Abstract
In recent years, companies that own plants are being forced to recognize not only IT-side cyber-attacks but also OT-side cyber-attacks as risks that threaten their business. To minimize damage and continue business when a cyber-incident occurs, these companies are required Business Continuity Plan in consideration of cyber incidents and improve response capabilities for cyber-attacks. In addition, in order to respond to cyber incidents occurring at the plant, the OT side and the IT side need to collaborate and deal with the situation across the organization. In this paper, the authors discuss the organizational management framework for companies to improve their ability to respond to incidents as an organization
