction

https://www.firstrespondertraining.gov/frts/npccatalog?id=2404

IS-100

Distance learning

Free

3.5 hours

IS-200: Incident Command System for Single Resources and Initial Action Incidents

https://www.firstrespondertraining.gov/frts/npccatalog?id=2322

IS-100

Distance learning

Free

4 hours

IS-800: National Response Framework, An Introduction

https://www.firstrespondertraining.gov/frts/npccatalog?id=2413

IS-200

Distance learning

Free

3 hours

IS-706: National Incident Management System Intrastate Mutual Aid – An Introduction

https://training.fema.gov/is/courseoverview.aspx?code=IS-706&lang=en

IS-700

Distance learning

Free

2.5 hours

The ICS forms course provides details about the ICS forms and how to use them: FEMA - Emergency Management Institute (EMI) Course | IS-201: Forms Used for the Development of the Incident Action Plan

The training requirements for ICS4ICS Type 3 (single company, multiple assets) leadership roles to manage a cyber incident are still being developed. 

NOTE:  When registering for FEMA training you will have to create a UserID. If you don’t have a USA mail address, please use ISA's address: 3252 S. Miami Blvd., Suite 102, Durham, NC 27703 USA.

 

External Training Providers

The following external providers offer online virtual training:

Course

Company

Course Registration

Cost

Format

FEMA Accepted

ICS 300

thebluecell.com

NIMS ICS 300 Online Instructor Led Course - ICS 300 Certification – The NIMS Store

Discount code ICS4ICS

Online instructor led

Yes

ICS 300

thebluecell.com

ICS 300: Intermediate Incident Command System for Expanding Incidents – The NIMS Store

Discount code ICS4ICS

Online instructor led

Yes

ICS 300

thebluecell.com

ICS 400 Online Instructor Led - Advanced Incident Management System for General Staff – The NIMS Store

Discount code ICS4ICS

Online instructor led

Yes

ICS 300

thebluecell.com

ICS 400: Advanced Incident Command System for Command and General Staff – The NIMS Store

Discount code ICS4ICS

Online instructor led

Yes

ICS 300

thebluecell.com

G191 ICS EOC Interface Online Instructor Led - FEMA G191 Online – The NIMS Store

Discount code ICS4ICS

Online instructor led

Yes

ICS 300

thebluecell.com

G 2300 Online Instructor Led Course - Emergency Operations Center Functions Training – The NIMS Store

Discount code ICS4ICS

Online instructor led

Yes

 

ICS4ICS Credentials

“For many years, we’ve needed ICS4ICS to enable collectively organized cyber and physical responses in a unified way. Credentialing cybersecurity first responders is an important milestone in this valuable public-private partnership,” said Megan Samford, ISAGCA Advisory Board Chairperson, VP and Chief Product Security Officer of Schneider Electric’s Energy Management Business.

The ICS4ICS Credentialing Program was announced in July 2021, ISAGCA and ICS4ICS Announce Cybersecurity First Responder Credentialing Program

 

ICS4ICS credentials can be obtained by people who want to fill the various roles needed to manage a cybersecurity incident impacting industrial control systems:

  • Incident Commander

  • Operations Section Chief

  • Planning Section Chief

  • Logistics Section Chief

  • Admin/Finance Section Chief

  • More roles will be added in the future

The ICS4ICS credential process will be managed by the ICS4ICS Adjudication Committee.  Training to obtain credentials is provided by FEMA. 

 

We will provide instructions for people to apply for ICS4ICS Credentials in the near future.

 

 

ICS4ICS Credential Requirements

These are the main requirements to obtain ICS4ICS credentials:

  • Training

  • Skills

  • Experience

Credential requirements for other ICS4ICS roles will be defined including training, skills, and experience.

 

ICS4ICS Credential Adjudication

Adjudication is the process of approving credential applications.

 

ICS4ICS Adjudication process steps

This is the process the Adjudication Committee will follow to approve credentials:

  1. Review each candidate’s application package (position passbook)

    1. Application package is presented to members of the Adjudication Committee

      1. Quorum rules require 80% of Adjudication Committee to be present

    2. Members review the applications and identify any areas of deficiency

    3. Members vote to approve the application or reject the application or accept the application with deficiencies to be remediated in a stated timeframe

    4. Applicant is informed of a “Go” or “Go with Condition” decision

  2. Approved packages will be retained

If you are interested in obtaining credentials, complete this form.