When assembling an OT incident response team, which role is essential in OT but typically absent from a purely IT-focused team?
- A.A plant operations representative who understands the live process state
- B.A public relations spokesperson
- C.A help-desk ticketing coordinator
- D.An endpoint antivirus administrator
Why A is correct
OT incidents directly affect physical processes, so a plant operations representative must be on the team to advise on process state and the operational impact of any response action. IT teams rarely include operations staff who can speak to safe process behavior.
Know someone studying for OT Security Fundamentals? Send them this one.