SANS 5 ICS Critical Controls for Electric: Control 1 - ICS-Specific Incident Response Plan

  • Tuesday, 11 Feb 2025 1:00PM EST (11 Feb 2025 18:00 UTC)
  • Speaker: Dean Parsons
The first training module for the electric sector provides an overview of the elements of an ICS Specific Incident Response Plan, how it differs from a standard IT Incident Response Plan, and how to prepare your team to respond.

An ICS-specific incident response plan requires the following:

• Enriched insights from engineering operations
• Specific to the power grid operations
• Emphasis on control system integrity and engineering recovery capabilities in the face of an attack on any aspect of the engineering process.

Not only should the plan exist, but it also must be tested to ensure its effectiveness and engineering preparedness for cyber risk scenarios unique to ICS operations and the physical process. This module will dive into how an informed incident response plan increase system integrity and speed up recovery during an attack.

Watch All Parts in This Series: