1. Event Overview

‍

The Certified Critical Infrastructure Protection Professional (CCIPP) programme, Work Head 15: Cyber Defence, is presented in the supplied brochure as a specialised programme focused on the protection of critical infrastructure and operational technology (OT) environments.

• Accredited training body: CyberPeace, stated in the brochure as accredited by NABET.
• Scheme framework: Conformity Assessment Framework (CAF), Quality Council of India (QCI).
• Scheme manager: National Critical Information Infrastructure Protection Centre (NCIIPC), as stated in the brochure.
• Online theory: 16, 17 and 18 November 2026.
• On-site hands-on labs and assessment: 21 and 22 November 2026.
• Venue: CyberPeace, United Service Institution of India (USI), Rao Tula Ram Marg, opposite Signal Enclave, Vasant Vihar, New Delhi – 110057.

‍

2. Executive Summary

‍

The programme combines three days of online knowledge modules with two days of on-site practical labs and a final professional assessment. Its subject areas include industrial network segmentation, firewalling and packet inspection, host hardening, national critical information infrastructure protection, regulatory compliance, Zero Trust Architecture, industrial cryptography, secure VPNs, automation and command-line analysis.

The practical component is designed around industrial firewall and IDMZ architecture, OT protocol lockdown, vulnerability-scan interpretation and risk scoring, critical patching and compensating controls, directory hardening, protocol analysis and log analysis. This report outlines the programme details available in the brochure and the operational preparations recommended before delivery.

‍

3. Objectives

‍

• Build technical understanding of cybersecurity controls for OT and industrial control system environments.
• Strengthen knowledge of industrial network segmentation, Purdue baseline architecture, next-generation firewalls and deep packet inspection.
• Introduce participants to national CII protection priorities and Indian regulatory and statutory themes listed in the programme.
• Provide applied lab exposure to OT security configuration, vulnerability-risk interpretation, protocol analysis, host hardening and forensic log analysis.
• Assess participants through the final professional assessment covering theory and applied engineering.

‍

4. Programme Schedule

‍

4.1 Online Knowledge Modules

‍

Day 1 — Monday, 16 November 2026

• Industrial Network Segmentation and Purdue Baseline — Shri M.A.K.P. Singh, CTO, CyberPeace and former CISO, MoP.
• Next-Generation Firewall (NGFW) and Deep Packet Inspection — Prof. Sandeep K. Shukla, Director, IIIT Hyderabad.
• Host-Level Hardening and Kernel Runtime Restrictions — Dr. Manish Kumar Rai, OT Security and ICS/SCADA Architecture Master, Hitachi.
• Technical synthesis and architecture Q&A — Shri M.A.K.P. Singh and Dr. Manish Kumar Rai.

‍

Day 2 — Tuesday, 17 November 2026

• NCIIPC Five Pillars of Protection for National CII — Shri Ashutosh Bahuguna, Senior Cyber Security Authority, MeitY.
• CERT-In directives on log retention and chronology — Dr. Sanjay Bahl, Director General, CERT-In.
• Indian IT Act statutory alignment and cyber terrorism — Dr. Nilakshi Jain, Professor and Head of Cyber Security, Shah and Anchor Kutchhi Engineering College.
• Compliance and regulatory review — Shri Ashutosh Bahuguna.

‍

Day 3 — Wednesday, 18 November 2026

• Zero Trust Architecture under NIST SP 800-207 — Lt Gen (Dr.) Rajesh Pant (Retd), former National Cyber Security Coordinator.
• Industrial cryptographic fabrics and secure VPNs — Jayanti Prasad, Co-Founder and Chief Strategy Officer, Synergy Quantum.
• Defence automation using Python and Bash infrastructure scripting — Prof. Sandeep K. Shukla, Head, C3iHub, IIT Kanpur.
• Course wrap-up and transition to practical tracks — Major Vineet Kumar, Founder and Global President, CyberPeace Foundation.

‍

4.2 On-site Hands-on Labs and Assessment

‍

Day 1 — Saturday, 21 November 2026

• Industrial firewall setup and IDMZ architecture — Dr. Manish Kumar Rai and C3iHub Technical Lab Engineers.
• Deep packet inspection and OT protocol lockdown — Prof. Sandeep K. Shukla and IIT Kanpur Forensic Researchers.
• Parsing OT vulnerability scans and risk scoring — CyberPeace Technical Assurance Leads.
• Critical patch cycles and compensating controls — Shri M.A.K.P. Singh and CSIRT-Power Engineering Team.

‍

Day 2 — Sunday, 22 November 2026

‍

• Windows and Linux Active Directory hardening — Dr. Manish Kumar Rai and CyberPeace Active Directory Experts.
• Live OT protocol dissection and Wireshark parsing — Prof. Sandeep K. Shukla and C3iHub Telemetry Specialists.
• Tshark command-line log analysis and artifact lock — Forensic Log Analysts, as listed in the brochure.
• Final professional assessment covering theory and applied engineering — NCIIPC Scheme Managers, NABET Auditors and CyberPeace Board.

‍

5. Fee and Participant Arrangements

‍

• Course fee: ₹45,000 per participant plus GST as applicable.
• Discount: A 10% discount is stated to apply where more than two nominations come from the same organisation.
• The fee includes all three days of online theory, two days of offline hands-on labs, lab access, the final professional assessment and course materials.
• Participants are responsible for arranging their own travel and accommodation for the on-site sessions.
• Lunch, morning tea and evening tea are stated to be provided on both on-site days, 21 and 22 November 2026.
• The brochure identifies students, professionals, academics, researchers, faculty members and others interested in industrial control systems cybersecurity as potential participants.

‍

6. Pre-event Readiness Checklist

‍

• Programme coordination: confirm the event lead, day-wise coordinators, speaker availability, moderator and escalation contacts.
• Participant management: confirm the registration link, nomination list, attendance process, participant communications and accessibility requirements.
• Schedule and communications: confirm session start and end times, breaks, online meeting links, joining instructions and on-site reporting time.
• Venue readiness: confirm room capacity, seating, signage, registration desk, access permissions and venue contact.
• Technical readiness: test displays, microphones, internet, power, backup connectivity, lab machines, required software and account access.
• Lab safety and isolation: confirm authorised lab environments, isolated networks, approved test data, and reset and recovery procedures.
• Learning materials: prepare the final agenda, slides, lab guides, prerequisites, assessment instructions and course materials.
• Assessment: confirm the format, duration, evaluation criteria, invigilation, submission process and contingency arrangements.
• Hospitality and logistics: confirm tea and lunch arrangements for both on-site days and communicate travel and accommodation responsibilities.
• Documentation: prepare attendance records, feedback forms, incident/escalation log, approved photography process and post-event reporting template.

‍

7. Key Risks and Mitigation Measures

‍

• Unconfirmed timings or joining details: issue a final run sheet and participant instructions after the schedule is confirmed.
• Incomplete registration information: publish and test the final registration URL/QR code and maintain one verified participant list.
• Lab access or environment failure: conduct a technical rehearsal and verify credentials, lab images, network isolation and backup exercises.
• Speaker or instructor changes: maintain a confirmed speaker roster and identify a backup facilitator for each module.
• Travel and venue access issues: share the venue address and reporting instructions in advance; participants are responsible for their travel and accommodation.
• Assessment or data-handling uncertainty: communicate assessment rules and ensure practical work occurs only in approved environments.

‍

8. Expected Outcomes

‍

• Participants gain structured knowledge of OT/ICS cybersecurity architecture and critical infrastructure defence controls.
• Participants receive practical exposure to selected firewall, network inspection, vulnerability-risk, hardening and log-analysis tasks.
• Participants develop a stronger understanding of CII protection and compliance themes covered in the programme.
• Assessment results and participant feedback provide inputs for reviewing learning outcomes and improving future deliveries.

‍

9. Details Requiring Confirmation

‍

The brochure does not specify exact daily timings or the online meeting platform and links. It also contains a registration link/QR-code placeholder rather than a final registration destination. Before the event, the organising team should confirm the participant count, speaker availability, on-site reporting time and access instructions, lab prerequisites and software list, assessment duration and rules, event coordinator contact details, and photography or media protocol.

‍

10. Conclusion

‍

The CCIPP Work Head 15: Cyber Defence programme is scheduled to combine online technical instruction with in-person practical labs and a final professional assessment. The brochure sets out a five-day delivery structure and curriculum spanning industrial network architecture, OT security controls, CII protection, compliance and applied analysis. The immediate pre-event priority is to confirm operational details—particularly session timings, participant communications, registration, instructor availability, lab readiness and assessment arrangements—to support coordinated delivery.

‍

Source and Scope Note

‍

This report is based on the supplied eight-page CCIPP brochure. Programme names, dates, venue, fee, session topics and speaker/instructor names are drawn from that source. Readiness actions and risk mitigations are recommendations and do not indicate that the actions have already been completed. No attendance, registration or event-completion figures have been assumed.

‍