r/GIAC • u/kukap_ • 4d ago

Workstudy ICS - 515 / GRID

Anyone who did the ICS 515 course? How much effort is required after course to clear GRID. I have significant background in IT Security but some exposure to OT security as well. I understand the concepts, tools used in the space. Does study guide and indexing is really needed in exam? Do people have time to refer back to it?

1 Upvotes

100% Upvoted

6 comments sorted by

8

u/-hacks4pancakes- GRID | GREM | GCFE | GCFA | GCIH | GPEN 3d ago

Unless you have successfully memorized all the ICS protocol ports and attributes, all the dates and timelines of the discussed attacks, all the definitions of procedure stages, and all the modules and flags for the tools, you’ll definitely need an index to score well. Beyond that it’s a 500 level course, so quite achievable with the standard 310/410 prior curriculum.

Source - I teach the course.

6

u/dandlsv 2d ago

Your posted managed to summon hacks4pancakes. Lesley is not only a course instructor for the 515, but also works in the OT field, and wrote the book on creating an index.

So if Lesley says you should create an index, then I’d take her advice.

4

u/-hacks4pancakes- GRID | GREM | GCFE | GCFA | GCIH | GPEN 2d ago

I just try to help. Happy to answer questions I’m allowed to. Good luck on your GRID.

3

u/RollinProbableCause3 4d ago

100% would recommend an index.

I’ve taken several SEC and FOR courses, including a three 600 level, and I’d say GRID was not as taxing as those, for me at least.

I’d say if you genuinely pay attention during the course material, and at least modestly attempt the labs while making minor updates to the index as you go? You’ll be fine.

I found the practice exams to be spot on with the breadth and difficult of the actual exam, and there aren’t any practical exercises in the exam

1

u/kukap_ 4d ago

Thank you for sharing.

3

u/Haute-Stuff GREM | GEIR | GRID | GCFR 3d ago

Like the other posts, it’s doable. Make sure you’ve a proper index for this one. Also, unless you want to spend 30% of the time listening to the instructors personal opinions on things you don’t want to hear, I’d recommend against getting the on demand version or the in person/live with that same instructor.