OT

Teaching Operational Technologies

Faculty Development Workshop — 12 Lessons / 5 Days

OT-101

Course Navigation

A faculty development workshop for community college instructors who need to teach operational technology and IT/OT security. Select a lesson below. Each lesson pairs the technical content with the teaching moves, lab design, and assessment ideas you need to run it in your own classroom.

Foundations & History 3
Protocols & Networks 2
Threats & Countermeasures 2
Frameworks & Governance 2
Identity & Access 1
Operations & Capstone 2

⚠️ Safeguards & Responsible Use

Read first

Operational technology controls physical processes, so a mistake in an OT classroom can injure someone or stop a real plant. These rules apply to every lesson, lab, and student project in this course. Review them with your class before Lab 1 and restate them in your own syllabus.

Safety outranks the exercise

No activity touches a live process, safety instrumented system, or energized panel. Physical rigs require lockout/tagout, PPE, and an instructor present.

Simulation and isolated equipment only

Labs run on simulators, virtual PLCs, and bench hardware the college owns. Nothing is aimed at campus building automation, a vendor system, or an employer's plant.

Air-gapped lab segments

Keep lab networks off the campus production network. Document the isolation before class and verify it at the start of every lab session.

Defensive scope

The course teaches architecture, detection, hardening, and response. It does not distribute working exploit code, live malware samples, or attack tooling.

Incidents are case studies

Real events are analyzed for cause, impact, and lesson learned — not reconstructed as a procedure a student could follow against a live target.

Protect real-world data

Vendor drawings, customer diagrams, employer network detail, and CUI stay out of student work. Synthesize or scrub before anything reaches a shared repository.

Faculty review AI-generated content

Any generated lesson text, quiz item, or graphic gets subject-matter review and a source check before students see it. You own the accuracy.

Accessible and equitable by default

Materials meet WCAG 2.2 AA and work by keyboard. No lab depends on a paid license or vendor account a student cannot obtain.

Every student signs the acceptable-use acknowledgment before the first hands-on lab. Read the full policy →
📚 Course Lessons — 12 Lessons / 5 Days
Day 1 · Lesson 1 Foundations
From Isolated Plants to Converged Networks
How OT grew up separately from IT: relay logic and pneumatics, the first PLC in 1968, DCS and SCADA, serial links giving way to Ethernet, and the business pressures that finally merged the two networks.
Day 1 · Lesson 2 Foundations
IT/OT Security Principles
Why OT inverts the CIA triad, why safety sits above all three, and how determinism, uptime, and 20-year equipment lifecycles break the IT assumptions your students arrive with. Includes the Purdue model as a teaching scaffold.
Day 1 · Lesson 3 Foundations
OT Technologies & Field Devices
A device-by-device tour: PLCs, RTUs, IEDs, HMIs, engineering workstations, historians, sensors, actuators, drives, and safety instrumented systems. What each one does, how it fails, and what it exposes on the network.
Day 2 · Lesson 4 Protocols
IT Protocols Inside OT Networks
Ethernet, TCP/IP, VLANs, DHCP, DNS, and NTP as they actually appear in control networks — including why static addressing and local time sources are still common, and what breaks when they are configured like an office LAN.
Day 2 · Lesson 5 Protocols
Industrial Communication Protocols
Modbus TCP, DNP3, EtherNet/IP, PROFINET, BACnet/IP, and OPC UA. Function codes and framing at a level students can read in a capture, plus why legacy protocols carry no authentication and what OPC UA changes.
Day 3 · Lesson 6 Threats
The OT Threat Landscape
Threat actors and their motivations, ransomware crossing from the business network into production, insider and contractor risk, and supply chain compromise — taught through documented incidents read as case studies.
⚠ Case study analysis only
Day 3 · Lesson 7 Threats
Vulnerabilities & Countermeasures
Legacy firmware, flat networks, default credentials, and the patch window that never opens — then the countermeasures that work anyway: segmentation, conduits, allowlisting, jump hosts, backups, and compensating controls.
⚠ No live exploitation
Day 4 · Lesson 8 Frameworks
Frameworks for OT Security
IEC 62443 zones, conduits, and security levels; NIST SP 800-82 and the Cybersecurity Framework; ISO/IEC 27001. How they overlap, where they differ, and how to pick one spine for a course instead of teaching four at once.
Day 4 · Lesson 9 Governance
Governance, Risk & Compliance for IT/OT
Policy, standards, and procedure across two organizations that report to different executives. Asset inventory, risk register, POA&M tracking, audit evidence, and the sector regulation that drives budget in utilities and manufacturing.
Day 5 · Lesson 10 Identity & Access
Access Control & Identity Management in OT
Roles for operators, engineers, and vendors; the shared console problem and what to do about it; privileged access, jump hosts, and remote vendor sessions; where MFA is safe on a control network; and identity lifecycle in a plant.
Day 5 · Lesson 11 Operations
Monitoring, Detection & OT Incident Response
Passive asset discovery, syslog coverage gaps on field devices, time synchronization for correlation, alert triage, and an incident lifecycle where isolating the affected host may not be an option the plant can accept.
Day 5 · Lesson 12 Capstone
Capstone: Build and Teach Your Own OT Module
Each participant produces a teachable module — objectives, one hands-on simulation, an assessment with a rubric, and a written safeguards statement — then teaches a segment of it and takes peer and instructor critique.
🎓 Faculty Resources
Policy Required
🛡️ Safeguards & Responsible Use Policy
The full classroom policy: lab isolation requirements, physical safety rules, defensive-scope boundaries, data handling for vendor and employer information, AI-content review, and the student acknowledgment form.
Guide Pedagogy
📖 Instructor Teaching Guide
Pacing for the five days, prerequisite checks, common student misconceptions about OT, discussion prompts, and mapping to program outcomes and NICE work roles for curriculum approval paperwork.
Bank Assessment
🧪 Assessment & Rubric Bank
Auto-graded quiz items by lesson with explanatory feedback, scenario prompts, the capstone rubric, and a reusable lab report template you can drop into your LMS.
🔬 Lab Activities
Lab Hands-On
🖥️ Hands-on Lab Exercises
Guided labs tied to each lesson: read a Modbus exchange, trace a converged network path, build an access control matrix, correlate a syslog timeline, and walk an OT incident from alert to recovery.
⚠ Isolated lab network required
Sim Simulators
⚙️ OT Simulator Suite
Browser-based trainers used throughout the course: an automated bottle-filling ICS process, Modbus request/response, syslog message analysis, NTP synchronization, and an access control matrix builder.
⚠ Simulation only — no live equipment
🛠️ Content Development Tools
Tool Dev Tools
🎨 Graphics Generation
Build Purdue model diagrams, network zone drawings, protocol stack illustrations, and concept maps for OT lesson content. Review every generated diagram for technical accuracy before use.
Tool Dev Tools
✍️ Content Generation
Draft lesson text, quiz questions, and scenario descriptions aligned to the course objectives. Output is a starting draft — faculty subject-matter review is required before it reaches students.