SANS Community Nights are a great way to stay in touch with your local InfoSec community and to hear the latest in technical wizardry, industry intelligence, and thought leadership from our amazing instructors.
Join us at:
Novotel Canberra
65 Northbourne Ave, Canberra ACT 2601
View the agenda below:
Wednesday, November 6, 2024
5:30 pm – 6:00 pm
Registration and Drinks
6:00 pm-7:00 pm
Register In-Person | Register Virtually
Presentation
Title:
Effective ICS/OT TTX Design & Facilitation presented by SANS Certified Instructor Mike Hoffman.
Abstract:
This talk provides insights into designing and executing Tabletop Exercises (TTX) for Incident Response in Industrial Control Systems (ICS) and Operational Technology (OT) environments. It stresses the importance of testing plans, tailoring incident response strategies, and understanding the threat landscape. Key components of an ICS/OT IR plan, such as preparation, identification, containment, eradication, recovery, and lessons learned, are highlighted. Additionally, it emphasizes the significance of TTXs in testing IR capabilities, complying with regulations, and addressing specific challenges unique to ICS/OT environments. The talk covers participants, facilitation methods, scenario design considerations, and post-exercise evaluations to maximize the benefits of TTXs and enhance organizational resilience.