BEGIN:VCALENDAR
VERSION:2.0
PRODID:-//pretalx//pretalx.com//bsides-ot-uk-2025//speaker//BSV87X
BEGIN:VTIMEZONE
TZID:GMT
BEGIN:STANDARD
DTSTART:20001029T030000
RRULE:FREQ=YEARLY;BYDAY=-1SU;BYMONTH=10
TZNAME:GMT
TZOFFSETFROM:+0100
TZOFFSETTO:+0000
END:STANDARD
BEGIN:DAYLIGHT
DTSTART:20000326T020000
RRULE:FREQ=YEARLY;BYDAY=-1SU;BYMONTH=3
TZNAME:BST
TZOFFSETFROM:+0000
TZOFFSETTO:+0100
END:DAYLIGHT
END:VTIMEZONE
BEGIN:VEVENT
UID:pretalx-bsides-ot-uk-2025-FS7LKR@pretalx.com
DTSTART;TZID=GMT:20260410T112500
DTEND;TZID=GMT:20260410T114500
DESCRIPTION:Your incident response playbook has been battle-tested through 
 countless IT security incidents. You know the drill\, isolate compromised 
 systems\, preserve evidence\, rebuild from known-good baselines. But in op
 erational technology environments\, these same best practices can be catas
 trophic.\n\nThis talk examines the dangerous assumptions that IT security 
 teams make when responding to OT incidents in critical national infrastruc
 ture. Through real-world scenarios\, we'll explore why standard IR practic
 es\, from immediate network isolation to credential resets\, need fundamen
 tal rethinking when dealing with industrial control systems. Learn what ha
 ppens when you try to "pull the plug" on a system controlling safety mecha
 nisms\, why forensic imaging a 15-year-old PLC isn't an option\, and how t
 o navigate the tension between investigation needs and operational reality
 .\n\nThis session will challenge your assumptions and provide practical fr
 ameworks for adapting your IR methodology before an incident puts them to 
 the test.
DTSTAMP:20260501T110700Z
LOCATION:Track 2
SUMMARY:What Your IT Response Playbook Gets Wrong About OT. - James John
URL:https://pretalx.com/bsides-ot-uk-2025/talk/FS7LKR/
END:VEVENT
END:VCALENDAR