Course FS3E
Cyber HAZOP Analysis

Information about course FS3E

The Cyber HAZOP Analysis course focuses on cybersecurity risk assessments using Cyber-HAZOP and Cyber-LOPA methodologies, aligned with ISA TR84.00.09-2017 and IEC 62443/61511 standards. Participants work with an Excel-based tool to evaluate vulnerabilities, threats, and required Security Levels (SL).
The course covers risk concepts, differences between IEC 62443 and IEC 61511 lifecycles, and practical examples applying Cyber HAZOP and Cyber LOPA to real-world cases, including cyber-attack likelihood assessments.
It includes hands-on exercises and three case studies, with solved and unsolved versions for practice. Participants also learn how to verify Security Levels (SL) using the provided Excel tool.
The course offers 45 days of access to PDFs, videos, and tools, plus a 1-year license for the Risk Analysis Excel Tool. No prior cybersecurity experience is required, and an optional CyberHAZOP Engineer certification exam is available.

Course details

MODALITY

Online (with/without live classes)

AREA

SIS

TRAINER

SafetyandSIS Trainers

LANGUAGE

English

  • How risk is quantified.
  • Examples in “safety” and “security”.
  • Risk Gap, Tolerable Risk, Layers of protection.
  • The Risk Matrix for safety.
  • The Risk Matrix for cybersecurity.

  • Similarities in life cycle.

  • Concepts: SIF, SIL, SIS, SL.

  • IEC62443: High-level assessment, detailed assessment, Zones and Conduits.

  • Vulnerabilities: Assessment, public databases, examples, etc.

  • Threats: Sources, attack vectors, etc.

  • Explanation of the Excel tool of the course.

  • Basic example of HAZOP and LOPA (for non-HAZOP experts).

  • Cybersecurity Risk Assessment: Methodologies proposed in ISA TR84.00.09, consequence-driven method (SPR), assessment with probability, advantages and limitations of each method, examples with Excel Tool.

  • Explanation of the case study (industrial process).

  • Result of HAZOP/LOPA with Excel Tool.

  • High level Cyber HAZOP: a)Advantages of SPR method; b)Use of cyber-attack likelihood; c)Calculation of required SL; d)Non-hackable layers; e)How to calculate cyber-attack likelihood; f)Results with Excel Tool.

  • Cyber LOPA: Calculation of CRRF and required SL and other considerations. Results with Excel Tool.

  • Explanation of the 3 case studies.

  • Excel Tool with CyberHAZOP-CyberLOPA unsolved cases.

  • Excel Tool with CyberHAZOP-CyberLOPA solved cases.

  • IEC 62443 requirements (foundational and system requirements).

  • Example of a detailed Cyber Risk Assessment.

  • Examples of Security Level Verification with Excel Tool.

Who is the course for?

The course is especially aimed at HAZOP-LOPA technicians in the process industry due to the need to incorporate the cybersecurity assessment required in IEC 61511 (clauses 8.2.4 and 11.2.12). No knowledge of cybersecurity is required. The course is also of interest to cybersecurity technicians from the IT world who will be involved in cybersecurity risk assessment in the OT world.

Course documentation

  • PDF files of the contents.
  • Excel tool for HAZOP-LOPA- Cyber-LOPA (1 year license).
  • Course certificate after final Test.
players

Price

Online (FS3E-WI)

570 €
  • Course in english for 1 participant
  • 45 days of free access to the virtual classroom with the contents (PDF, Excel Tool, 6 Videos with explanations spoken in English with optional subtitles in English)
  • License of 1 year of Risk Analysis Excel Tool is included
  • The duration of the course is between 5 and 8 hours depending on previous knowledge.
BUY

Course Gallery

SIS safety and security lifecycle
concepts of cybersecurity
hackable scenario, iec62443
security levels, iec62443
players
network example
SIS attack surfaces
assessment flowchart
Pid for case study
IEC62443 foundational requirements