Lessons learned from OT incident response

November 12, 2025 @ 10:00 - 10:40

  • Main Track

About Session

Technical Level: Beginner/Intermediate

Operational technology (OT) systems are facing an increasing number of cyber security incidents. Some of the well-known OT incidents were targeted attacks, but more often than this are IT specific incidents that indirectly impact OT systems. Mandiant has been helping clients with incident response in some of the most high-profiled (and less profiled) OT cyber security incidents. Based on this unique insight into what is actually being observed “in the wild” Principal Consultant Marie Moe will give a presentation of lessons learned from OT incident response.

In this talk, we will cover the similarities between IT and OT incident response, the unique considerations for IR in OT environments, and proactive steps that you or your teams can do to prepare for an OT incident.

Speakers

Marie Moe

Marie Moe

Principal Consultant, Mandiant, Google Cloud