Skip to content

From Incident to Insight: Real-World Lessons in OT Cyber Defense


Course

Craig McEwen of Dechra Pharmaceuticals applies military command principles to OT cyber incident response, covering guide rails, recovery prioritization and decision-making under pressure.

Incident response plans tend to fail not because they are wrong, but because they are rigid, untested and built for audits rather than real-world chaos. The shock of an attack, conflicting priorities and emotional pressure on teams demand something more adaptable - guide rails, not prescriptive playbooks.

Drawing on a career spanning military operations and global CISO roles, Craig McEwen of Dechra Pharmaceuticals applies the armed forces' combat estimate framework to OT cyber incident response.

This session will cover:

  • Why guide rails outperform rigid playbooks when incidents don't follow the script;
  • How defining a "minimum viable company" drives smarter recovery sequencing and prioritization;
  • What mission command looks like when cyber teams must decide under pressure.
 

 

Here is the course outline:

From Incident to Insight: Real-World Lessons in OT Cyber Defense

Completion

The following certificates are awarded when the course is completed:

CPE Credit Certificate

Floating Button