Cyber-attacks on Industrial Control Systems (ICS) can be particularly severe, as they may manipulate sensor and control data to cause significant damage, as exemplified by the Stuxnet worm. Given the advanced nature of these attacks, current automated detection systems are insufficient, necessitating continued human involvement in ICS protection. We propose several training-based solutions to enhance the defense of these systems by better preparing human operators to identify and respond to such threats.