Security in Industrial Control Systems
2026/2027Danish title
Sikkerhed i industrielle
kontrolsystemer
Study programme
Cyber Security SHORT
Type of education
Full time education
Level of education
Bachelor Programme
Semester
3. semester
Duration of the
subject/module
1 semester
Ects
10
Programme elements
Elective
Language
English
Start time
Autumn
Spring
Location
Guldbergsgade 29 N, København N
Subject number
1122303
- Purpose and learning objectives
This course provides an introduction to cybersecurity in Industrial Control Systems (ICS) and Operational Technology (OT) environments. The course focuses on how security in OT differs from traditional IT security and why industrial environments require specialized protection strategies. Students will gain insight into the architecture and components of ICS environments, including PLCs, HMIs, SCADA systems, sensors, and industrial networks.
Knowledge
Through practical exercises and case-based learning, students will gain hands-on experience with PLC communication, industrial protocols, and the assessment of security in industrial systems.• The architecture and components of Industrial Control Systems, including PLCs, HMIs, SCADA systems, sensors, actuators, and industrial networks.
Skills
• Differences between IT and OT security, including operational requirements such as availability, safety, and real-time constraints.
• Common industrial communication protocols and their security implications.
• The Purdue Enterprise Reference Architecture (Purdue Model) and network segmentation principles in OT environments.
• Threat actors, attack patterns, and attack chains targeting industrial environments.
• Common vulnerabilities and security challenges in ICS and OT systems.
• Principles of monitoring, detection, and incident handling in industrial environments.
• Basic concepts of risk management and defense-in-depth strategies for ICS security.• Identify and analyze security risks in industrial control systems.
Competences
• Configure and implement basic security measures in ICS/OT environments.
• Communicate with and perform basic programming/configuration of PLCs and HMIs.
• Analyze industrial network traffic and communication protocols.
• Apply segmentation and hardening principles in industrial environments.
• Detect and respond to basic security incidents in OT systems.
• Assess the security posture of a simple ICS/OT setup and recommend relevant improvements.• Identify and analyze security risks in industrial control systems.
• Configure and implement basic security measures in ICS/OT environments.
• Communicate with and perform basic programming/configuration of PLCs and HMIs.
• Analyze industrial network traffic and communication protocols.
• Apply segmentation and hardening principles in industrial environments.
• Detect and respond to basic security incidents in OT systems.
• Assess the security posture of a simple ICS/OT setup and recommend relevant improvements. - Type of instruction
Teaching in the Cybersecurity programme is conducted as a dynamic and interactive process, with a strong emphasis on active student participation. The teaching is based on relevant industry practices and combines practical experience with theoretical knowledge. Problems and cases from different types of companies within the IT industry are incorporated into the learning activities. Students are expected to take responsibility for their own learning, and both students and lecturers contribute constructively to the learning process.
To ensure optimal academic learning and personal development for each student, the programme applies a varied pedagogical approach with emphasis on dialogue, discussion, and project-based learning.
Teaching is organized through a variety of learning activities, including classroom teaching, guest lectures, company visits, group project work, and individual assignments — often involving interdisciplinary challenges and always with an application-oriented perspective. In addition to the academic content, these different learning methods help develop the students’ ability to work both independently and collaboratively.
Common to all these activities is that EK consistently aims to establish clear objectives for the learning activities. - Exam
The learning outcomes of the exam are identical with the learning outcomes of the subject(s)/modul(es)
Exam in one or more subjectsSubject/module is tested standaloneType of examOral examinationIndividual exam or group examIndividualExam languagesEnglishDuration30 minutes, including deliberation.
The student starts with a 10 minutes presentation.Type of evaluation7-point grading scaleExaminersInternal censure
53
hours of teaching
221
hours of
preparation
The figure
shows the extent of workload related to the subject divided into
different study activities.
In the subject Security in Industrial Control Systems you will receive 53 hours of instruction, which corresponds to 70 lessons (1 lesson = 45 min.) and 19% of your total workload for the subject.
The teaching primarily consists of the following activities: classroom teaching, group work, exercises.
The preparation primarily consists of the following activities: group work, exercises.
Read about KEAs Study Activity Model
*KEA can deviate from the number of hours if this is justified by special circumstances
In the subject Security in Industrial Control Systems you will receive 53 hours of instruction, which corresponds to 70 lessons (1 lesson = 45 min.) and 19% of your total workload for the subject.
The teaching primarily consists of the following activities: classroom teaching, group work, exercises.
The preparation primarily consists of the following activities: group work, exercises.
Read about KEAs Study Activity Model
*KEA can deviate from the number of hours if this is justified by special circumstances