This document provides a new Incident Handling framework dedicated to Operational Technology. This framework expands the traditional technical steps by giving an Incident Response procedure based on the event escalation and provides techniques for OT Digital Forensics. It includes an overview with general terms explanation and a list of unique properties of OT DFIR, the preparation that should be done to establish an OT Incident Response Team, and finally, the suggested OT Incident Handling framework in detail.
Document Citations
Citations are generated automatically from bibliographic data
as a convenience and may not be complete or accurate.
Chicago
National Institute of Standards and Technology (NIST), Commerce Department. "Digital Forensics and Incident Response (Dfir) Framework for Operational Technology (Ot)". Government. Commerce Department, June 22, 2022. https://www.govinfo.gov/app/details/GOVPUB-C13-0b9716328c0924e1c15285b2b4e8c9fc
APA
National Institute of Standards and Technology (NIST), Commerce Department. (2022, June 22). Digital Forensics and Incident Response (Dfir) Framework for Operational Technology (Ot). [Government]. Commerce Department. https://www.govinfo.gov/app/details/GOVPUB-C13-0b9716328c0924e1c15285b2b4e8c9fc
MLA
National Institute of Standards and Technology (NIST), Commerce Department. Digital Forensics and Incident Response (Dfir) Framework for Operational Technology (Ot). Commerce Department, (22 Jun 2022), https://www.govinfo.gov/app/details/GOVPUB-C13-0b9716328c0924e1c15285b2b4e8c9fc
Bluebook
National Institute of Standards and Technology (NIST), Commerce Department, Digital Forensics and Incident Response (Dfir) Framework for Operational Technology (Ot), GovInfo, (June 22, 2022), https://www.govinfo.gov/app/details/GOVPUB-C13-0b9716328c0924e1c15285b2b4e8c9fc