// service · Assessments
Can this plant recover from ransomware
Backup, restore, and decision rights tested against a plant outage. You leave with the gaps that would stop production, ranked for this budget.
Most OT ransomware programs look ready on paper. Backups run nightly, the IR plan references ransomware, and the vendor’s slide shows immutable storage. Nobody has restored a controller from backup in eighteen months, and the runbook does not say who pulls the firewall plug when the line is still running.
This assessment proves readiness before an attacker tests it. We restore a real controller or HMI from backup, run the IR runbook against a plant ransomware scenario, and check whether segmentation would actually contain spread from IT into OT.
You get a ranked, evidence-backed view of what would fail and what to fix first, measured in downtime avoided, with remediation tracked in Resilion.
// FAQ
Questions about OT ransomware readiness assessment
- How do you assess ransomware readiness for OT?
- We validate the things that actually decide recovery: whether backups restore a real controller, whether the IR runbook names who isolates the plant and when, and whether segmentation would contain spread from IT to OT, then rank the gaps by downtime avoided.
- Do you actually restore from backup?
- Yes. A backup nobody has restored in eighteen months is a hope, not a control. We prove recovery on a representative controller or HMI so readiness is demonstrated, not assumed.
See this work on your sites
Book a 30-minute demo. Bring the last assessment and the sites in the first wave.