Mind the Gap: Understand the Distance Between IT and OT Cyber
Incident Forensic Analysis and Safe Restart
Cyber forensics – collecting, analyzing, and archiving data – is a mature capability in modern IT security programs. However, the unique characteristics of industrial control systems (ICS) often prohibit the smooth translation of modern IT forensics analysis into OT.
Increasingly savvy OT threat actors are learning how to pivot through and manipulate control system environments. Without good OT system configuration data and change management, process control configuration changes can result in damage or disruption.
- Examines a real-world example of a forensic analysis for an industrial process
- Reviews how bad actors can create unsafe conditions
- Helps you understand the vital role that detailed configuration management plays in OT system forensic analysis