A water utility revises its incident response plan after a malware scare at a treatment plant. Which priority order belongs at the top of an OT response plan?
- A.Evidence preservation first then output then human safety
- B.Regulatory reporting first then safety then output
- C.Data confidentiality first then evidence then plant output
- D.Human safety first then environment then plant output
Why D is correct
OT response puts people and the environment ahead of availability of the product. Confidentiality or evidence preservation lead in IT forensics but must not delay a safe process state, and public disclosure is never ranked above safety.
Know someone studying for OT Security Fundamentals? Send them this one.