Главная
Study mode:
on
1
Intro
2
Preparing for an ICS IR Event
3
Know Your Adversary - Focus on Relevant Activity Groups
4
Identify Techniques
5
Understand your Detection Capabilities
6
Considerations for ICS IR Preparation
7
Assigning IA Decision Making Responsibility
8
The Incident Command System
9
ICS IR Decision Making Considerations
10
Determining When Shutdown of Operations is justified
11
ICS Cyber Kill Chain Considerations
12
Escalation Factors
13
Define Thresholds for Un-Jacceptable Risk
14
Getting to Root Cause
15
RCA Considerations
Description:
Explore a comprehensive webinar on Industrial Control Systems (ICS) incident response, led by Kai Thomsen, head of Dragos's International ICS threat hunting efforts. Delve into five crucial recommendations for ensuring successful, timely, and efficient incident response, ultimately leading to a safe return to stable operations. Gain insights on preparing for IR events, assigning decision-making responsibilities, determining when to shut down operations, identifying root causes, and engaging an IR team. Learn about the Incident Command System, ICS Cyber Kill Chain considerations, escalation factors, and defining thresholds for unacceptable risk. Understand the importance of knowing your adversary, focusing on relevant activity groups, identifying techniques, and assessing your detection capabilities to enhance your organization's ICS cybersecurity posture.

5 Considerations for ICS Incident Response

Dragos: ICS Cybersecurity
Add to list
0:00 / 0:00