CyberCertPrepOT Security FundamentalsOT Fundamentals: Incident Response & ForensicsEASYFree question
When assembling an OT incident response team, which role is essential in OT but typically absent from a purely IT-focused team?
- A.A help-desk ticketing coordinator
- B.An endpoint antivirus administrator
- C.A public relations spokesperson
- D.A plant operations representative who understands the live process state
Why D is correct
OT incidents directly affect physical processes, so a plant operations representative must be on the team to advise on process state and the operational impact of any response action. IT teams rarely include operations staff who can speak to safe process behavior.
Know someone studying for OT Security Fundamentals? Send them this one.