Cyber incidents, like weather events and other disruptions to energy operations, will happen. Security controls that can reduce the likelihood should be in place, but relying on them to prevent a cyber incident is likely to lead to a larger impact if/when an incident occurs. In this session Dale will show examples of how electric utilities, refineries, pipeline operators and others in the energy sector have reduced OT cyber risk through consequence reduction, resiliency measures, and detect/respond/recover approaches to cyber attacks. The focus is understanding your company's key business functions and how these will either be maintained or quickly recovered in a cyber incident.