RCCE Course
Course #700

Medical device security Hardening Clinic

📊 Level: Beginner
⏱️ Duration: 2 Days
🏷️ Track: OT Security
📋 Prerequisites: None
🖥️ Mode: Online Instructor-Led
📝 Course Description

RCCE students will learn operational technology environments, ICS/SCADA systems, industrial protocol security, safety-critical systems, and OT network segmentation. RCCE students will learn to protect industrial control systems with security controls that respect operational safety requirements, defend critical infrastructure against cyber-physical threats, and bridge the gap between IT security and OT operations. This hands-on hardening course focuses on reducing attack surface through practical configuration changes and security guardrails. Starting from foundational concepts, RCCE students will learn to apply hardening baselines, validate configurations, and measure the security improvement achieved. Students walk away with actionable hardening checklists and the skills to maintain hardened configurations as environments evolve.

🎯 Target Audience
  • Security Engineers building defensive controls
  • Security Analysts and Blue Team members
  • Systems Administrators with security responsibilities
  • GRC and Risk Professionals supporting controls
  • Professionals implementing Medical device security Hardening Clinic
🧠 What You Will Learn
  • Execute hands-on tasks for medical device security
  • Execute hands-on tasks for hardening clinic
  • Explain Course Overview fundamentals
  • Execute hands-on tasks for learning objectives — covering Course Scope, Industrial protocol security for healthcare.
  • Execute hands-on tasks for course scope — covering Industrial protocol security for healthcare.
  • Execute hands-on tasks for what are medical devices?
  • Execute hands-on tasks for class i — low risk — covering Bandages, tongue depressors, exam gloves, Infusion pumps, patient monitors, Pacemakers, implantable defibrillators.
  • Execute hands-on tasks for class ii — moderate risk — covering Bandages, tongue depressors, exam gloves.
  • Execute hands-on tasks for software as medical device (samd) — covering Pacemakers, implantable defibrillators.
  • Execute hands-on tasks for premarket approval (pma) mandatory — covering Clinical decision support tools.
  • Execute hands-on tasks for medical device ecosystem
  • Execute hands-on tasks for key stakeholders — covering Manufacturers: firmware, updates, recalls.
📚 Course Outline
Module 01Medical Device Security
Module 02Hardening Clinic
Module 03Course Overview
Module 04Learning Objectives
Module 05Course Scope
Module 06What Are Medical Devices?
Module 07Class I — Low Risk
Module 08Class II — Moderate Risk
Module 09Software as Medical Device (SaMD)
Module 10Premarket approval (PMA) mandatory
Module 11Medical Device Ecosystem
Module 12Key Stakeholders
Module 13Integration Challenges
Module 14Building Management Systems
🧪 Lab Details

All hands-on labs run on Rocheston Rose X OS. Students practice medical device security hardening clinic by implementing the controls discussed in class, with a focus on real-world deployment, monitoring, and validation.

  • Lab 1: Execute hands-on tasks for medical device security
  • Lab 2: Execute hands-on tasks for hardening clinic
  • Lab 3: Explain Course Overview fundamentals
  • Lab 4: Execute hands-on tasks for learning objectives
  • Lab 5: Execute hands-on tasks for course scope
📊 Skill Level
Beginner
Beginner Intermediate Advanced Expert
Duration
2 Days
🎓
Certificate
Completion
🖥️
Lab Platform
Rose X OS
👨‍🏫
Mode of Training
Online Instructor-Led
🔥
Platform
Zelfire
🐦‍⬛
Cyber Range
Raven
📓
Study Material
CyberNotes
🏆 Certificate

Upon successful completion of this course, students will receive an official RCCE Course Completion Certificate for Medical device security Hardening Clinic, verifiable through the Rocheston certification portal.

🔑 Student Access & Materials
  • Full access to all course materials and slide decks
  • Hands-on lab access on Rocheston Rose X OS environment
  • Access to Rocheston CyberNotes
  • Access to Rocheston Zelfire — EDR/XDR SIEM platform
  • Access to Rocheston Raven — online cyber range exercise platform
  • Access to Rocheston Vulnerability Vines AI