Background: History can be one of the most important teachers, especially when it comes to cyber security and incident response. Learning from attacks on others from the same or similar industries can provide insight on how the IRT should be prepared for similar, if not the same, attacks within their organization.
Instructions: Identify a real world attack (e.g. Ukrainian power grid) that has occurred in the nuclear industry or another industry that uses industrial control systems (e.g. sewage, public/private utilities, etc.) and write an essay on how the incident response team should handle such an attack. Include the details of the attack, such as how the systems were infiltrated, who (may) have performed the attack, as well as ways to mitigate the vulnerabilities that allowed the attack to occur. This document should be a 4-5-page paper/essay, please use credible sources.
