Industrial Control System (ICS) / Operational Technology (OT) incident response plans are an essential part of business continuity planning, however, even the best incident response plans are of little use if they are not exercised regularly.
Tabletop exercises promote cyber awareness within an organisation by:
- reinforcing the role of all staff in maintaining a security posture
- ensuring that all personnel understand their responsibilities in preventing and reporting threats,
- providing evidence of response and recovery planning*, as required by UK regulatory authorities.
=Method Cyber Security can facilitate incident response tabletop exercises to test and validate your organisation’s existing incident response plans and threat-specific response playbooks in order to enhance Incident Response Team capabilities and foster collaboration between the varied business functions likely to be involved in responding to a real-world cyber incident.
=Method Cyber Security can assist by developing feasible and realistic incident scenarios, based on current threat intelligence, and tailored to your industry vertical. We then facilitate simulated attack scenarios by presenting indicators of compromise and subsequent information “injects”, in a condensed timeline, to exercise your incident response procedures, playbooks, and teams, in a low stress, no fault, discussion-based environment.
Regular exercising will identify gaps and drive improvements in your organisational resilience and cyber security posture by uncovering vulnerabilities in systems, processes or training and allowing development of actionable plans to address these areas.
Tabletop ICS / OT incident response exercising is recommended for all organisational roles having a responsibility for business continuity and crisis management, including OT and IT Security Teams, Engineering, Operations, Management, Legal and Regulatory stakeholders.
*National Cyber Security Centre, Cyber Assessment Framework v4.0 Objective D - Minimising the impact of cyber security incidents, Principle: D1.
Ready to Test Your Incident Response?
Don’t wait for a breach to test your readiness.
Contact =Method today to design and deliver a realistic Incident Response Tabletop Exercise tailored to your organisation’s cyber risks.
Email: support@methodsands.com
Phone: +44 (0)1462 713313
The =Method Consultancy Management Team
- Steve Essery - Technical Director at Method Cyber Security & Group Quality Assurance Manager at Method Safety and Security
- Simon Sheehan - MD Method Functional Safety
- Dil Wetherill - CEO Method Safety and Security
- David Sparkes -Technical Director of Method Process Safety Ltd
- Jeni Lewthwaite - Managing Director of Method Compliance Assessment