Threat Model a Water-Utility SCADA Network Before a Migration
Overview
What this challenge is about.
Build a STRIDE threat model for a water-utility SCADA migration and deliver a 15-page report. Earn a verifiable certificate.
The scenario
The utility (publicly owned, US EPA regulated, no prior cloud exposure on the OT side) has a tight procurement window and a board nervous after the 2021 Oldsmar incident.
The Brief
What you'll do, and what you'll demonstrate.
Produce a STRIDE + ATT&CK for ICS threat model for a SCADA migration that procurement can defensibly score 3 vendors against.
Earning criteria — what you'll demonstrate
- Apply STRIDE to an ICS environment without forcing IT-shaped assumptions
- Map ICS-specific threats to MITRE ATT&CK for ICS techniques
- Reason about cloud-bridge risk on a previously air-gapped OT network
- Translate a threat model into procurement-grade vendor scoring criteria
Program Fit
Where this fits in your program.
Sharpens the same skills your degree expects you to demonstrate.
Cyber-Physical and Cybercrime Topics
Master · Security
Strong alignment
This challenge maps to Cyber-Physical and Cybercrime Topics at the Master level. It sharpens the same practical skills your coursework expects — but in a real industry context with actual constraints and deliverables.
Skills
Skills you'll demonstrate.
Each one shows up on your verified credential.
- Threat Modeling
Apply threat modeling to solve real industry problems and demonstrate production-level capability.
- Ics Security
Apply ics security to solve real industry problems and demonstrate production-level capability.
- Scada
Apply scada to solve real industry problems and demonstrate production-level capability.
- Mitre Attack Ics
Apply mitre attack ics to solve real industry problems and demonstrate production-level capability.
- Network Segmentation
Apply network segmentation to solve real industry problems and demonstrate production-level capability.
- Risk Assessment
Apply risk assessment to solve real industry problems and demonstrate production-level capability.
Careers
Career paths this challenge builds toward
Completing this challenge demonstrates skills that transfer directly to these roles: