When cyber attacks target critical infrastructure, the first response matters most. This course prepares participants to act decisively during security incidents by equipping them with detection, containment, and escalation skills tailored to industrial systems. They will practise real-time decision-making using attack scenarios that reflect modern OT threats.
Learning Outcomes:
Recognise early signs of cyber incidents in OT networks
Execute predefined response actions during emergencies
Communicate effectively with stakeholders and SOC teams
Support containment and recovery efforts on the ground
Key Topics:
OT cyber incident recognition and triage
Communication protocols during cyber emergencies
First-level response procedures for shift teams
Escalation and coordination with central response teams
(1) Cybersecurity incident response essentials
(2) Cyber attacks and their effects on a control network
(3) Switching configuration for connecting devices
(4) IDS / IPS operations
(5) Anomaly network detection
(6) Firewall operations for network traffic control
(7) Windows events
(8) Malware essentials
(9) Containment of cyber incident
(10) Evidence preservations