Program catalogue

Industrial incidents don’t behave like IT incidents since containment and recovery decisions can have real safety and production consequences. This path teaches you how to prepare for, detect, contain, and recover from cyber events in OT environments with minimal operational disruption. You’ll build OT-specific playbooks, practice evidence collection (PCAPs, logs, historian data), and work through realistic scenarios like ransomware or unauthorized remote access. The goal is to help you respond calmly and effectively in the first critical hours while coordinating with operations, engineering, and leadership.