300+ Ready-to-Run Scenarios for Industrial Control System Security Teams
ICS/SCADA environments require specialized tabletop exercises that reflect real OT threat actor techniques, control system attack paths, and the unique operational constraints of industrial environments. Scenarios are designed for engineering, OT security, and incident response teams—covering adversary techniques from Triton to CRASHOVERRIDE, tailored to your sector and regulatory requirements.
No account required for demo · 3 scenarios free · Cancel anytime
Generic cybersecurity tabletops are insufficient for industrial environments. OT security teams need scenarios built around control system realities, not enterprise IT playbooks.
Each scenario models a real-world ICS/SCADA attack campaign with authentic adversary techniques, OT-specific injects, and sector-relevant operational decision points.
Modeled on the 2017 Triton/TRISIS attack against a petrochemical Safety Instrumented System (SIS). Teams must detect anomalous SIS behavior, assess whether to halt operations, and manage the investigation without triggering a physical safety event.
Based on the CRASHOVERRIDE/Industroyer malware that caused the 2016 Ukraine power outage. Teams respond to automated IEC 104/IEC 61850 protocol abuse that opens protective relays, causing cascading outages across the bulk electric system.
Inspired by the 2021 Oldsmar water treatment attack. An adversary accesses HMI systems remotely and adjusts sodium hydroxide levels to dangerous concentrations. Teams detect the manipulation, activate manual controls, and coordinate with public health authorities.
An attacker compromises the corporate ERP system and pivots through the IT/OT DMZ to reach shop-floor PLCs. Teams identify lateral movement, assess OT network segmentation gaps, and determine whether to halt production lines to contain the intrusion.
An adversary gains access to a national rail European Train Control System (ETCS) and manipulates signal aspects across a busy corridor. Teams coordinate between cybersecurity, operations, and safety teams to prevent collisions while restoring service.
No facilitation experience required. Our platform guides you through every phase of a CISA CTEP-format tabletop exercise.
No credit card required to access 3 full scenarios with complete facilitator guides.