OT Incident Response Playbook

This skill provides a structured framework for managing cybersecurity incidents in industrial environments where safety and operational continuity are critical. It bridges the gap between IT security and plant operations by implementing playbooks aligned with SANS PICERL, IEC 62443, and NIST SP 800-82. Users can generate automated workflows for handling high-stakes scenarios like OT-specific ransomware, Safety Instrumented System (SIS) compromises, and unauthorized process manipulation while ensuring coordination between SOC analysts and site engineers.

主な機能

ユースケース