Mike Holcomb's Linkedin Analytics

OT/ICS certifications to level up your knowledge and skills! Check out these recommended role-based cert combinations! Along with some additional tips and tricks. Just remember that certs don't take the place of real experience. But can be a great way to demonstrate your passion. And your growing knowledge. Especially for those new to OT/ICS cybersecurity! Here's to choosing your own learning path: 1. OT Network Engineer -> Security+ -> Network+ -> ISA/IEC 62443 Fundamentals Specialist -> SANS Global Industrial Cyber Security Professional (GICSP) *Some also add in the Cisco Certified Network Administrator. I'd suggest for larger environements with primarily Cisco gear. 2. OT Systems Administrator -> Security+ -> Network+ -> SANS GICSP -> ISA/IEC 62443 Fundamentals Specialist 3. OT Cybersecurity Analyst -> Security+ -> SANS GICSP -> ISA/IEC 62443 Fundamentals Specialist -> ISA/IEC 62443 Risk Assessment Specialist 4. OT Incident Response -> SANS GIAC Certified Incident Handler (GCIH) -> SANS GIAC Response and Industrial Defense (GRID) -> ISA/IEC 62443 Cybersecurity Fundamentals Specialist -> ISA/IEC 62443 Cybersecurity Design Specialist -> ISA/IEC 62443 Cybersecurity Risk Assessment Specialist -> ISA/IEC 62443 Cybersecurity Maintenance Specialist -> ISA/IEC 62443 Cybersecurity "Expert" 5. OT Pentester -> TCM's Practical Network Penetration Tester -> Offensive Security Certified Professional -> SANS GIAC Response and Industrial Defense (GRID) -> ISA/IEC 62443 Cybersecurity Fundamentals Specialist -> ISA/IEC 62443 Cybersecurity Design Specialist -> ISA/IEC 62443 Cybersecurity Risk Assessment Specialist -> ISA/IEC 62443 Cybersecurity Maintenance Specialist -> ISA/IEC 62443 Cybersecurity "Expert" 6. OT Cybersecurity Engineer -> SANS Global Industrial Cyber Security Professional (GICSP) -> SANS GIAC Response and Industrial Defense (GRID) -> Certified Information Systems Security Professional (CISSP) -> ISA/IEC 62443 Cybersecurity Fundamentals Specialist -> ISA/IEC 62443 Cybersecurity Design Specialist -> ISA/IEC 62443 Cybersecurity Risk Assessment Specialist -> ISA/IEC 62443 Cybersecurity Maintenance Specialist -> ISA/IEC 62443 Cybersecurity "Expert" 7. Executive for OT Cybersecurity -> Certified Information Systems Security Professional (CISSP) -> SANS Global Industrial Cyber Security Professional (GICSP) -> ISA/IEC 62443 Cybersecurity Fundamentals Specialist And for those that work in power generation and transmission... Don't forget the SANS GCIP for NERC CIP! No matter your position... -> You need a strong foundation in networking. -> You need a strong foundation in cybersecurity. -> You have to have an understanding the basics of OT/ICS. As you gain more experience. As you gain more knowledge. As you level up your career. No matter which certs you have or don't have... Never stop learning! P.S. What changes would you make?