OT EMERGENCY INCIDENT RESPONSE RETAINER
Ensure Your Cyber Resilience in Industrial Production Networks.
Not if. When.
Breaches can, do, and will happen. There is ample evidence of this. Whether it is a targeted attack against an OT network directly, or whether it is something that is initiated through the IT network that then spreads, incident scenarios involving the OT domain are of paramount concern.
No matter the investment in preventative measures, no organization can consider itself impervious to a breach.
But you only need one phone number: +45 31 35 95 69.
A trusted Partner is a must have
When there is an emergency triggered by a breach, you need to know whom to call, you need to know what will happen next, and you need to trust that you are in the expert hands of a trusted and experienced partner that will guide you through the process of addressing the chaos and returning to order through a thorough technical investigation to identify the root causes, and a robust resolution.
Further, hackers do not operate on a ‘9 to 5’ schedule. On the contrary, most targeted attacks occur outside normal office hours to minimize detection. Because of that, you need to have a partner that is truly available 24x7x365.
You have an OT cyber emergency? We respond
Emergency Incident Response case types covered by our Retainer, though not limited to, will typically include one or more of the following:
- Man-in-the-Middle (MitM) Attacks:
Interception of communication between devices, enabling unauthorized access or manipulation. - Insider Threats:
Malicious actions or negligence by individuals with authorized access to the OT environment.
- Behavior-based Anomalies:
Industrial network protocols are predictable in pre-defined flow patterns and any deviations could potentially indicate an incident.
- Supply Chain Attacks:
Compromising the security of components or software before they are integrated into the OT system.
- Zero-Day Exploits:
Leveraging vulnerabilities that are unknown to the vendor or have not yet been patched.
- Data Integrity Attacks:
Manipulating or corrupting data within the OT system, leading to incorrect or unsafe operations.
The services covered by our Retainer:
- Non-intrusive (passive) remote analysis of the industrial network to establish its current state and identify possible indications of compromise.
- Guidance on the case processes, acting as a case-handler.
- Guidance on case containment to avoid further compromise.
- Investigation to provide answers as to what, when, and how the incident occurred.
- Documentation of findings in a report, uploaded to the CSIS Threat Intelligence Portal.
- Provision of recommendations on what should happen next based directly on the investigation.
The service package that is aligned to your needs
The OT Emergency Incident Response package includes the following services:
