Be ready before everyone else for CompTIA SecOT+ (SOT-001).
CompTIA SecOT+ launches in December 2026 and is designed for professionals securing operational technology (OT) systems in manufacturing, industrial, and critical infrastructure environments.
This study guide gives you an early, structured path through the SOT-001 draft objectives, with clear explanations, OT-focused examples, case studies, practice questions, and revision tools built for candidates who want to prepare before the exam goes live.
What’s inside:
Full draft objective coverage: Every major topic from the CompTIA SecOT+ SOT-001 draft blueprint explained in plain English, with guidance to check CompTIA’s website for final objective updates before exam day.
180 exam-style practice questions: Two full-length practice exams with detailed explanations to help you test your knowledge, spot weak areas, and improve before sitting the real exam.
Real-world OT attack case studies: Stuxnet, Industroyer, TRITON/TRISIS, Colonial Pipeline, Oldsmar, BlackEnergy, Havex, and more, with practical lessons for OT security teams.
OT protocol deep dives: Modbus, DNP3, BACnet, Profinet, EtherNet/IP, OPC UA, HART, and other industrial protocols explained through a security lens.
IT-to-OT bridge notes: Learn how familiar cybersecurity concepts change in OT environments, including firewalls, patching, segmentation, asset management, vulnerability handling, monitoring, and incident response.
Safety and physical impact coverage: Lockout/tagout (LOTO), job safety analysis (JSA), PPE, environmental hazards, safety meetings, and the operational realities that make OT security different from traditional IT security.
Purdue Model architecture: Levels 0 through 5, zone and conduit design, IDMZ architecture, and practical controls for securing converged IT/OT networks.
Threat intelligence and incident response: MITRE ATT&CK for ICS, the Diamond Model, Cyber Kill Chain, PICERL, ICS4ICS, and OT-specific containment, eradication, and recovery approaches.
Quick reference appendix: Protocol cheat sheet, attack timeline, acronym glossary, framework crosswalk, incident response comparison, and OT vs. IT review tables for last-minute revision.
Who this book is for:
OT cybersecurity engineers preparing for the SOT-001 exam
IT security professionals moving into OT security roles
Security+, CySA+, CISSP, and similar certification holders expanding into industrial security
Control systems engineers adding cybersecurity to their skillset
Industrial network architects securing converged IT/OT environments
Government, defence, and critical infrastructure professionals working with OT systems
Three study plans included:
Choose from an 8-week plan for experienced OT professionals, a 12-week plan for IT security professionals crossing into OT, or a 16-week plan for candidates building both OT and cybersecurity foundations. Each plan includes weekly reading goals, practice exam timing, and focus areas.
Important note: This guide is based on CompTIA’s published draft SecOT+ objectives. Draft objectives can change before launch, so candidates should always check the official CompTIA website for the final objectives before booking the exam.
Do not wait for launch day. Start now, build the foundation early, and give yourself the strongest possible chance of passing SecOT+ on your first attempt.
