Incident response (OT/ICS context)

Incident response is the structured process of detecting, containing, and recovering from a security incident. In OT/ICS environments, incident response differs meaningfully from standard IT practice: the usual IT instinct to immediately isolate or shut down an affected system can itself be dangerous if that system controls a physical process, so OT incident response has to weigh safety and availability alongside containment at every step.