HKSM › Books › ICS/OT Incident Response Plan: Write One That Works › ICS/OT Incident Response Plan: Write One That Works

ICS/OT Incident Response Plan: Write One That Works

ICS/OT Incident Response Plan: Write One That Works — Book Cover

ICS/OT Incident Response Plan: Write One That Works

From Blank Page to Approved Plan, with Templates Operators Can Use at 2 a.m.

Incident response plan templates are easy to find. A plan the night shift can actually use is not. ICS/OT Incident Response Plan: Write One That Works shows the person handed the job, whether an OT engineer, a security lead or a continuity planner, how to take an industrial site's incident response plan from a blank page to four signatures, one chapter at a time, with every worksheet shown filled in for an illustrative water plant.

What This Book Delivers

  • A plan run as a project. Sponsor, charter, planning team, interviews across every shift, and the rules and contracts the plan must satisfy.
  • Decisions made before the alarm. Incidents and severity in plant language, activation levels, and who may isolate, shut down or act when nobody answers.
  • Steps an operator can follow. The first-hour procedure, legal clauses, and one notification matrix for the US, the EU, Canada and Australia.
  • Recovery you can defend. Recovery numbers with honest margins, and written criteria for a safe restart.
  • A plan that stays real. Playbooks, a console card, review rounds, a compliance annex, change triggers, controlled copies and crew training.
  • A standards table in every chapter, and printable, editable templates for every worksheet.

Who It's For

  • OT and control systems engineers asked to write or rewrite their site's incident response plan.
  • OT security leads and IT security professionals responsible for incident response at industrial sites.
  • Operations, safety and business continuity staff who own part of the response.

How It's Structured

  • Chapters 1-2: set up the plan project and gather the inputs.
  • Chapters 3-4: decide what counts as an incident and who decides.
  • Chapters 5-7: write the response, recovery and playbooks.
  • Chapter 8: approve the plan and keep it current.
  • Chapter 9: a complete plan for a fictional electric cooperative, scored like an approver would.
Start Reading

AI for Project Managers — Build Plans Faster, Lead Better

Turn messy inputs into structured project plans in minutes. If you are a project manager tired of spending hours on documentation, this course shows you how to use AI to work faster while staying fully in control.

This is not a generic AI course. You will learn how to use AI as a practical co-pilot to build real project artifacts—charters, WBS, schedules, risk registers, and executive reports—using structured, reliable prompt frameworks.

You will also learn how to keep your project aligned across scope, schedule, cost, and risk, and how to interpret performance data like Earned Value Management to support better decisions and communication.

Everything is designed for immediate use. You get ready-to-use prompt templates and workflows you can apply right away in your projects. Watch the video to see how it works and start building your first AI-supported project plan.

Explore the Course


Build an ICS/OT cybersecurity foundation that fits the real environment

Standard IT controls can disrupt the industrial systems they are meant to protect. Learn how to assess OT risk, design zones and conduits, apply IEC 62443 security levels, use MITRE ATT&CK for ICS, and establish passive asset visibility without risking production. Eight reconstructed incidents connect attacker techniques to the controls that failed, giving you the vocabulary and judgment to make credible security decisions from day one.

Explore the Course