ICS cybersecurity incident response and the troubleshooting process

An awareness of the potential for cyber security incidents along with ordinal troubleshooting procedures contributes to improved handling of these incidents in industrial control system (ICS). Organizations that use ICS will benefit by adding cyber-oriented incident handling to existing ICS troubleshooting trees. Case studies of both non-cyber and cyber incidents show the advantages of using ordinal troubleshooting flows and efficient configuration of layered security defense with minimum services for buying time against unknown vulnerability exploitation.