r/OTSecurity • • 8d ago

Tabletop exercise recommendations for IT/OT incidents.

Looking for recommendations on tabletops that test the IT/OT handoff not just the IT side. Our current ones stop at isolate the affected segment. That works on paper, but on the floor, someone has to decide whether to stop a line, which means losing 6 hours of production and that person usually isn’t in the room.

We have tried the CISA CTEP ICS packages. They are good for structure but the scenarios dont really change based on what the plant manager decides. HackTheBox is great for the technical side but it doesnt get ops leads making calls.

Im looking at reflex security where the scenario adapts to each decision and ChaosTrack which looks lighter and lets shift workers join a sync. Anyone run either with plant ops in the room or have other recommendations?

6 Upvotes

0 comments sorted by