The threat to the ICS environments has never been larger and having an effective detection and response team is important for the organization. Unfortunately there is often not the right understanding from management in how and what is needed to develop an efficient detection and response team for the ICS environment.
This article will focus on the perspective of the organization and the leadership needed to have or make the technical detection and response services more effective. Some of the questions this article will answer are: