Responding to an incident at Halden Water's treatment plant through the OT response funnel: eight stages — prepare, detect, triage, isolate, investigate, eradicate, restore and learn — weighed against the OT priority order of safety, then availability, integrity and confidentiality; an unexpected write to coil 40012 on the relief-valve PLC caught by passive monitoring; and the safe moves along the way — every asset identified, a passive tap instead of an active scan, isolation timed after the valve cycle, and containment scoped to the one compromised device instead of twelve.

CY-MID-089Mid Level · OT Incident Response

OT & ICS Incident Response — The OT Response Funnel

A hands-on mid-level course that responds to incidents in operational technology without endangering the process. Work the OT response funnel - eight stages: Prepare, Detect, Triage, Isolate, Investigate, Eradicate, Restore, and Learn - responding safety-first where a wrong move can stop a plant or hurt someone. Strictly defensive and safety-first. Four hands-on activities in every lesson.

15 hours8 chapters32 lessons225 activities8 labs

What you'll learn

Prepare OT-specific IR plans with safety and engineering.
Detect and triage OT incidents from passive telemetry.
Isolate and investigate without disrupting the process.
Eradicate, restore safely, and learn from OT incidents.

Price:৳8,000