Yes. The training is aimed at professionals with prior experience or regular exposure to industrial environments, OT, or technology supplier management.

Because the supply chain has become one of the main risk and dependency factors in modern industrial operations. The course provides a practical and realistic perspective on how to manage that complexity.

Block 1. Understanding the extended industrial ecosystem

• Reconstruct real architectures of critical industrial processes.
• Identify assets, flows, dependencies, and relevant stakeholders.
• Translate technological risks into business impact.
• Detect invisible dependencies in suppliers and third parties.
• Analyze technical, operational, and decision-making sovereignty.

Block 2. Assessing supplier capabilities and maturity

• Use the SCR² model to classify suppliers.
• Evaluate essential cybersecurity capabilities.
• Analyze maturity in governance, access management, monitoring, and vulnerability handling.
• Apply real-world questions for supplier conversations.
• Identify critical gaps and justify risks.

Block 3. Designing joint supervision and resilience

• Define reasonable operational controls.
• Design shared supervision models.
• Coordinate SOC/NOC/OT with third parties.
• Create joint review cycles and simulations.
• Build realistic client–supplier roadmaps.

Block 4. Integrating regulation and OT digital trust

• Understand the implications of NIS2 and CRA.
• Relate requirements to IEC 62443
• Build scalable trust models.
• Prepare for regulatory audits.
• Prioritize investments based on criticality and dependency.

Course differentiators:

• Real industrial case studies.
• Dual-role work (client/supplier).
• Strategic dilemmas based on real conflicts.
• OT and operational continuity focus.
• Integration of resilience, sovereignty, and compliance.

Each participant will receive:

• Included documentation: CCI guides, SCR² Framework, sector studies, pocket guide for supplier assessment, NIST SP 800-161 Rev. 1 references.
• The presentations used during the course training sessions.

A practical methodology based on collaborative exercises, real industrial scenarios, and client/supplier dynamics using RECIN and the SCR² framework.

Yes. Participants will work on cases from various industrial sectors, based on industrial architectures specifically designed for the course.

OT and industrial focus: The course is not limited to documentary compliance, but addresses operational continuity, technological sovereignty, structural dependency, and real decision-making between client and supplier.

From 15:30 to 19:00 (Spain time – CET).

The training modality developed for this course is synchronous online (accessible from any location with a stable internet connection).

Sessions are always live through the videoconferencing system provided by the CCI School.

These sessions will be recorded and available for later viewing by the student for a limited time.

All training material offered during the course (session recordings, dossiers, etc.) will be available to the student for a period of 1 calendar month.

During this time, the student can freely access the material remotely.

Upon completion of the training and after meeting the necessary requirements, the student will receive a certificate from the school. This certificate attests to your attendance, participation, and fulfillment of the training requirements.

*CCI School is an internationally recognized organization whose training, experience, faculty, and professionalism are accredited.

Along with the certificate, you will receive the Green Professional Credential (which is obtained through the knowledge acquired during the training) from our CCI Industrial Cybersecurity Commitment Recognition Program.

Payment is one-time. To access the training and reserve a spot, the student must make the full payment via credit/debit card.

If, due to special circumstances, the only possible way is through bank transfer, please email us at escuela@cci-es.org, and we will handle the request personally.

Yes. You can subsidize the number of hours included in this training using your training credit through FUNDAE (State Foundation for Employment Training).

The Industrial Cybersecurity Center does not manage the subsidy process, but we will provide all the necessary information and documentation for you to do so.