Go back

IC32

Also known as: ISA/IEC 62443 Cybersecurity Fundamentals Specialist

IC32 is the entry-level course in ISA's ISA/IEC 62443 Cybersecurity Certificate Programme. It covers the foundations of industrial cybersecurity, the structure of the IEC 62443 standard, and the concepts needed before progressing to specialist certificates such as IC33, IC34, and IC37.

Last updated: April 2026

Key Facts

Full name
Using the ISA/IEC 62443 Standards to Secure Your Industrial Control Systems
Common name
IC32
Issuing body
ISA (International Society of Automation)
Standard reference
ISA/IEC 62443 series
Certificate awarded
ISA/IEC 62443 Cybersecurity Fundamentals Specialist
Format
3 days classroom, 3 days virtual classroom, or self-paced modular
Prerequisite
None (entry point to the programme)
Audience
Plant operators, integrators, IT security staff working in OT, control engineers
Exam
75 multiple-choice questions, taken separately from the course
Validity
ISA certificates do not expire
Next courses
IC33, IC34, IC37 (in any order)

What is IC32?

IC32 introduces delegates to the structure and concepts of the ISA/IEC 62443 series of standards. The course covers cybersecurity fundamentals applied to operational technology, the differences between IT and OT cybersecurity, the structure of the IEC 62443 series, key concepts such as zones and conduits and security levels, the cybersecurity lifecycle, and how the standard applies to real industrial environments. IC32 is the prerequisite for all other certificates in the ISA programme. The certificate exam is taken separately from the course and earns the ISA/IEC 62443 Cybersecurity Fundamentals Specialist designation.

ISA/IEC 62443 Certificate Path Starting From IC32

CourseCertificateRequired Role
IC32Cybersecurity Fundamentals SpecialistEntry to the programme
IC33Cybersecurity Risk Assessment SpecialistRisk assessment
IC34Cybersecurity Design SpecialistDesign
IC37Cybersecurity Maintenance SpecialistMaintenance
IC48 (Fast Track)All three above (5 days)Combined for experienced delegates
All four (or IC48)Cybersecurity ExpertTop of programme

How IC32 Maps to the Standard

IC32 maps directly to the ISA/IEC 62443 series. The course structure mirrors how the standards are organised: general concepts (62443-1-x), policies and procedures (62443-2-x), system requirements (62443-3-x), and component requirements (62443-4-x). Delegates leave with a working knowledge of how to navigate the standard family, which prepares them for the specialist certificates that go deeper into specific roles.

How Cybersecurity Training Providers Deliver IC32

ISA delivers IC32 directly through classroom, virtual classroom, and self-paced modular formats. Authorised training partners also deliver the classroom and virtual versions. The self-paced modular format suits delegates who need flexibility; it gives up to a year to complete modules before sitting the certificate exam. Most external training providers running OT cybersecurity programmes use IC32 as the entry point and progress delegates through IC33, IC34, IC37, or the IC48 fast track over time. An LMS supporting IC32 training needs flexible enrolment, identity verification at exam, content delivery integration with ISA's modular format where applicable, audit-ready records, and tracking that supports delegates progressing through the four-certificate programme.

Common Questions

Do I need IT security experience to take IC32?

No formal experience is required. Some IT or OT background helps, but IC32 is designed as the entry point. Most providers note that 1 to 2 years of relevant experience makes the content easier to absorb.

Is IC32 the same as the Cybersecurity Fundamentals Specialist certificate?

IC32 is the course; Cybersecurity Fundamentals Specialist is the certificate awarded after passing the separate exam. Many delegates take the course but do not sit the exam if they only need the knowledge.

How long does IC32 take?

Three days for classroom or virtual classroom delivery, plus separate exam preparation and the exam itself. Self-paced modular delegates typically complete in 4 to 12 weeks.

Do ISA certificates expire?

No. ISA certificates do not have a renewal cycle. Other bodies that issue IEC 62443 certificates, such as Kiwa/IBEX, may have validity periods (typically 2 years).

Can I skip IC32 and go straight to IC33?

No. IC32 is a prerequisite for IC33, IC34, and IC37. The IC48 fast-track also requires IC32 completion before enrolment.

Train Your Delegates with Blend-ed

OT cybersecurity training providers need an LMS that supports cohort-based delivery, self-paced modular formats, certification exam workflows, and progression tracking through the four-certificate ISA programme. Blend-ed runs flexible enrolment, identity verification at exam, audit-ready records, and progression dashboards that let delegates and admins track their path through IC32 toward the Cybersecurity Expert designation.

Book a demo