{"id":37831,"date":"2019-10-31T22:20:00","date_gmt":"2019-10-31T19:20:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/kak-kazaki-gicsp-sertifikat-poluchali\/"},"modified":"2019-10-31T22:20:00","modified_gmt":"2019-10-31T19:20:00","slug":"kak-kazaki-gicsp-sertifikat-poluchali","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sk\/blog\/news\/kak-kazaki-gicsp-sertifikat-poluchali","title":{"rendered":"Ako koz\u00e1ci z\u00edskali certifik\u00e1t GICSP","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Ahojte v\u0161etci! Na ob\u013e\u00fabenom port\u00e1li bolo mno\u017estvo r\u00f4znych \u010dl\u00e1nkov o certifik\u00e1ci\u00e1ch v oblasti informa\u010dnej bezpe\u010dnosti, preto sa nesna\u017e\u00edm o originalitu a jedine\u010dnos\u0165 obsahu, ale aj tak by som sa chcel podeli\u0165 o svoje sk\u00fasenosti s z\u00edskan\u00edm certifik\u00e1cie GIAC (Global Information Assurance Company) v oblasti priemyselnej kybernetickej bezpe\u010dnosti. Od \u010dias, ke\u010f sa objavili tak\u00e9 desiv\u00e9 slov\u00e1 ako Stuxnet<\/a><\/noindex>, Duqu<\/a><\/noindex>, Shamoon, Triton, postupne sa za\u010dal formova\u0165 trh poskytovania slu\u017eieb odborn\u00edkov, ktor\u00ed sa zdaj\u00fa by\u0165 IT, ale okrem toho m\u00f4\u017eu aj preprogramova\u0165 PLC s prep\u00edsan\u00edm konfigur\u00e1cie na ladders a pritom nenecha\u0165 tov\u00e1re\u0148 zastavi\u0165. <\/p>\n

<\/a><\/noindex><\/p>\n

Tak do sveta pri\u0161lo po\u0148atie IT&OT (Informa\u010dn\u00e9 technol\u00f3gie & prev\u00e1dzkov\u00e9 technol\u00f3gie). <\/p>\n

<\/p>\n

N\u00e1sledne hne\u010f (samozrejme, nie je mo\u017en\u00e9 zd\u00f4veri\u0165 pr\u00e1cu nekvalifikovan\u00fdm pracovn\u00edkom) pri\u0161la potreba certifikova\u0165 odborn\u00edkov v oblasti, ktor\u00e1 sa t\u00fdka zabezpe\u010denia bezpe\u010dnosti A\u0421\u00da\u0422\u041f, priemyseln\u00fdch syst\u00e9mov \u2013 ktor\u00fdch sa, ako sa ukazuje, v na\u0161om \u017eivote stalo ve\u013emi ve\u013ea, od automatick\u00e9ho ventilu na pr\u00edvod vody v byte po syst\u00e9m riadenia lietadiel (nezabudnime na skvel\u00fd \u010dl\u00e1nok o vy\u0161etrovan\u00ed probl\u00e9mov Boeing<\/a><\/noindex>). A dokonca, ako sa zistilo - aj slo\u017eit\u00e9ho medic\u00ednskeho vybavenia. <\/p>\n

<\/p>\n

Mal\u00e1 lyrika o tom, ako som sa dostal k potrebe z\u00edska\u0165 certifik\u00e1ciu (m\u00f4\u017eete presko\u010di\u0165): Po \u00faspe\u0161nom \u0161t\u00fadiu na konci nult\u00fdch rokov na fakulte ochrany inform\u00e1ci\u00ed som s hrdou hlavou vkro\u010dil do radov odborn\u00edkov na KIP, pracuj\u00fac ako technik slabopr\u00fadov\u00fdch zabezpe\u010dovac\u00edch syst\u00e9mov. Na podnikovej strane mi v tom \u010dase povedali, \u017ee sa zaober\u00e1m informa\u010dnou bezpe\u010dnos\u0165ou :) Tak sa za\u010dala moja kari\u00e9ra A\u0421\u0423-TP technika s bakal\u00e1rskym diplomom v oblasti informa\u010dnej bezpe\u010dnosti. O \u0161es\u0165 rokov, ke\u010f som sa dostal na poz\u00edciu ved\u00faceho oddelenia SCADA syst\u00e9mov, som odi\u0161iel pracova\u0165 ako bezpe\u010dnostn\u00fd konzultant pre priemyseln\u00e9 riadiace syst\u00e9my do zahrani\u010dnej softv\u00e9rovej a hardv\u00e9rovej spolo\u010dnosti. Tu sa presne objavila potreba by\u0165 certifikovan\u00fdm odborn\u00edkom na informa\u010dn\u00fa bezpe\u010dnos\u0165. <\/p>\n

<\/p>\n

GIAC<\/a><\/noindex> je v\u00fdvoj SANS<\/a><\/noindex> organiz\u00e1cie, ktor\u00e1 sa zaober\u00e1 organizovan\u00edm \u0161kolen\u00ed a certifik\u00e1ciou odborn\u00edkov v oblasti informa\u010dnej bezpe\u010dnosti. Reput\u00e1cia certifik\u00e1tu od GIAC je ve\u013emi vysok\u00e1 medzi odborn\u00edkmi a objedn\u00e1vate\u013emi na trhoch EMEA, US, \u00c1zia-Pacifik. U n\u00e1s, na postsovietskom priestore a v krajin\u00e1ch SN\u0160, tak\u00fd certifik\u00e1t m\u00f4\u017eu po\u017eadova\u0165 len zahrani\u010dn\u00e9 spolo\u010dnosti, ktor\u00e9 maj\u00fa biznis v na\u0161ich krajin\u00e1ch, medzin\u00e1rodn\u00e9 a konzulta\u010dn\u00e9 agent\u00fary. Osobne som sa nikdy nestretol so \u017eiados\u0165ou o existenciu takejto certifik\u00e1cie od dom\u00e1cich spolo\u010dnost\u00ed. V\u0161etci v\u00e4\u010d\u0161inou \u017eiadaj\u00fa CISSP. Toto je m\u00f4j subjekt\u00edvny n\u00e1zor a ak sa niekto podel\u00ed o svoju sk\u00fasenos\u0165 v koment\u00e1roch, bude zauj\u00edmav\u00e9 vedie\u0165.<\/p>\n

<\/p>\n

Na SANS je dostatok r\u00f4znych smerov (pod\u013ea m\u00f4jho n\u00e1zoru, v poslednej dobe sa chalani pr\u00edli\u0161 roz\u0161\u00edrili ich mno\u017estvo), ale s\u00fa aj ve\u013emi zauj\u00edmav\u00e9 praktick\u00e9 kurzy. Osobitne sa mi p\u00e1\u010dil NetWars<\/a><\/noindex>. Ale rozpr\u00e1va\u0165 budem o kurze ICS410: ICS\/SCADA Security Essentials <\/a><\/noindex> a certifik\u00e1te s n\u00e1zvom: Global Industrial Cyber Security Professional (GICSP)<\/a><\/noindex>.<\/p>\n

<\/p>\n

Z v\u0161etk\u00fdch pon\u00fakan\u00fdch SANS druhov certifik\u00e1ci\u00ed v oblasti Industrial Cyber Security je tento najuniverz\u00e1lnej\u0161\u00ed. Preto\u017ee druh\u00fd sa viac t\u00fdka syst\u00e9mov Power Grid, ktor\u00fdm sa na z\u00e1pade venuje osobitn\u00e1 pozornos\u0165 a predstavuj\u00fa uzavret\u00fa triedu syst\u00e9mov. Tret\u00ed (v \u010dase mojej certifik\u00e1cie) sa t\u00fdkal Incident Response.
\nKurz nie je lacn\u00fd, ale poskytuje dostato\u010dne rozsiahle znalosti aj v oblasti IT a OT. Obzvl\u00e1\u0161\u0165 bude u\u017eito\u010dn\u00fd t\u00fdm kamar\u00e1tom, ktor\u00ed sa rozhodli zmeni\u0165 svoju sf\u00e9ru napr\u00edklad z IT security v bankovom odvetv\u00ed na Industrial Cyber Security. Ke\u010f\u017ee som u\u017e mal pozadie v oblasti A\u0421\u0423\u0422\u041f, K\u0418\u041f a Operation Technology, pre m\u0148a v tomto kurze nebolo ni\u010d z\u00e1sadne nov\u00e9ho alebo \u017eivotne d\u00f4le\u017eit\u00e9ho.<\/p>\n

<\/p>\n

Kurz pozost\u00e1va z 50% te\u00f3rie a 50% praxe. Z praxe bol najzauj\u00edmavej\u0161\u00ed s\u00fa\u0165a\u017en\u00fd zraz \u2013 NetWars. Po\u010das dvoch dn\u00ed, po hlavnom kurze, sa v\u0161etci \u0161tudenti v\u0161etk\u00fdch tried rozdelili na t\u00edm a plnili \u00falohy na z\u00edskanie pr\u00edstupov\u00fdch pr\u00e1v, vy\u0165ahovanie potrebn\u00fdch inform\u00e1ci\u00ed, z\u00edskavanie pr\u00edstupu k sieti, mno\u017estvo \u00faloh na rozl\u00fa\u0161tenie hashov, pr\u00e1ca s Wiresharkom a r\u00f4zne in\u00e9 vychyt\u00e1vky. <\/p>\n

<\/p>\n

Materi\u00e1l kurzu je stru\u010dne zhrnut\u00fd vo forme kn\u00edh, ktor\u00e9 potom dost\u00e1vate do svojho bez\u010dasov\u00e9ho u\u017e\u00edvania. Mimochodom, m\u00f4\u017eete si ich vzia\u0165 so sebou na sk\u00fa\u0161ku, preto\u017ee form\u00e1t je Open Book, ale nemaj\u00fa v\u00e1m tam ve\u013emi pom\u00f4c\u0165, preto\u017ee na sk\u00fa\u0161ku m\u00e1te 3 hodiny, 115 ot\u00e1zok a jazyk sk\u00fa\u0161ky je angli\u010dtina. Po\u010das v\u0161etk\u00fdch 3 hod\u00edn m\u00f4\u017eete ma\u0165 prest\u00e1vku na 15 min\u00fat. Ale majte na pam\u00e4ti, \u017ee ak si vezmete prest\u00e1vku na 15 min\u00fat a vr\u00e1tite sa k testom za 5 min\u00fat, jednoducho str\u00e1cate zost\u00e1vaj\u00facich 10 min\u00fat, preto\u017ee \u010das v testovacom programe u\u017e nebudete m\u00f4c\u0165 zastavi\u0165. M\u00f4\u017eete presko\u010di\u0165 a\u017e 15 ot\u00e1zok, ktor\u00e9 sa potom objavia na konci. <\/p>\n

<\/p>\n

Osobne neodpor\u00fa\u010dam odklada\u0165 ve\u013ea ot\u00e1zok na nesk\u00f4r, preto\u017ee \u010dasu v 3 hodin\u00e1ch je naozaj m\u00e1lo, a ke\u010f sa na konci objavia e\u0161te nevyrie\u0161en\u00e9 ot\u00e1zky, je tu ve\u013ek\u00e1 pravdepodobnos\u0165, \u017ee nestihnete. Ja som si \u201ena nesk\u00f4r\u201c nechal len tri ot\u00e1zky, ktor\u00e9 boli pre m\u0148a naozaj \u0165a\u017ek\u00e9, preto\u017ee sa t\u00fdkali znalosti \u0161tandardu NIST 800.82 a NERC. Psychologicky s\u00fa tak\u00e9to ot\u00e1zky \u201ena nesk\u00f4r\u201c ve\u013emi stresuj\u00face na konci \u2014 ke\u010f je v\u00e1\u0161 mozog unaven\u00fd, chcete na z\u00e1chod a \u010dasomer na obrazovke akoby sa zr\u00fdch\u013eoval geometricky. <\/p>\n

<\/p>\n

Celkovo, aby ste pre\u0161li testovan\u00edm, mus\u00edte z\u00edska\u0165 71% spr\u00e1vnych odpoved\u00ed. Pred vykonan\u00edm sk\u00fa\u0161ky budete ma\u0165 mo\u017enos\u0165 cvi\u010di\u0165 na skuto\u010dn\u00fdch testoch, preto\u017ee v cene s\u00fa zahrnut\u00e9 2 tr\u00e9nersk\u00e9 testy po 115 ot\u00e1zkach s podmienkami, ktor\u00e9 sa podobaj\u00fa na skuto\u010dn\u00fa sk\u00fa\u0161ku.<\/p>\n

<\/p>\n

Odpor\u00fa\u010dam sklada\u0165 sk\u00fa\u0161ku mesiac po absolvovan\u00ed \u0161kolenia, str\u00e1vi\u0165 tento mesiac systematick\u00fdm samostatn\u00fdm \u0161t\u00fadiom ot\u00e1zok, v ktor\u00fdch sa nec\u00edtite iste. Bude dobr\u00e9, ak si vezmete tla\u010den\u00e9 materi\u00e1ly z kurzu, ktor\u00e9 vyzeraj\u00fa ako stru\u010dn\u00e9 teze k jednotliv\u00fdm t\u00e9mam, a budete cielene h\u013eada\u0165 inform\u00e1cie o t\u00e9mach, ktor\u00e9 s\u00fa obsiahnut\u00e9 v t\u00fdchto knih\u00e1ch. Rozde\u013ete mesiac na dve \u010dasti, vykon\u00e1vajte sk\u00fa\u0161obn\u00e9 testy a z\u00edskavajte pribli\u017en\u00fd preh\u013ead o tom, v ktor\u00fdch ot\u00e1zkach ste siln\u00ed a kde sa potrebujete zlep\u0161i\u0165. <\/p>\n

<\/p>\n

R\u00e1d by som vyzdvihol nasleduj\u00face hlavn\u00e9 t\u00e9my, z ktor\u00fdch sa skl\u00e1daj\u00fa samotn\u00e9 sk\u00fa\u0161ky (nie u\u010debn\u00fd kurz, preto\u017ee pokr\u00fdva ove\u013ea \u0161ir\u0161ie t\u00e9my):<\/p>\n

<\/p>\n

    \n
  1. Fyzick\u00e1 bezpe\u010dnos\u0165: podobne ako v in\u00fdch certifika\u010dn\u00fdch sk\u00fa\u0161kach, aj tejto t\u00e9me je v GICSP venovan\u00e1 zna\u010dn\u00e1 pozornos\u0165. Objavuj\u00fa sa ot\u00e1zky t\u00fdkaj\u00face sa r\u00f4znych typov fyzick\u00fdch z\u00e1mkov na dver\u00e1ch, opisuj\u00fa sa situ\u00e1cie s fal\u0161ovan\u00edm elektronick\u00fdch preukazov, kde je potrebn\u00e9 poskytn\u00fa\u0165 odpove\u010f na jednozna\u010dn\u00fa identifik\u00e1ciu probl\u00e9mu. Objavuj\u00fa sa ot\u00e1zky priamo s\u00favisiace s bezpe\u010dnos\u0165ou technol\u00f3gie (procesu) v z\u00e1vislosti od predmetnej oblasti \u2013 procesy v ropn\u00fdch a plynov\u00fdch odvetviach, at\u00f3mov\u00e9 elektr\u00e1rne alebo elektrick\u00e9 siete. Napr\u00edklad m\u00f4\u017ee by\u0165 ot\u00e1zka tohto typu: Ur\u010dte, ak\u00fd typ kontroly fyzickej bezpe\u010dnosti predstavuje situ\u00e1cia, ke\u010f pr\u00edde alarm zo senzora teploty pary na HMI? Alebo ot\u00e1zka typu: Ak\u00e1 situ\u00e1cia (udalos\u0165) sp\u00f4sob\u00ed potrebu analyzova\u0165 videoz\u00e1znamy z kamier sledovania syst\u00e9mu perimetr\u00e1lnej bezpe\u010dnosti objektu?\n

    V percentu\u00e1lnom pomere by som poznamenal, \u017ee po\u010det ot\u00e1zok z tejto oblasti na mojej sk\u00fa\u0161ke a v sk\u00fa\u0161obn\u00fdch testoch nepresiahol 5%.<\/li>\n

  2. \u010eal\u0161ia a jedna z najmasovej\u0161\u00edch kateg\u00f3ri\u00ed ot\u00e1zok s\u00fa ot\u00e1zky t\u00fdkaj\u00face sa APUTP, PLC, SCADA: bude potrebn\u00e9 systematicky prist\u00fapi\u0165 k \u0161t\u00fadiu materi\u00e1lov o tom, ako s\u00fa usporiadan\u00e9 syst\u00e9my riadenia technologick\u00fdch procesov od senzorov a\u017e po servery, kde be\u017e\u00ed samotn\u00fd aplika\u010dn\u00fd softv\u00e9r. V\u00fdrazn\u00e9 mno\u017estvo ot\u00e1zok sa t\u00fdka r\u00f4znych druhov priemyseln\u00fdch protokolov prenosu d\u00e1t (ModBus, RTU, Profibus, HART a in\u00e9). Bud\u00fa ot\u00e1zky o tom, \u010d\u00edm sa RTU l\u00ed\u0161i od PLC, ako chr\u00e1ni\u0165 \u00fadaje v PLC pred zmenami neautorizovan\u00fdm pou\u017e\u00edvate\u013eom, v ktor\u00fdch oblastiach pam\u00e4te PLC sa uchov\u00e1vaj\u00fa \u00fadaje, a kde je ulo\u017een\u00e1 samotn\u00e1 logika (program nap\u00edsan\u00fd program\u00e1torom APU). Napr\u00edklad m\u00f4\u017ee by\u0165 ot\u00e1zka tohto typu: Dajte odpove\u010f, ako mo\u017eno odhali\u0165 \u00fatok medzi PLC a HMI, ktor\u00e9 pracuj\u00fa na protokole ModBus?\n

    Objavia sa ot\u00e1zky t\u00fdkaj\u00face sa rozdielov medzi syst\u00e9mami SCADA a DCS. Ve\u013ek\u00e9 mno\u017estvo ot\u00e1zok sa t\u00fdka pravidiel rozde\u013eovania siet\u00ed APUTP na \u00farovni L1, L2 od \u00farovne L3 (podrobnej\u0161ie op\u00ed\u0161em v sekcii ot\u00e1zok o sieti). Situat\u00edvne ot\u00e1zky na t\u00fato t\u00e9mu bud\u00fa tie\u017e r\u00f4znorod\u00e9 \u2013 opisuj\u00fa situ\u00e1ciu v dispe\u010derskej miestnosti a je potrebn\u00e9 si vybra\u0165 kroky, ktor\u00e9 by mal vykona\u0165 oper\u00e1tor procesu alebo dispe\u010der.<\/p>\n

    V\u0161eobecne t\u00e1to sekcia je naj\u0161pecifickej\u0161ia a \u00fazko zameran\u00e1. Vy\u017eaduje si od v\u00e1s dobr\u00e9 znalosti:
    \n \u2014 A\u0421\u0423\u041f, ter\u00e9nne \u010dasti (sn\u00edma\u010de, typy pripojenia zariaden\u00ed, fyzick\u00e9 vlastnosti sn\u00edma\u010dov, PLC, RTU);
    \n \u2014 syst\u00e9my proti havarijnej ochrany (ESD \u2013 syst\u00e9m n\u00fadzov\u00e9ho zastavenia) procesov a objektov (mimochodom, na Habre je skvel\u00fd cyklus \u010dl\u00e1nkov na t\u00fato t\u00e9mu od     Vladimir_Sklyar<\/a><\/noindex>)
    \n \u2014 z\u00e1kladn\u00e9ho porozumenia fyzik\u00e1lnych procesov, ktor\u00e9 prebiehaj\u00fa napr\u00edklad v rafin\u00e9ri\u00e1ch, pri v\u00fdrobe elektrickej energie, v potrubiach at\u010f.;
    \n \u2014 porozumenie architekt\u00faram DCS a SCADA syst\u00e9mov;
    \nR\u00e1d by som zd\u00f4raznil, \u017ee ot\u00e1zok tohto typu sa m\u00f4\u017ee vyskytn\u00fa\u0165 a\u017e 25 % po\u010das v\u0161etk\u00fdch 115 ot\u00e1zok sk\u00fa\u0161ky. <\/li>\n

  3. Sie\u0165ov\u00e9 technol\u00f3gie a sie\u0165ov\u00e1 bezpe\u010dnos\u0165: Mysl\u00edm, \u017ee po\u010det ot\u00e1zok v tejto t\u00e9me je na prvom mieste v sk\u00fa\u0161ke. Ur\u010dite tam bude v\u0161etko \u2013 OSI model, na ak\u00fdch \u00farovniach funguje ten alebo onen protokol, mno\u017estvo ot\u00e1zok o segment\u00e1cii siete, situat\u00edvne ot\u00e1zky o sie\u0165ov\u00fdch \u00fatokoch, pr\u00edklady pripojovac\u00edch logfile s n\u00e1vrhom ur\u010di\u0165 typ \u00fatoku, pr\u00edklady konfigur\u00e1ci\u00ed switche s n\u00e1vrhom ur\u010dova\u0165 zranite\u013en\u00fa konfigur\u00e1ciu, ot\u00e1zky o zranite\u013enostiach sie\u0165ov\u00fdch protokolov, ot\u00e1zky o \u0161pecifik\u00e1ch sie\u0165ov\u00fdch pripojen\u00ed priemyseln\u00fdch komunika\u010dn\u00fdch protokolov. Obzvl\u00e1\u0161\u0165 sa ve\u013ea p\u00fdtaj\u00fa na ModBus. \u0160trukt\u00fara sie\u0165ov\u00fdch paketov toho ist\u00e9ho ModBus v z\u00e1vislosti od jeho varianty a podporovan\u00fdch verzi\u00ed zariadenia. Ve\u013ek\u00e1 pozornos\u0165 sa venuje \u00fatokom na bezdr\u00f4tov\u00e9 siete \u2013 ZigBee, Wireless HART, jednoducho ot\u00e1zky o sie\u0165ovej bezpe\u010dnosti celej rodiny 802.1x. Bud\u00fa ot\u00e1zky o pravidl\u00e1ch umiestnenia ur\u010dit\u00fdch serverov v sieti \u0410\u0421\u0423\u0422\u041f (tu je potrebn\u00e9 pre\u010d\u00edta\u0165 \u0161tandard IEC-62443 a pochopi\u0165 princ\u00edpy referen\u010dn\u00fdch modelov siet\u00ed \u0410\u0421\u0423\u0422\u041f). Stretnete ot\u00e1zky pod\u013ea Purdue modelu.<\/li>\n
  4. Kateg\u00f3ria ot\u00e1zok, ktor\u00e1 s\u00favis\u00ed v\u00fdlu\u010dne s funk\u010dn\u00fdmi vlastnos\u0165ami syst\u00e9mov prenosu elektrickej energie a informa\u010dnej bezpe\u010dnosti pre ne. V USA sa t\u00e1to kateg\u00f3ria syst\u00e9mov ASUTP naz\u00fdva Power Grid a m\u00e1 osobitn\u00fa \u00falohu. Na tento \u00fa\u010del sa dokonca vyd\u00e1vaj\u00fa samostatn\u00e9 normy (NIST 800.82), ktor\u00e9 upravuj\u00fa pr\u00edstup k vytv\u00e1raniu syst\u00e9mov informa\u010dnej bezpe\u010dnosti pre tento sektor. V na\u0161ich krajin\u00e1ch je v\u00e4\u010d\u0161inou tento sektor obmedzen\u00fd na syst\u00e9my ASKUE (opravi\u0165 ma, ak niekto narazil na v\u00e1\u017enej\u0161\u00ed pr\u00edstup k kontrol\u00e1m syst\u00e9mov distrib\u00facie a dod\u00e1vky elektrickej energie). Tak\u017ee na sk\u00fa\u0161ke stretnete celkom \u0161pecifick\u00e9 ot\u00e1zky t\u00fdkaj\u00face sa Power Grid. V\u00e4\u010d\u0161inou ide o praktick\u00e9 pr\u00edpady pre konkr\u00e9tnu situ\u00e1ciu, ktor\u00e1 nastala na Power Plant, ale m\u00f4\u017eu sa vyskytn\u00fa\u0165 aj ot\u00e1zky o zariadeniach, ktor\u00e9 sa pou\u017e\u00edvaj\u00fa pr\u00e1ve v Power Grid. Bud\u00fa ot\u00e1zky zameran\u00e9 na znalos\u0165 sekci\u00ed NIST pre t\u00fato kateg\u00f3riu syst\u00e9mov.<\/li>\n
  5. Ot\u00e1zky t\u00fdkaj\u00face sa znalost\u00ed noriem: NIST 800-82, NERC, IEC62443. Mysl\u00edm, \u017ee tu bez osobitn\u00fdch koment\u00e1rov \u2013 je potrebn\u00e9 sa orientova\u0165 v sekci\u00e1ch noriem, ktor\u00e1 za \u010do zodpoved\u00e1 a ak\u00e9 odpor\u00fa\u010dania obsahuje. Objavuj\u00fa sa konkr\u00e9tne ot\u00e1zky, napr\u00edklad p\u00fdtaj\u00face sa na frekvenciu kontroly funk\u010dnosti syst\u00e9mu, frekvenciu aktualiz\u00e1cie proced\u00fary a pod. V percentu\u00e1lnom pomere sa tak\u00fdch ot\u00e1zok m\u00f4\u017ee vyskytn\u00fa\u0165 a\u017e 15 % z celkov\u00e9ho po\u010dtu ot\u00e1zok. Ale tu z\u00e1le\u017e\u00ed na \u0161\u0165ast\u00ed. Napr\u00edklad na dvoch sk\u00fa\u0161obn\u00fdch testoch som sa stretol iba s p\u00e1r tak\u00fdmito ot\u00e1zkami. Ale na samotnej sk\u00fa\u0161ke ich bolo naozaj ve\u013ea.<\/li>\n
  6. A posledn\u00e1 kateg\u00f3ria ot\u00e1zok s\u00fa r\u00f4zne praktick\u00e9 pr\u00edpady a situat\u00edvne ot\u00e1zky. <\/li>\n<\/ol>\n

    <\/p>\n

    Celkovo, samotn\u00fd tr\u00e9ning, okrem mo\u017eno CTF NetWars, pre m\u0148a nebol ve\u013emi informat\u00edvny z h\u013eadiska z\u00edskania nov\u00fdch poznatkov. Sk\u00f4r som nadobudol hlb\u0161ie detaily niektor\u00fdch t\u00e9m, najm\u00e4 v oblasti organiz\u00e1cie a ochrany r\u00e1diov\u00fdch siet\u00ed pou\u017e\u00edvan\u00fdch na prenos technologick\u00fdch inform\u00e1ci\u00ed, ako aj usporiadanej\u0161\u00ed materi\u00e1l o \u0161trukt\u00fare zahrani\u010dn\u00fdch noriem venovan\u00fdch tejto t\u00e9me. Preto pre in\u017einierov a odborn\u00edkov, ktor\u00ed maj\u00fa dostato\u010dn\u00e9 vedomosti a sk\u00fasenosti s A\u0421\u0423\u0422\u041f\/K\u0418\u041f alebo priemyseln\u00fdmi sie\u0165ami \u2013 je mo\u017en\u00e9 zv\u00e1\u017ei\u0165, \u010di u\u0161etri\u0165 na tr\u00e9ningu (\u010do m\u00e1 zmysel), samostatne sa pripravi\u0165 a ihne\u010f absolvova\u0165 certifika\u010dn\u00fa sk\u00fa\u0161ku, ktor\u00e1 mimochodom stoj\u00ed 700 USD. V pr\u00edpade zlyhania sa bude musie\u0165 zaplati\u0165 znovu. Certifika\u010dn\u00fdch centier, ktor\u00e9 v\u00e1s prijm\u00fa na sk\u00fa\u0161ku, je dos\u0165, najd\u00f4le\u017eitej\u0161ie je vopred poda\u0165 prihl\u00e1\u0161ku. Vo v\u0161eobecnosti odpor\u00fa\u010dam ihne\u010f stanovi\u0165 d\u00e1tum sk\u00fa\u0161ky, preto\u017ee inak budete neust\u00e1le odklada\u0165, pri\u010dom proces pr\u00edpravy nahrad\u00edte in\u00fdmi \u017eivotne d\u00f4le\u017eit\u00fdmi a nie celkom d\u00f4le\u017eit\u00fdmi z\u00e1le\u017eitos\u0165ami. A s konkr\u00e9tnym d\u00e1tumom term\u00ednu budete ma\u0165 vn\u00fatorn\u00fa motiv\u00e1ciu.<\/p>\n

    Zdroj: habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

    \u0412\u0441\u0435\u043c \u043f\u0440\u0438\u0432\u0435\u0442! \u041d\u0430 \u0432\u0441\u0435\u043c\u0438 \u043b\u044e\u0431\u0438\u043c\u043e\u043c \u043f\u043e\u0440\u0442\u0430\u043b\u0435 \u0431\u044b\u043b\u043e \u043c\u043d\u043e\u0433\u043e \u0440\u0430\u0437\u043d\u044b\u0445 \u0441\u0442\u0430\u0442\u0435\u0439 \u043f\u043e \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 \u043e\u0431\u043b\u0430\u0441\u0442\u0438 \u0418\u0411, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u043f\u0440\u0435\u0442\u0435\u043d\u0434\u043e\u0432\u0430\u0442\u044c \u043d\u0430 \u043e\u0440\u0438\u0433\u0438\u043d\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u0438 \u043d\u0435\u043f\u043e\u0432\u0442\u043e\u0440\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u043d\u0442\u0435\u043d\u0442\u0430 \u043d\u0435 \u0441\u043e\u0431\u0438\u0440\u0430\u044e\u0441\u044c, \u043d\u043e \u0432\u0441\u0435 \u0436\u0435 \u043e\u0447\u0435\u043d\u044c \u0445\u043e\u0442\u0435\u043b \u0431\u044b \u043f\u043e\u0434\u0435\u043b\u0438\u0442\u044c\u0441\u044f \u0441\u0432\u043e\u0438\u043c \u043e\u043f\u044b\u0442\u043e\u043c \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f GIAC (Global Information Assurance Company) \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 \u043e\u0431\u043b\u0430\u0441\u0442\u0438 \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u043e\u0439 \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438. \u0421\u043e \u0432\u0440\u0435\u043c\u0435\u043d \u043f\u043e\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u0442\u0430\u043a\u0438\u0445 \u0441\u0442\u0440\u0430\u0448\u043d\u044b\u0445 \u0441\u043b\u043e\u0432 \u043a\u0430\u043a Stuxnet, Duqu, Shamoon, Triton, […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-37831","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Ako z\u00edskali Kazaci certifik\u00e1t GICSP | ProHoster","description":"Ahojte v\u0161etci!","canonical_url":"https:\/\/prohoster.info\/sk\/blog\/news\/kak-kazaki-gicsp-sertifikat-poluchali","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sk_SK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041a\u0430\u043a \u043a\u0430\u0437\u0430\u043a\u0438 GICSP \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442 \u043f\u043e\u043b\u0443\u0447\u0430\u043b\u0438 | ProHoster","og:description":"\u0412\u0441\u0435\u043c \u043f\u0440\u0438\u0432\u0435\u0442!","og:url":"https:\/\/prohoster.info\/sk\/blog\/news\/kak-kazaki-gicsp-sertifikat-poluchali","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:20:00+00:00","article:modified_time":"2019-10-31T19:20:00+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"37831","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-23 19:26:35","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 01:20:22","updated":"2026-01-23 19:26:35","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/37831","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/comments?post=37831"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/37831\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/media?parent=37831"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/categories?post=37831"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/tags?post=37831"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}