Assessing and responding to cyber-risk

Incident response and disaster recovery for IT are not directly transferrable to operational technology (OT) / control systems. Some IT lessons learned and best practices can be used as starting points and frameworks for OT, but control systems and the underlying devices that support OT system requirements can introduce unique challenges to IT systems. Responding to a cyberevent in the control system space requires new and different strategies from those typically put in place within the IT space.

This white paper explores the ins and outs of incident response plans (IRP)—from the foundational structure of an OT IRP and how to get started building one to who you should pull in to form a well-rounded response team capable of shaping and executing a successful IRP.

This white paper is the fourth in a series, “Building Resistance: A Look at OT, IT and Mitigating Risks.”