Describe incident management frameworks
Incident coordination is represented; PICERL and ICS4ICS terminology needs explicit learner practice.
Meridian crosswalk
XOT-02DOMAIN 6.0 · 15% draft
OT Incident Management
Coordinate detection, containment, recovery, communication, and lessons learned while preserving safety and production context.
Paraphrased, versioned draft mapping from CompTIA SecOT+ SOT-001 V1 draft objectives v1.3. This independent page is not CompTIA content.
Summarize overarching incident management considerations
Team Operations coordinates IT, OT, production, maintenance, safety, and escalation constraints.
Meridian crosswalk
robot-comms-001XOT-02Given a scenario, perform activities to prepare for incidents
Simulation and runbook thinking are present; dedicated tabletop and playbook preparation needs depth.
Meridian crosswalk
XOT-02Explain IR and handling
Response coordination and safe recovery are strong; chain of custody and advanced collection need more depth.
Meridian crosswalk
robot-comms-001XOT-02Given a scenario, analyze common data sets collected during IR
Network, process, and historian evidence are available; host and forensic datasets are not fully represented.
Meridian crosswalk
OTC-01OTC-10Compare and contrast concepts related to containment, eradication, and recovery processes
The R8 workflow requires safe containment decisions, recovery validation, and an event-linked debrief.
Meridian crosswalk
robot-comms-001XOT-02Turn this domain into a decision.
The free R8 incident exposes evidence, safety, coordination, and recovery behavior through the canonical OT-Praxis runtime.
Practice in Meridian →