The TORCH Cybersecurity Training aims to provide context and activities in the form of practical scenarios to allow participants to recognize, prevent, and react to cyber incidents in a simulated hydropower facility. The scenarios are modeled after real-life events involving simulated cyberattacks. Each scenario’s activities help participants determine the most effective strategy for safeguarding the hydropower facility against a genuine cyberattack.
Within each module, a provided KST table lists the activity-specific knowledge to be gained, the skills or abilities required or developed, and the tasks to be performed to successfully complete each training exercise. Each scenario is presented with the actions taken by the cybersecurity defenders to provide insight to the participants and promote discussion. Then, the participants engage in a hands-on activity that will help them learn the tools, techniques, procedures, and team-building skills necessary for providing an effective cybersecurity defense.
The Cybersecurity Training section consists of 10 modules:
- Introduction to Cybersecurity for Hydropower
- Cyber Incident Responder
- Cybersecurity Defensive Support
- Acquisition Security
- Cyber Analysis
- Cybersecurity Operations
- Forensic Analysis
- False Alarm
- Staff Knowledge
- Full Crisis Mode