A 120-page incident response plan is not the same as being prepared. When ransomware hits a production network at 4 a.m. and downtime costs €450,000 per day, teams need to know who decides, who escalates and what the first three steps are - without opening a document. The gap between program maturity and real-world readiness is often a leadership and governance problem, not a technology one.

Majida Dere and Konstantin Schäfers present the rapid OT incident response model built at Westfleisch in partnership with KPMG - a phased approach that builds response readiness from the shop floor up.

This session will cover:

• How to build a rapid OT incident response team without requiring deep security expertise;
• Why tabletop exercises are the critical tool for testing decision-making under pressure;
• How to connect OT incident response to business continuity management and board-level governance.