Cybersecurity · Free online course

Cybersecurity for PLC Programmers: Hardening Siemens and Rockwell Controllers

Harden the PLCs you already program: Siemens access levels, know-how, copy and project protection, secure communication and users, Rockwell source protection, CIP Security and zones, and the Top 20 Secure PLC Coding Practices, from the people who wrote them.

  • 9 modules
  • 4h 51m of video
  • Intermediate
  • English
  • ₹0, free
  • Lab practice in your browser
Cybersecurity for PLC Programmers: Hardening Siemens and Rockwell Controllers course cover

₹0Free for good

Worth ₹3,499 by length and depth against classroom training. It has always been free; that is not a former price.

No card. Checkout takes a minute and gives you a receipt.

Certificate ₹599, optional. The course is free either way.

Overview

About Cybersecurity for PLC Programmers: Hardening Siemens and Rockwell Controllers

Harden the Siemens and Rockwell PLCs you already program, using access levels, source protection and secure coding practices.

Cybersecurity for PLC Programmers: Hardening Siemens and Rockwell Controllers is a free, self-paced online course from EDWartens for PLC programmers, automation engineers and OT maintenance staff. It has 9 modules and 4h 51m of video lessons, with written notes, a practice task per module, a practical project and a final assessment of 15 questions (pass mark 60%). Learning costs nothing and needs only a free account. The optional EDWartens Certificate of Completion, verifiable by code, is a one-off ₹599 inclusive of GST for learners in India; it is not a vendor credential. Updated 1 November 2026.

Who it is for: PLC programmers, automation engineers and OT maintenance staff

This course includes

  • 4h 51m of video lessons
  • 9 modules with written notes and diagrams
  • One final assessment: 15 questions, pass mark 60%
  • Ask-an-engineer support from practising engineers
  • Lifetime access, the course does not expire
  • Optional verifiable certificate when you finish
  1. Step 1 of 3

    Learn the 9 modules

    4h 51m of video lessons, written notes and a practice task per module, at your own pace.

  2. Step 2 of 3

    Pass the final assessment

    15 questions drawn from every module, pass mark 60%, 3 attempts.

  3. Step 3 of 3

    Take the certificate, if you want it

    Optional, paid once, only if you choose it. The course stays free either way.

    See the certificate and its price

A look inside

Cybersecurity for PLC Programmers: Hardening Siemens and Rockwell Controllers: Syllabus at a glance
Syllabus at a glance
Cybersecurity for PLC Programmers: Hardening Siemens and Rockwell Controllers: What you will be able to do
What you will be able to do
Cybersecurity for PLC Programmers: Hardening Siemens and Rockwell Controllers: Tools and credits
Tools and credits

From the lessons

  • What is OT (Operational Technology)?

    Why PLCs get attacked

    by Mike Holcomb

  • Secure Coding of Industrial Control Systems - Vivek Ponnada

    Secure coding and device integrity: the ideas

    by AppSec Pacific Northwest

  • Understanding New Security Wizard Features in TIA Portal V19

    Siemens: access protection and the security wizard

    by EandM

  • SIMATIC S7-1500: AT 3 - Intellectual Property Protection

    Siemens: know-how, copy and project protection

    by Siemens Knowledge Hub

  • Siemens Tutorial | Using UMC in TIA Portal

    Users, certificates and the web server

    by Outlier Automation

  • Protect your System using FactoryTalk Security and Source Protection

    Rockwell: source protection, CIP Security, zones and conduits

    by Rockwell Automation

Lesson frames belong to the creators named in the Credits and are shown from YouTube.

What you learn

What you will be able to do

By the end you will be able to:

  • Explain how controllers are attacked and which controls stop each step
  • Set Siemens access levels, know-how and copy protection
  • Configure secure communication, users and the web server
  • Apply Rockwell source protection, CIP Security and zones
  • Review PLC code against the Top 20 Secure PLC Coding Practices

How it works

How this course works

  1. Watch the lessons

    Short video lessons, one module at a time, at your own pace.

  2. Read the notes

    Open the Reading tab for the written notes and diagrams of the module.

  3. Practise in the 3D labOptional

    Try the module in the free 3D lab, in your browser.

  4. Check yourself

    Answer the questions to see what stuck before you move on.

  5. Final assessment

    Pass the final once you have been through the modules.

  6. Certificate, if you want oneOptional

    Optional, with a page anyone can use to verify it.

Syllabus

Course content, module by module

In order, at whatever pace suits you. Each module ends with a practice task that builds on the last.

Modules
9
Video lessons
24
Of video
4h 51m
Final questions
15
  1. 01

    Why PLCs get attacked, with lab practice:

    2 lessons · 13m
  2. 02

    Secure coding and device integrity: the ideas

    2 lessons · 38m
  3. 03

    Siemens: access protection and the security wizard

    3 lessons · 23m
  4. 04

    Siemens: know-how, copy and project protection

    4 lessons · 35m
  5. 05

    Users, certificates and the web server

    4 lessons · 49m
  6. 06

    Rockwell: source protection, CIP Security, zones and conduits, with lab practice:

    6 lessons · 32m
  7. 07

    The Top 20 Secure PLC Coding Practices

    1 lesson · 46m
  8. 08

    Using the controller's own features to detect trouble, with lab practice:

    1 lesson · 43m
  9. Final assessment · 15 questions, pass mark 60%

3D lab

Practise in the 3D lab

Practise the network side of PLC security in the OT security lab: where each controller sits, which zones it belongs to, and how to keep and prove a known-good backup.

Find the strangerWatch

Optional. Skip it whenever you like: it never blocks your progress or your certificate.

Project

The course project

Optional practice that ends in the kind of job the course prepares you for, with the documents that go with it.

About 10 hours

Hardening the PLCs on a food packaging line: asset inventory, zones and conduits, secure configuration baseline and verification report

Harden the controllers on a mixed Siemens and Rockwell packaging line as the controls engineer responsible for them. Build the asset inventory, draw the zones and conduits, write the secure configuration baseline for each controller type, and verify what you can in simulation.

This project at a glance
  1. 5documents in the pack
  2. 5steps to follow
  3. Laboptional: in the 3D lab
  4. 5things to hand in
  5. 10 hof work, at your pace

Do it in the lab: 5 steps.

Sample document pack, 5 documents, filled in for the scenario

  • Asset inventoryAsset inventory: biscuit packaging line 2
  • Zones & conduitsZones and conduits: packaging line 2
  • ProcedureSecure configuration baseline: line 2 controllers
  • Test reportHardening verification report: line 2 shutdown
  • Risk registerRisk register: packaging line 2 controllers

Read inside the course and download as a workbook. The project is optional practice, marked when you submit it; the certificate needs only the modules and the final assessment.

Tools

Software, hardware and lessons

Software

TIA Portal (trial) with PLCSIM, and Studio 5000 if you have access. Every exercise can be done with one vendor's software.

Hardware

None required. A spare S7-1200 or CompactLogix makes the hardening exercises more real.

Who it is for

Intermediate. You should already program Siemens or Allen-Bradley PLCs. ICS Security Foundations is a useful companion if the security vocabulary is new.

Video lessons by

  • Mike Holcomb
  • ICS Village
  • (CS)²AI
  • AppSec Pacific Northwest
  • GRIMM Cyber
  • S4 Events
  • Siemens Knowledge Hub
  • Rockwell Automation
  • Hegamurl
  • Outlier Automation
  • EandM
  • PLC SCADA ENGINEER
  • Tim Wilborne

Independent creators, credited in full under Credits.

Software you need

What to download, where from, what it costs and how to install it. Every link goes to the maker's own site, never a mirror.

Every exercise can be done with one vendor's software. Studio 5000 is only for learners who already have access to it.

Required

  1. 01

    SIMATIC STEP 7 Professional and WinCC (TIA Portal) V21 Trial

    Siemens

    Free trial: 21 days
    Runs on
    Windows 11 Pro or Enterprise 64-bit (24H2), Windows 10 Enterprise 2021 LTSC, or Windows Server 2022/2025. Windows 11 Home is supported only for the Basic editions.
    Account
    A free Siemens account registered for Industry Online Support (SiePortal)
    Size
    about 8.1 GB for the main ISO, plus an optional 3.1 GB DVD 2 with hardware support packages

    Siemens lets registered users download the V21 trial of STEP 7 (Basic and Professional), STEP 7 Safety and WinCC and test it for 21 days. The same package is used for the full product; after 21 days you need a purchased licence to keep working.

    Official download pagesupport.industry.siemens.com

    Alternatives

    • TIA Portal Cloud trial: 21 days free in a cloud virtual machine, no install. Sessions are limited to one hour and it is not available in every country.
  2. 02

    S7-PLCSIM V21 (TIA Portal) Trial

    Siemens

    Free trial: 21 days
    Runs on
    Windows 11 Pro or Enterprise 64-bit (24H2), Windows 10 Enterprise 2021 LTSC, or Windows Server 2022/2025. Windows 11 Home is supported only for the Basic editions.
    Account
    A free Siemens account registered for Industry Online Support (SiePortal)
    Size
    about 2.5 GB (ISO)

    S7-PLCSIM V21 is offered as a 21-day trial on the same Siemens page as the STEP 7 and WinCC V21 trial. It needs STEP 7 V21 installed on the same PC.

    Official download pagesupport.industry.siemens.com

Optional

Useful, not needed to finish the course.

  1. 03

    Studio 5000 Logix Designer

    Rockwell Automation

    Paid only
    Runs on
    Windows (check the Studio 5000 entry on the Product Compatibility and Download Center for exact versions)
    Account
    A Rockwell Automation account plus a purchased licence (serial number or subscription)

    Rockwell sells Studio 5000 Logix Designer as a perpetual licence or a paid subscription. Rockwell's product page offers no public free trial or free edition.

    Rockwell Automation product pagerockwellautomation.com

    Legitimate free routes

Checked against each maker's own page on 27 September 2026. Trial lengths and editions change; the maker's page is the final word.

What you walk away with

Your certificate for Cybersecurity for PLC Programmers: Hardening Siemens and Rockwell Controllers

Finish the course, pass the final, and this is the document with your name on it.

Sample Wartens Certificate of Completion for Cybersecurity for PLC Programmers: Hardening Siemens and Rockwell Controllers, issued through the EDWartens training portal
Sample. The issued certificate carries your name, your final score, a unique certificate ID and its own QR code.
  • Verifiable by anyone

  • Adds to LinkedIn in one click

  • QR code on the certificate

  • Names what you can do

  • A permanent link

  • Earned, not attended

Learning is free. The certificate is optional.

Add it now and pay only when you have finished the course, or come back for it later. One-off, US$28.99, with a receipt.

Issued by Wartens Ltd (England and Wales, company no. 15262249) through the EDWartens training portal, as a Certificate of Completion for this self-paced course. Sold in India by Wartens Automation Private Limited. It is not a vendor certification, a university award or a CPD-accredited activity, and it does not certify competence on live equipment. Delivered electronically; see the refund policy.

Practise what you learn in the free 3D lab

Technical work is judged on what you can do: wiring, commissioning, finding a fault. Doing a task yourself teaches more than watching it a second time, and a lab lets you try it safely before you meet real equipment. It does not replace working on real hardware.

  • Practise safely, so a mistake costs nothing.
  • The lab checks your work like a site test, so you know when it is right.
  • Free, in your browser, with nothing to install.

Why learn with EDWartens

What you get with this course.

  • Free from the first lesson to the final assessment.
  • Practice in a free 3D lab in your browser, with nothing to install.
  • Video lessons with written notes and a project.
  • An optional certificate that anyone can verify online.

FAQ

Common questions

Is this a hacking course?

No. It teaches PLC programmers to protect the controllers they are responsible for. There are no techniques for breaking into equipment, and the course deliberately leaves out password-unlocking tools.

How is it different from OT and ICS Cybersecurity with IEC 62443?

That course covers the standard and the security programme. This one is hands-on for PLC programmers: the protection settings in TIA Portal and Studio 5000, and secure coding in the logic itself. They complement each other.

Do I need both Siemens and Rockwell software?

No. Most exercises use TIA Portal with PLCSIM; the Rockwell module can be followed from its lessons and documentation if you do not have Studio 5000.

Where do the Top 20 Secure PLC Coding Practices come from?

A community project led by Sarah Fluchs and Vivek Ponnada and freely available. The course uses their own talks, credited on the module, and none of the authors is affiliated with EDWartens.

Is the Cybersecurity for PLC Programmers course really free?

Yes. Every module, the notes, the project and the final assessment. The only paid item is the certificate, if you want it.

What certificate does the Cybersecurity for PLC Programmers course give?

An EDWartens Certificate of Completion, issued when you pass the final assessment, with a number anyone can verify on our site. It is not a vendor or ISA/GIAC certification.

How long does the Cybersecurity for PLC Programmers course take?

About 8 hours of lessons and reading, plus about 10 hours for the project. At a few hours a week alongside work, that is two to three weeks.

Does it prepare me for CompTIA SecOT+ or GICSP?

Not directly. Those exams cover OT security broadly; this course goes deep on one part of it, the controller and its code. It is a useful practical companion, and EDWartens is not affiliated with CompTIA or GIAC.

Do I have to use the lab?

No. The lab is optional practice. You can skip it whenever you like, and it never blocks your progress, the final assessment or your certificate.

Is the lab free?

Yes. Every lab level for this course opens in your browser, free, with nothing to install.

Is the Cybersecurity for PLC Programmers course free in India, and what does the certificate cost?

Yes. Learning costs ₹0 in India: every module, the written notes, the practice tasks and the final assessment, with no card and no trial period. The only paid item is the optional EDWartens Certificate of Completion, ₹599 including GST for this intermediate course, paid in rupees through Razorpay, and only if you want it after passing the final assessment.

What topics does the Cybersecurity for PLC Programmers course cover, module by module?

The Cybersecurity for PLC Programmers course has 9 modules. It opens with "Why PLCs get attacked", goes through "Secure coding and device integrity: the ideas", "Siemens: know-how, copy and project protection", "Rockwell: source protection, CIP Security, zones and conduits" and "Using the controller's own features to detect trouble" and ends with "Final Assessment". The full list with minutes is under "What you learn" on this page.

What can I do after the Cybersecurity for PLC Programmers course?

After the Cybersecurity for PLC Programmers course: Explain how controllers are attacked and which controls break each step; Set Siemens access levels and use the TIA Portal security wizard; Apply know-how, write, copy and project protection. These are the practical outcomes the course is written around, and the final assessment of 15 questions checks them.

What software and hardware do I need for the Cybersecurity for PLC Programmers course, and does it cost anything?

For the Cybersecurity for PLC Programmers course, software: TIA Portal (trial) with PLCSIM, and Studio 5000 if you have access. Every exercise can be done with one vendor's software. Hardware: none required. A spare S7-1200 or CompactLogix makes the hardening exercises more real. The course itself is free.

Is the Cybersecurity for PLC Programmers course suitable for me, and what level is it?

Cybersecurity for PLC Programmers is rated intermediate. Intermediate. You should already program Siemens or Allen-Bradley PLCs. ICS Security Foundations is a useful companion if the security vocabulary is new. It is written for PLC programmers, automation engineers and OT maintenance staff, and has 4h 51m of video lessons at your own pace.

Which jobs use the skills from the Cybersecurity for PLC Programmers course?

Skills from the Cybersecurity for PLC Programmers course (for example: explain how controllers are attacked and which controls break each step) are used in OT security engineer work. The course gives you practical evidence of the skill; it does not promise a job, and employers decide on experience and interview.

All course facts
Price
₹0, free for good. No trial, no card. Comparable classroom training of this length costs about ₹3,499.
Who it is for
PLC programmers, automation engineers and OT maintenance staff
Format
9 self-paced modules, 4h 51m of video, written notes, a practice task per module and one final assessment.
Level
Intermediate. Intermediate. You should already program Siemens or Allen-Bradley PLCs. ICS Security Foundations is a useful companion if the security vocabulary is new.
Brand
Vendor-neutral
Software
TIA Portal (trial) with PLCSIM, and Studio 5000 if you have access. Every exercise can be done with one vendor's software.
Hardware
None required. A spare S7-1200 or CompactLogix makes the hardening exercises more real.
Certificate
Optional EDWartens Certificate of Completion, ₹599 inclusive of GST for learners in India, verifiable by code. Not a vendor credential.
Video lessons by
Mike Holcomb, ICS Village, (CS)²AI, AppSec Pacific Northwest, GRIMM Cyber, S4 Events, Siemens Knowledge Hub, Rockwell Automation, Hegamurl, Outlier Automation, EandM, PLC SCADA ENGINEER, Tim Wilborne (independent creators, credited below)
Language
English
Last updated
1 November 2026

More free courses: Free cyber security courses · Free OT and ICS security courses

Classroom course, Bangalore

PLC training in Bangalore

The Automation Engineer Program (AEP) is our classroom course in PLC programming and industrial automation, taught in person at our Electronic City centre.

Credits

Who made the video lessons

The video lessons in this course were created by the people below, not by EDWartens. Every lesson streams from its creator's own YouTube channel; EDWartens neither hosts nor sells that footage, and the creators are not affiliated with EDWartens and do not endorse this course. What EDWartens wrote is the study plan, the notes, the practice tasks and the assessments.

  • Mike Holcomblessons on what OT is and the OT security career path
  • ICS Villagethe Top 20 Secure PLC Coding Practices talk by Sarah Fluchs and Vivek Ponnada
  • (CS)²AIVivek Ponnada's introduction to the Top 20 Secure PLC Coding Practices
  • AppSec Pacific NorthwestVivek Ponnada on secure coding of industrial control systems
  • GRIMM CyberVivek Ponnada on using native ICS functionality to improve security
  • S4 Eventsthe talk on PLC and Level 1 device integrity
  • Siemens Knowledge HubS7-1500 intellectual property protection
  • Rockwell AutomationFactoryTalk Security, source protection, CIP Security and FactoryTalk Policy Manager zones and conduits
  • HegamurlTIA Portal password, block, copy, project and web server protection
  • Outlier Automationuser management with UMC and TLS certificates in TIA Portal
  • EandMa lesson in "Siemens: access protection and the security wizard"
  • PLC SCADA ENGINEERa lesson in "Siemens: access protection and the security wizard"
  • Tim Wilbornea lesson in "Rockwell: source protection, CIP Security, zones and conduits"

If you are one of these creators and would like a lesson removed or credited differently, write to info@edwartens.co.in.