Incident Response Readiness

Prepare and respond with confidence.

Ask about incident response readinessAll services

When you need it

  • There is an IT incident plan but nothing that covers the control systems
  • Roles and communications for an OT incident have never been rehearsed
  • You want a relationship with responders and law enforcement before you need one

A robust incident response plan is what keeps a security incident small. Our readiness service equips your organisation with the tools and strategies to prepare for and respond to incidents in an ICS environment.

Working with your team we develop a plan tailored to business objectives and risk tolerance. We identify the critical systems and data in the ICS environment so response effort can be prioritised, establish clear communication channels and define roles and responsibilities for the response team, so everyone knows what to do when it matters.

We also run tabletop exercises to validate the plan and assess the team's readiness for a real incident, and report on what to refine. And we help establish relationships with third-party incident response teams and law enforcement, which proves invaluable in a large-scale event.

How it runs

  1. 1

    Understand

    Business objectives and risk tolerance.

  2. 2

    Identify

    The critical systems and data in the ICS environment, so response effort is prioritised.

  3. 3

    Build the plan

    Clear communication channels, and defined roles and responsibilities for the response team.

  4. 4

    Exercise

    Tabletop exercises that validate the plan and the team's readiness, with detailed reporting on what to refine.

  5. 5

    Connect

    Relationships with third-party incident response teams and law enforcement, established in advance.

What you get

  • An incident response plan tailored to your objectives and risk tolerance
  • Critical systems and data identified and prioritised
  • Roles, responsibilities and communication channels defined
  • Tabletop exercises with detailed reporting
  • Relationships with third-party responders and law enforcement

Where it is used most

Questions we get asked

What is a tabletop exercise?

A facilitated session where the people who would actually respond work through a realistic incident, so the plan and the team are tested before it is real.

Do you respond to incidents too?

This service is about being ready. Our lifecycle covers response and recovery as well, and the plan sets out who does what, including third-party responders.

Is it OT-specific?

Yes. The plan is built around the critical systems in the ICS environment and what keeps the process safe.

Further reading

Talk to us about incident response readiness.

Tell us about the site, the systems and what you are trying to achieve. A consultant will reply.

Talk to usSee our services