Beyond the Firewall: Responding to Cyber Incidents in Industrial Control Systems

Abstract:

As industrial environments become increasingly interconnected, the lines between IT and OT are blurring—and so are the attack surfaces. This talk takes you inside the high-stakes world of incident response for Operational Technology (OT) and Industrial Control Systems (ICS), where downtime can mean more than lost revenue—it can endanger safety, disrupt critical infrastructure, and ripple across entire supply chains.

We’ll explore real-world attack scenarios, from ransomware hitting manufacturing plants to adversaries manipulating process controls, and walk through proven frameworks for detection, containment, and recovery. Attendees will gain insights on:

How OT environments differ from IT in response priorities and constraints

Key tools and telemetry for monitoring ICS without disrupting operations

Coordinating IT and OT teams under pressure

Lessons learned from major OT cyber incidents

Building an incident response plan tailored for ICS resilience

Whether you’re a security practitioner, engineer, or leader in critical infrastructure, you’ll leave with actionable strategies to respond swiftly and effectively when the alarms go off—no matter what’s beyond the firewall.