OT incident response isn’t simply cybersecurity in an industrial environment.
In OT and ICS environments, response decisions can directly impact safety, production, equipment and physical operations. Standard IT response actions—like isolating systems, shutting down assets or pushing rapid remediation—don’t always translate when operational continuity and safety are on the line.
In this edition of The Brick House, GuidePoint Security experts from our OT Security and DFIR teams discuss what actually happens during OT incidents, how attackers move into operational environments and what organizations can do to improve readiness before an incident occurs.
In this session, we cover:
- Why safety, process integrity and availability drive OT incident response decisions
- How attackers move from IT into OT environments—and why “air-gapped” does not always mean isolated
- The role of remote access, third-party vendors, legacy systems and weak IT/OT boundaries
- Why visibility is one of the biggest challenges in OT incident response
- How OT, IT, security, engineering, legal, vendors and leadership coordinate during an incident
- Practical steps to improve readiness, including OT-specific playbooks, tabletop exercises, decision makers and asset visibility decision makers and asset visibility
Whether you’re responsible for OT security, incident response, operations, engineering or cyber risk, this discussion provides a practical look at how organizations can prepare for, respond to and recover from OT incidents without creating additional operational risk.
Hosted by Gary Brickhouse, CISO at GuidePoint Security, featuring:
- Steve Brzozowski, Manager, DFIR
- Blake Cifelli, Principal Advisory Consultant
- Mary Gannon, Managing OT Security Engineer
- Patrick Gillespie, Practice Director, Operational Technology
About The Brick House Webinar:
The Brick House is a monthly panel discussion with Gary Brickhouse, CISO and expert guests examining the hottest topics in cybersecurity. There are no talking heads here, just honest conversations examining the problems we all face in cybersecurity. Gain insights from security practitioners who have current, real-world experience solving the most complex cybersecurity challenges.
