Processes

The Crisis Management Team (CMT) manages crisis events that threaten the operations, reputation, and any major impacts to the company. The CMT empowers the ICS4ICS Incident Commander and provides direction as needed. The Crisis Management Team consists of senior executives like the Chief Executive Officer (CEO), Chief Operations Officer (COO), Chief Financial Officer (CFO), Chief Information Officer (CIO), Health-Environment-Safety representative, and Chief Legal Counsel. There may be CMT(s) for major company divisions, particularly in other countries or geographies.

The Industrial Control System/Operational Technology (ICS/OT) Team often manages many aspects of the ICS/OT Systems including system configuration and maintenance, cybersecurity settings, system recovery (DR), business recovery (BCP), and many other aspects of these systems.

The Computer Incident Response Team monitors systems and data from other sources like helpdesks. This group will identify events that need to be escalated to an authorized Incident Commander who determines if an incident will be declared. This team is typically part of the IT organization.

The IT Team supports the Computer Incident Response Team (CIRT) which is typically part of their organization. They may also support the Industrial Control System/Operations Technology team with enterprise IT processes, like backup/recovery, network support, and servers/desktop build.

The Disaster Recovery Planning (DRP) Team develops IT backup/recovery strategies based on the BCP requirements. The DR Team is often part of the IT Team.

The Business Continuity Planning (BCP) Team works with business teams to identify the critical business functions, Recovery Time Objectives to restore those business functions, and Recovery Point Objectives that determine how much data loss is acceptable.