Another great session with Rob Hayes, Max Higginson, Sam Taylor and Michael Woo talking through "Incident Response and Recovery" in the latest OT Security Connect webinar.

The team did a fantastic job highlighting the challenges, here's some key points:

Importance of IR in OT Security:

💡 IR builds resiliency, ensures critical systems can be recovered based on their importance, in the event of an incident

Pre-Incident Considerations:

💡Assign criticality to different systems to help align cyber risk management with business risk management

💡Map technology, set control targets, develop clear recovery plan. Testing and continuous improvements are key

Post-Incident Recovery and Restoration:

💡Safety is first priority, recovery follows operational sequences and ensures systems are brought back online safely

💡Situational factors such as time of year can affect recovery priorities. Manual processes should be defined for critical operations