Expert Cyber Operative & Critical Infrastructure Specialist
For the operator whose adversary is a nation-state and whose failure mode is measured in physical consequence.
An OT security lead at a water utility. A red-team operator preparing for a national CERT exercise. Someone who can walk the Purdue Model on a whiteboard and defend every zone.
Fifteen chapters across IEC 62443, MITRE ATT&CK for ICS v14 kill-chain drills, Purdue-Model network segmentation, physical-consequence tabletops, and case reads from Volt Typhoon and CyberAv3ngers.
Self-paced · ~90 hours over 8–12 weeks. Optional lab-day intensive at partner ICS testbeds. One-year credential validity, three-year renewal path.
Experienced professionals in high-pressure, high-risk environments.
- 1.Completion of CCPP or equivalent (OSCP, GIAC)
- 2.3+ years in SecOps, OT/ICS, or threat intelligence
- 3.Pass entrance simulation (30-minute challenge)
ECCIS is the foundation. Deepen into a specialisation.
Each stripe stacks onto ECCIS as a credential in its own right, with its own curriculum and assessments. Bundle a stripe with ECCIS at enrolment and pay 10 % less than buying them separately.
OT Incident Command
Command-post drills, physical-consequence tabletops, and cross-domain coordination for the operator who leads the room when the plant goes dark.
Cyber Threat Intelligence
Adversary tracking, campaign attribution, and intelligence-to-defence translation — for the operator whose report gets read at the C-suite.
Digital Forensics & IR
Host, memory, and network forensics at ICS/OT scale — the specialist stripe for the operator who has to reconstruct what an adversary did after the fact.
Enrol in ECCIS, or ask a question first.
A 15-minute advisor call is free. No sales pitch — an honest read on whether this credential fits your role.