Skip to content
Quest Training

IoT Security Training Course

Builds practical skills to secure connected devices, networks, data flows and IoT platforms, tackling constrained devices and integration with corporate IT.

IOTC · IoT, M2M & Connected TechnologiesAll Levels#2786ClassroomEnglish , Arabic
Duration
5 Days
Download BrochureView Upcoming Dates

Free substitution at any time · 30+ days' notice: full refund minus 10%. Cancellation policy

Sectors:Telecommunications & Satellite TechnologyCategories:IoT, M2M & Connected Technologies

Course Overview

The IoT Security Training Course provides practical knowledge and skills for securing connected devices, communication networks, data flows, and IoT platforms across industrial and enterprise environments. It examines the security challenges associated with large-scale device connectivity, limited device resources, remote deployment, and the integration of IoT systems with corporate IT and operational technology (OT) infrastructure. The course covers the IoT threat landscape, device vulnerabilities, identity and access management, secure communications, encryption, firmware protection, and vulnerability management. Participants explore how weaknesses in device configuration, authentication, software updates, and network architecture can expose organizations to unauthorized access, data breaches, service disruption, and operational risks. Particular attention is given to securing industrial IoT (IIoT) environments, including connected sensors, smart meters, monitoring systems, industrial gateways, and remote assets. The programme addresses network segmentation, secure device onboarding, continuous monitoring, incident response, and the protection of IoT deployments throughout their lifecycle. Through practical exercises and risk-based scenarios, participants develop a structured approach to identifying vulnerabilities, evaluating security controls, and designing layered protection for IoT ecosystems. The course also examines relevant security frameworks and standards, helping organizations establish governance, strengthen resilience, and integrate IoT security into broader cybersecurity and risk management programmes.

Learning Objectives

  • Explain the architecture of IoT ecosystems and the principal security risks affecting connected devices and platforms.
  • Identify common IoT vulnerabilities, attack vectors, and weaknesses in device configuration and communication.
  • Assess risks associated with device identity, authentication, authorization, and access management.
  • Apply security principles to IoT network architecture, segmentation, and communication protocols.
  • Evaluate encryption, secure key management, and data protection requirements for IoT deployments.
  • Develop controls for secure firmware, software updates, device configuration, and lifecycle management.
  • Assess vulnerabilities in industrial IoT environments and their potential impact on operational continuity.
  • Establish monitoring and logging practices for detecting suspicious IoT activity.
  • Develop incident response procedures for compromised devices and IoT-related security events.
  • Evaluate IoT security requirements against relevant frameworks, standards, and organizational policies.
  • Design layered security controls based on business impact, operational risk, and device capabilities.
  • Develop an actionable IoT security improvement plan for an enterprise or industrial environment.

Who Should Attend

This course is designed for professionals responsible for securing, designing, implementing, operating, or managing connected devices and IoT infrastructure. It is particularly relevant to organizations deploying IoT solutions across industrial operations, energy, utilities, manufacturing, transportation, logistics, healthcare technology, and smart facilities. The programme is suitable for: Cybersecurity professionals and information security specialists. IoT engineers, solution architects, and systems integrators. IT infrastructure, network, and systems administrators. Industrial automation, control systems, and OT security engineers. Engineering, maintenance, and reliability professionals managing connected assets. Digital transformation and technology project managers. Risk management, compliance, and information governance professionals. Security operations centre (SOC) analysts and incident response teams. Technical consultants responsible for IoT deployment and security assessments. Managers overseeing connected infrastructure, smart facilities, and industrial digitalization.

Learning Outcomes

  • Map IoT components, communication pathways, trust boundaries, and critical assets.
  • Identify device-level, network-level, application-level, and cloud-related security weaknesses.
  • Evaluate IoT threats based on likelihood, impact, exposure, and operational criticality.
  • Define secure device identity, authentication, authorization, and access control requirements.
  • Recommend appropriate encryption and key management controls for connected devices.
  • Apply network segmentation and secure communication principles to IoT architectures.
  • Establish secure firmware management, patching, and vulnerability remediation processes.
  • Develop monitoring and detection strategies for abnormal device and network behaviour.
  • Formulate incident response actions for compromised devices and disrupted IoT services.
  • Assess IoT security practices against recognized cybersecurity frameworks and standards.
  • Prioritize security improvements according to risk, feasibility, and business requirements.
  • Produce an IoT security action plan covering prevention, detection, response, and recovery.

Course Outline

Day 1

IoT Architecture, Threat Landscape, and Security Fundamentals

  • IoT concepts, architecture, and operational characteristics.
  • Components of an IoT ecosystem: devices, sensors, gateways, networks, platforms, and applications.
  • Differences between consumer IoT, enterprise IoT, and industrial IoT (IIoT).
  • IoT trust boundaries, data flows, interfaces, and critical dependencies.
  • Common attack surfaces across devices, wireless networks, APIs, mobile applications, and cloud platforms.
  • Threat actors, attack motivations, and common attack scenarios.
  • Device tampering, unauthorized access, credential theft, spoofing, and denial-of-service attacks.
  • Risks associated with default passwords, insecure configurations, exposed interfaces, and outdated software.
  • Security implications of constrained devices, limited processing capacity, and long deployment lifecycles.
  • Introduction to risk-based security assessment and defense-in-depth principles.
  • Practical Exercise: Map a sample IoT deployment, identify its critical assets and trust boundaries, and develop an initial threat and vulnerability register.
Day 2

Device Security, Identity Management, and Secure Communications

  • Secure device provisioning, registration, onboarding, and decommissioning.
  • Device identity and authentication mechanisms, including certificates and cryptographic credentials.
  • Authorization, least-privilege access, and role-based access control.
  • Secure storage of credentials, secrets, and cryptographic keys.
  • Encryption in transit and at rest, with attention to device capabilities and operational requirements.
  • Secure communication protocols and their security considerations, including TLS, MQTT over TLS, and CoAP security options.
  • Wireless security risks involving Wi-Fi, Bluetooth Low Energy, cellular IoT, and LPWAN technologies.
  • Secure API design and protection of device-to-platform communication.
  • Firmware integrity, secure boot, signed updates, and rollback protection.
  • Secure configuration management and hardening of IoT gateways.
  • Practical Exercise: Assess a sample IoT device and communication architecture, identify weaknesses in authentication and data protection, and recommend appropriate security controls.
Day 3

IoT Network Security, Vulnerability Management, and Industrial IoT Protection

  • Secure network architecture for connected devices and IoT platforms.
  • Network segmentation, isolation, controlled connectivity, and secure gateway design.
  • Separating IT, OT, and IoT environments according to operational risk.
  • Firewall policies, traffic filtering, remote access controls, and secure administrative connections.
  • Vulnerability discovery, assessment, prioritization, and remediation.
  • Software and firmware inventory, dependency management, and exposure tracking.
  • Secure patch management for devices with limited maintenance windows or restricted connectivity.
  • Risk assessment for legacy devices, unsupported firmware, and equipment that cannot be patched.
  • Security implications of cloud-connected sensors, remote monitoring systems, and industrial gateways.
  • Protection of industrial IoT deployments in manufacturing, energy, utilities, and critical infrastructure.
  • Practical Exercise: Review a sample industrial IoT network diagram, identify insecure pathways and high-risk assets, and develop a prioritized segmentation and vulnerability remediation plan.
Day 4

Security Monitoring, Incident Response, and IoT Resilience

  • IoT security monitoring architecture and integration with existing security operations.
  • Collection and analysis of device logs, network telemetry, authentication events, and platform alerts.
  • Establishing device baselines and detecting abnormal communication patterns.
  • Indicators of compromise involving connected devices and IoT services.
  • Security information and event management (SIEM) integration and alert correlation.
  • Incident classification, escalation, evidence preservation, and investigation procedures.
  • Response to compromised devices, unauthorized commands, credential exposure, and service disruption.
  • Containment options for devices that cannot be immediately patched or taken offline.
  • Backup, recovery, secure restoration, and continuity planning for critical IoT services.
  • Coordination between cybersecurity, IT operations, engineering, OT teams, and external service providers.
  • Tabletop exercises and lessons-learned reviews following IoT security incidents.
  • Practical Exercise: Work through an IoT security incident scenario involving suspicious device traffic, determine the likely attack path, and develop containment, investigation, recovery, and communication actions.
Day 5

IoT Security Governance, Standards, and Implementation Planning

  • IoT security governance, accountability, and policy development.
  • Security requirements throughout the IoT device lifecycle, from procurement to decommissioning.
  • Supplier security assessments and evaluation of device security capabilities.
  • Secure-by-design and secure-by-default principles for IoT products and deployments.
  • Overview of relevant guidance and standards, including the NIST Cybersecurity Framework, NIST guidance for IoT device cybersecurity, ISO/IEC 27001, and IEC 62443 where applicable.
  • Risk assessment, control selection, documentation, and evidence of implementation.
  • Security requirements for device updates, vulnerability disclosure, support periods, and end-of-life management.
  • Privacy considerations, data minimization, retention, and access governance.
  • Security metrics and key performance indicators for vulnerability remediation, device compliance, incident response, and control effectiveness.
  • Prioritization of security investments based on operational impact, risk exposure, and available resources.
  • Developing an implementation roadmap with ownership, milestones, dependencies, and review cycles.
  • Practical Exercise: Develop an IoT security improvement roadmap for a selected enterprise or industrial use case, including priority risks, recommended controls, implementation responsibilities, performance indicators, and review milestones.

Upcoming Dates

Selected date

Manama · 29 Mar – 2 Apr 2027 · Classroom

Need more details?Chat with us on WhatsApp

CityDatesPrice per ParticipantEarly Bird
RomeScheduled
2 – 6 Nov 2026€7,000—
SelectDownload Brochure
AbujaScheduled
9 – 13 Nov 2026€7,700—
SelectDownload Brochure
ViennaScheduled
9 – 13 Nov 2026€6,400—
SelectDownload Brochure
AccraScheduled
16 – 20 Nov 2026€7,700—
SelectDownload Brochure
AmmanScheduled
22 – 26 Nov 2026€4,000€3,600until 2 Nov
SelectDownload Brochure
AmsterdamScheduled
30 Nov – 4 Dec 2026€6,000€5,400until 9 Nov
SelectDownload Brochure
BakuScheduled
7 – 11 Dec 2026€5,300€4,770until 16 Nov
SelectDownload Brochure
BarcelonaScheduled
14 – 18 Dec 2026€6,000€5,400until 23 Nov
SelectDownload Brochure
CairoScheduled
21 – 25 Dec 2026€3,800€3,420until 30 Nov
SelectDownload Brochure
Cape TownScheduled
28 Dec 2026 – 1 Jan 2027€7,700€6,930until 7 Dec
SelectDownload Brochure
CasablancaScheduled
28 Dec 2026 – 1 Jan 2027€4,700€4,230until 7 Dec
SelectDownload Brochure
DammamScheduled
4 – 8 Jan 2027€4,800€4,320until 14 Dec
SelectDownload Brochure
DohaScheduled
11 – 15 Jan 2027€4,700€4,230until 21 Dec
SelectDownload Brochure
DubaiScheduled
17 – 21 Jan 2027€4,700€4,230until 28 Dec
SelectDownload Brochure
GenevaScheduled
25 – 29 Jan 2027€7,300€6,570until 4 Jan
SelectDownload Brochure
IstanbulScheduled
1 – 5 Feb 2027€5,300€4,770until 11 Jan
SelectDownload Brochure
JeddahScheduled
7 – 11 Feb 2027€4,800€4,320until 18 Jan
SelectDownload Brochure
KigaliScheduled
15 – 19 Feb 2027€7,700€6,930until 25 Jan
SelectDownload Brochure
Kuala LumpurScheduled
15 – 19 Feb 2027€4,700€4,230until 25 Jan
SelectDownload Brochure
LisbonScheduled
22 – 26 Feb 2027€6,000€5,400until 1 Feb
SelectDownload Brochure
LondonScheduled
1 – 5 Mar 2027€5,800€5,220until 8 Feb
SelectDownload Brochure
MadinahScheduled
8 – 12 Mar 2027€4,800€4,320until 15 Feb
SelectDownload Brochure
MadridScheduled
15 – 19 Mar 2027€6,000€5,400until 22 Feb
SelectDownload Brochure
MakkahScheduled
22 – 26 Mar 2027€4,800€4,320until 1 Mar
SelectDownload Brochure
MilanScheduled
29 Mar – 2 Apr 2027€7,000€6,300until 8 Mar
SelectDownload Brochure
ManamaScheduled
29 Mar – 2 Apr 2027€5,300€4,770until 8 Mar
✓ SelectedDownload Brochure
MuscatScheduled
5 – 9 Apr 2027€6,300€5,670until 15 Mar
SelectDownload Brochure
OnlineScheduled
11 – 15 Apr 2027€2,700€2,430until 22 Mar
SelectDownload Brochure
ParisScheduled
19 – 23 Apr 2027€6,700€6,030until 29 Mar
SelectDownload Brochure
RiyadhScheduled
26 – 30 Apr 2027€4,800€4,320until 5 Apr
SelectDownload Brochure

Available in: Istanbul · Dubai · London · Riyadh · Doha · Amsterdam

Related Courses

Ready to Elevate Your Team's Capabilities?

Speak with our advisors about upcoming programmes or a bespoke corporate training plan.

Download BrochureContact Our Team