5 Considerations for ICS Incident Response
Explore a comprehensive webinar on Industrial Control Systems (ICS) incident response, led by Kai Thomsen, head of Dragos's International ICS threat hunting efforts. Delve into five crucial recommendations for ensuring successful, timely, and efficient incident response, ultimately leading to a safe return to stable operations. Gain insights on preparing for IR events, assigning decision-making responsibilities, determining when to shut down operations, identifying root causes, and engaging an IR team. Learn about the Incident Command System, ICS Cyber Kill Chain considerations, escalation factors, and defining thresholds for unacceptable risk. Understand the importance of knowing your adversary, focusing on relevant activity groups, identifying techniques, and assessing your detection capabilities to enhance your organization's ICS cybersecurity posture.