This tri-fold cheat sheet provides guidance for Industrial Control System (ICS) Network Security Monitoring (NSM), and Incident Response (IR) for control system environments.
Unlike IT incidents, ICS incidents need to consider potential loss or damage of physical property or engineering assets, as well as safety risks to people and the environment. ICS IR will be a joint effort with security incident responders, engineers, operators, and network architects.