ICS Incident Response Tabletops

Question 1

Questions to ask on preparedness

Answer 1

Resilience against ransomware, are critical assets protected, can you run the ICS process in manual mode or completely isolated from the IT network?

Question 2

ICS IR Tabletop Planing

Answer 2

1.) Know Teams 2.) Who is responsible 3.) Communication (Internal and external) 4.) Defensible Cyber Position (Isolation)…

Question 3

Tabletop Benefits

Answer 3

Validate Readiness, Awareness, Improved Detection

Question 4

How to run tabletops

Answer 4

Planning, Teams, Scenarios, Run Time, Close Gaps

Question 5

Tabletop Scenarios

Answer 5

1.) Ransomware on ICS or IT 2.) HMI Activity 3.) ICS Protocol Abuse 4.) IT–> ICS/OT Trust Abuse 5.) Physical Access attack.

Question 6

Ransomware on ICS or IT