Managing Incident Responses to Critical Infrastructure Attacks

“Understanding the environment that you're dealing with is a really important part of incident response. It's something that we don't talk about enough … You need to understand what operating systems are going to be in play. How are you going to access systems to get forensic data? Is there network connectivity? Can the incident responders access the log servers and the historians? Can they do that remotely? Do they need to be on site? … It's very helpful to understand what vulnerability landscape looks like, too, because it can help you pinpoint things in your timeline.” - Lesley Carhart

Lesley Carhart, of industrial cybersecurity company Dragos, Inc. joins this episode of Hack the Plan[e]t. Lesley is the Director of Incident Response for North America. Today, we dive into what’s involved in assessing vulnerability in industrial environments, and the painstaking process of securing operational technology (OT). What are emerging challenges for critical infrastructure asset owners? What kind of threats are out there - and what does a robust incident response look like? Join us to learn more.