IEC 62443: Incident Response for Control Systems — TRE Requirements in Practice
- Date
- 2027-07-30
- Location
- Online
- Host
- Zach L
About this event
A live 30-minute expert session on Incident Response for Control Systems — TRE Requirements in Practice (IEC 62443 — Industrial Cybersecurity). What We'll Cover: What FR6 requires and where incident response sits in the CSMS operations layer The method step by step: OT-aware detection, triage with operations, containment that keeps the process safe, forensics on live systems, recovery How the capability maps to 62443-3-3 SR 6.x requirements and the IR plan, playbooks and exercise records it produces Common mistakes: IT playbooks that isolate a controller mid-batch, no engineering role in the IR team, backups never restore-tested The evidence auditors look for: exercised playbooks, defined process-safe containment decisions and event log retention proof Related topics: ot incident response