- Apply safety techniques on the job, including lockout and tagout, job safety analysis, PPE, hazard identification, and safety meetings.
- Explain what makes OT different, including IT and OT convergence, the roles of PLCs, HMIs, and SCADA systems, and the critical infrastructure sectors.
- Describe control theory concepts such as control logic, set points, inputs and outputs, timers, process variables, and control languages.
- Compare serial, Ethernet, and wireless OT protocols such as Modbus, DNP3, BACnet, and Profinet, plus legacy, embedded, virtualized, cloud, and edge infrastructure.
CompTIA SecOT+ Certification Training Course
Get ready for CompTIA SecOT+ V1 (SOT-001), the new CompTIA certification for securing operational technology in manufacturing and critical infrastructure. CompTIA lists the launch as December 2026.
Protect the systems that run plants, utilities, and critical infrastructure.
Operational technology keeps water flowing, power on, and production lines running. When those systems are attacked, the result can be physical harm, not just lost data. Our CompTIA SecOT+ Certification Training Course is built for experienced professionals who already work around PLCs, HMIs, and SCADA systems and now need to secure them.
CompTIA SecOT+ validates the skills to secure and manage OT systems in manufacturing and critical infrastructure. CompTIA describes it as a certification for experienced professionals who need skills in OT risk assessment, compliance, threat intelligence, architecture, and incident response.
We follow the six objective areas CompTIA has published for SOT-001: OT Systems and Safety Foundations, OT Risk Management, OT Threat Intelligence, OT Cybersecurity Architecture, Design, and Engineering, OT Security Operations, and OT Incident Management. Each module ties the objective to real plant floor and control room decisions, so you learn why a control that works in IT can cause trouble in OT.
Through instructor-led sessions, scenario reviews, protocol walkthroughs, architecture exercises, and incident response practice, we help you get ready for the exam while sharpening the judgment that OT security engineers, ICS security analysts, and OT network engineers use every day.
Build SecOT+ readiness and practical OT security skills.
Work Safely in OT
Apply lockout and tagout, hazard identification, and OT specific safety practice while you assess and change systems.
Manage OT Risk
Assess risk, run compliance programs, and align cybersecurity work with business and operational goals.
Design Secure OT
Build, harden, and operate secure OT architectures across physical, network, hardware, and software layers.
Detect and Respond
Monitor industrial environments, manage vulnerabilities, and run OT incident response for cyber and cyber physical events.
Who Should Attend
- OT and ICS security engineers who protect control systems in plants, utilities, and facilities.
- Control system engineers and automation technicians taking on cybersecurity duties.
- IT security professionals moving into OT who already have years of OT exposure.
- Risk, compliance, and incident response staff who support critical infrastructure operations.
Recommended Experience
- CompTIA recommends 3+ years of hands-on work in OT environments.
- CompTIA also recommends 2+ years implementing OT cybersecurity solutions.
- Comfort with PLCs, HMIs, SCADA, and common industrial protocols helps you move faster.
- Security fundamentals at the level of CompTIA Security+ make the risk and operations modules easier.
Six modules mapped to the published SecOT+ objectives.
CompTIA has published six objective areas for SOT-001. CompTIA has not published domain weights or a question count yet, so we cover each area in full.
Full CompTIA SecOT+ curriculum breakout.
- Connect governance, risk, and compliance to security goals, operational goals, and business continuity.
- Run cybersecurity program management with risk registers, maturity assessments, roadmaps, RACI charts, SLAs, training, and documentation.
- Apply risk assessment frameworks and methods, scope assessments, and choose controls and treatment options.
- Handle risk monitoring, audits, reporting, escalation, and change management for OT systems.
- Identify intelligence types and use frameworks such as the Diamond Model, MITRE ATT&CK, and the Cyber Kill Chain.
- Study historical OT events such as Stuxnet and Industroyer and what they teach defenders.
- Describe OT threat actors, attack vectors, vulnerabilities, and techniques.
- Use OT threat feeds, platforms, IoCs, TTPs, and information sharing channels for defense.
- Apply least privilege, compartmentalization, resilience, auditability, interoperability, and defense in depth.
- Evaluate physical security, including access control, surveillance, barriers, and inspections.
- Select hardware, host, and application controls such as secure boot, TPM, firmware updates, port management, endpoint protection, OS benchmarks, code signing, and patching.
- Recommend network controls including firewall rules, segmentation, encryption, IDS and IPS, wireless management, and secure remote access with MFA, PKI, and directory services.
- Maintain asset and software inventories, discovery processes, and configuration management.
- Analyze logs, threat hunting artifacts, SIEM, SOAR, and security management data.
- Prioritize, test, and coordinate vulnerability remediation and patching in OT.
- Secure removable media, mobile devices, and external devices in OT environments.
- Use incident management frameworks including the PICERL model and ICS4ICS.
- Combine cyber and physical response with escalation, notification, and mutual aid.
- Build and update response plans and playbooks and run exercises.
- Triage, collect data, keep chain of custody, analyze baselines and logs, and carry out containment, eradication, recovery, and mandatory reporting.
Designed for practical OT security training and SOT-001 preparation.
Protocol and Control Review
Work through control logic, set points, and protocols such as Modbus, DNP3, BACnet, and Profinet so security choices fit how the process runs.
Architecture Exercises
Practice segmentation, secure remote access, and defense in depth for networks that mix legacy and modern equipment.
Threat and Incident Scenarios
Study Stuxnet, Industroyer, and other OT events, then rehearse PICERL and ICS4ICS based response.
Exam Readiness
Objective by objective review across all six SecOT+ areas, with guidance on registering once the exam launches.
Prepare for the official CompTIA SecOT+ V1 SOT-001 exam.
SecOT+ SOT-001 Exam Readiness
We prepare you to secure, monitor, and recover OT systems in manufacturing and critical infrastructure.

CompTIA SecOT+ is version V1 with exam series code SOT-001. CompTIA lists the launch as December 2026 and pre-orders are open now. The exam is offered in English, and CompTIA estimates retirement about three years after launch.
The exam covers six objective areas: OT Systems and Safety Foundations, OT Risk Management, OT Threat Intelligence, OT Cybersecurity Architecture, Design, and Engineering, OT Security Operations, and OT Incident Management.
CompTIA recommends 3+ years of hands-on work in OT environments and 2+ years implementing OT cybersecurity solutions. CompTIA has not yet published the question count, time limit, passing score, or domain weights. We will add them to this page when CompTIA does.
Where CompTIA SecOT+ can take your career.
CompTIA SecOT+ shows employers that you can do the work in operational technology security. We built this course around the jobs our learners actually go after, so the labs and reviews map to tasks you will see in those roles.
OT Security Engineer
Secure control systems in plants and utilities.
ICS Security Analyst
Monitor and respond to threats on industrial networks.
OT Network Engineer
Design segmented, resilient OT networks.
Security Risk Analyst
Assess OT risk against safety and uptime needs.
Ways to pay for CompTIA SecOT+ training.
Accumentum is an Army CA and Air Force COOL Approved Vendor. If you are a soldier or airman, start a request in ArmyIgnitED or AFVEC. Those systems decide eligibility and funding for each course, and we help you with the paperwork. See our Army CA pathway, our AF COOL pathway, and the full funding options page.
Paying on your own? PathPay lets you start CompTIA SecOT+ training after your first monthly payment clears and spread the rest of the course fee over a short schedule. You get the same instructors, labs, and support as a full upfront enrollment. Questions about funding? Email us at info@accumentum.net.
Courses that pair well with CompTIA SecOT+.
SecOT+ builds on years of OT work, so many candidates also hold Security+ or CySA+. You can browse the full CompTIA training catalog or our complete course list.
CompTIA Security+ Certification Training Course
Pairs with SecOT+ by extending your skills in core cybersecurity operations.
CompTIA CySA+ Certification Training Course
Pairs with SecOT+ by extending your skills in security analytics and response.
CompTIA SecurityX Certification Training Course
Pairs with SecOT+ by extending your skills in advanced security architecture and engineering.
How we pace the CompTIA SecOT+ course.
Our CompTIA SecOT+ course has 6 modules. We teach them in order because each one builds on the last. In the first half you work through OT Systems and Safety Foundations, OT Risk Management, and OT Threat Intelligence. In the second half you move on to OT Cybersecurity Architecture, Design, and Engineering, OT Security Operations, and OT Incident Management.
Plan on steady weekly study between sessions. Read the objectives for the week before class, practice the skills in a lab or on your own gear, and come with questions. Near the end we review weak spots against the official SecOT+ SOT-001 objectives so you go into the exam with a clear plan.
Every SecOT+ sub objective, in plain language.
Safety in the OT workplace
You will apply lockout and tagout, job safety analysis, PPE, hazard identification, and safety meetings. In OT, a mistake in the field can hurt people, so safety comes before any security change.
What makes OT unique
You will tell IT and OT apart, explain how they converge, and describe the roles of PLCs, HMIs, and SCADA systems across the critical infrastructure sectors.
Control theory
You will read control logic and work with set points, inputs and outputs, timers, process variables, and control languages so you know what a change will do to the process.
OT protocols and infrastructure
You will compare serial, Ethernet, and wireless protocols such as Modbus, DNP3, BACnet, and Profinet, and weigh legacy, embedded, virtualized, cloud, and edge designs.
Governance and program management
You will connect security to operations and continuity, then run a program with risk registers, maturity assessments, roadmaps, RACI charts, SLAs, training, and documentation.
Risk assessment and monitoring
You will scope assessments, apply frameworks and methods, pick controls and treatments, and handle audits, reporting, escalation, and disposition.
Change management
You will identify, test, communicate, and approve changes so updates do not stop production.
Threat intelligence foundations
You will use intelligence types and frameworks such as the Diamond Model, MITRE ATT&CK, and the Cyber Kill Chain, and learn from events such as Stuxnet and Industroyer.
Threat landscape and feeds
You will describe OT threat actors, vectors, and techniques, then use threat feeds, platforms, IoCs, TTPs, and sharing channels to defend your site.
Secure architecture principles
You will apply least privilege, compartmentalization, resilience, auditability, interoperability, and defense in depth to OT designs.
Physical, hardware, and host security
You will evaluate access control, surveillance, and barriers, then choose secure boot, TPM, firmware updates, port management, backups, tamper protection, endpoint protection, OS benchmarks, code signing, and patching.
Network and identity controls
You will recommend firewall rules, segmentation, encryption, IDS and IPS, and wireless management, plus account management, MFA, PKI, directory services, and secure remote access.
Asset and vulnerability management
You will keep asset and software inventories, run discovery and configuration management, and identify, validate, triage, fix, and verify vulnerabilities in OT.
Security monitoring and portable devices
You will analyze logs, threat hunting artifacts, SIEM, and SOAR data, and control removable media, mobile, and external devices.
Incident frameworks and preparation
You will use the PICERL model and ICS4ICS, combine cyber and physical response with mutual aid, and build plans, playbooks, and exercises.
Response, recovery, and reporting
You will triage, collect data, keep chain of custody, find root cause, compare baselines and logs, and carry out containment, eradication, recovery, validation, and mandatory reporting.
Understand how our CompTIA SecOT+ Certification Training Course prepares you for SOT-001 and for securing OT systems in manufacturing and critical infrastructure.
Enroll in the CompTIA SecOT+ Certification Training Course with Accumentum.
Join our CompTIA SecOT+ Certification Training Course to prepare for SOT-001 and strengthen your ability to secure OT systems across all six published objective areas.
For course dates, cohort availability, and enrollment help, visit our registration page below or email us at info@accumentum.net.
Secure the systems that keep critical operations running.
Prepare for CompTIA SecOT+ SOT-001 while building practical skills in OT safety, risk, threat intelligence, secure architecture, security operations, and incident response.
