Preparing for Industrial Cyber Response: What to Have in Your Incident Response Toolkit

This guidance outlines essential tools, personal protective equipment (PPE), and kit strategies (fly-away kits, individual go-bags, and on-site kits) for industrial incident response. It emphasizes safety requirements, planning for legacy and ruggedized equipment, the need for appropriate adapters and forensic hardware (forensic laptop, write blocker, clean drives, evidence bags), and the importance of preapproved procedures and training to enable effective and safe incident response in industrial facilities.