Building Effective OT Incident Response: How Should We React When Disaster Strikes?
Course
Adina Schoeneman, Angie Fyke, Martin Laberge, Tolu Oni and Wayne Silberman draw on real breach experience to examine what effective OT incident response looks like - from first steps and unified command to evidence preservation and team recovery.
One in five organizations reports a direct attack on operational technology systems today, and 40% of those attacks result in significant operational disruptions. Artificial intelligence-enabled adversaries have cut average attack breakout times to 29 minutes, with the fastest recorded at 27 seconds. When disaster strikes, the response teams that perform best are the ones that made the hard decisions before the incident: what safe state looks like, who is in command, and how IT and OT work together under a unified structure.
In this insightful discussion, the panel of experts discuss:
- Why the first priority in an OT cyberattack is safety and operational stabilization - not containment;
- How converged IT-OT incident response processes, evidence preservation and unified command structures determine recovery speed and regulatory standing;
- What psychological safety and post-incident team care look like when a breach keeps generating consequences for months after containment.
Here is the course outline:
Building Effective OT Incident Response: How Should We React When Disaster Strikes? |
Completion
The following certificates are awarded when the course is completed:
![]() |
CPE Credit Certificate |
