CrisisOS5™ for ICS/OT & Critical Infrastructure
When cyber becomes safety, decision authority cannot be improvised. ICS and OT crises move at machine speed — and cascade into public safety, regulatory scrutiny, and trust erosion before leadership has aligned.
Technical standards define how to build secure systems. They do not define how leadership performs when those systems fail publicly.
From ransomware that locks operators out of SCADA systems to boil water advisories that spark public panic, ICS and OT incidents compress the window between detection and leadership action to minutes — not hours.
Standards like ISA-62443-4-1 define how suppliers build secure products. But when an incident strikes, it is not your PLC vendor under the spotlight. It is your executives, boards, and communicators — judged not only by how quickly operations are restored, but by how clearly and confidently they engage with regulators, customers, and the public.
Regulators expect timely, accurate updates before facts are fully confirmed
Customers demand safety guidance before the incident is contained
Employees need direction and authority clarity under operational pressure
Leadership credibility is evaluated in real time before verification stabilizes
When cyber becomes safety, the first 20, 60, and 120 minutes decide whether confidence is preserved or destroyed.
Sector fluency combined with crisis governance expertise.
CrisisOS5™ is informed by more than 20 years of crisis communication leadership — including direct experience in the energy and automation sector and collaboration with operational technology and cybersecurity teams.
Ann Marie van den Hurk is a member of the International Society of Automation (ISA) with practitioner fluency in ISA/IEC 62443 and the realities of critical infrastructure operations. Her experience as a manager at Schneider Electric — working at the intersection of product security and regulatory disclosure — is what makes CrisisOS5™ uniquely positioned to help utilities, water authorities, and energy providers prepare leaders for the first 120 minutes of disruption.
CrisisOS5™ translates complex frameworks — ISA-62443, NERC CIP, DOE, EPA — into boardroom-ready governance structures that connect cyber events to operational and safety realities without overwhelming executives in technical detail.
Essential actions every utility must take when cyber becomes safety.
Decision Authority Activates
Who is authorized to act before facts are confirmed. Escalation paths engage. Leadership alignment begins before public exposure.
Regulatory & Stakeholder Engagement
Initial notifications to regulators. Safety messaging for customers and employees. Leadership posture established before speculation hardens.
Credibility Under Scrutiny
Sustained leadership authority across Security, Legal, Communications, and Operations. Confidence preserved or lost in this window.
CrisisOS5™ governs the leadership layer above your technical response.
CrisisOS5™ is not a set of templates. It is a leadership operating system for an era where cyberattacks and synthetic threats collide with physical infrastructure.
Detect Faster
Spot anomalies across SCADA, PLC, and water quality signals. Escalation triggers defined before pressure arrives.
Respond Smarter
Deploy tested workflows that connect OT, IT, communications, and legal without hesitation or conflicting signals.
Communicate With Authority
Align with regulators while keeping public trust. Leadership messaging reflects decisions, not uncertainty.
Preserve Resilience
Lead through disruption without losing credibility. Executive authority holds under the scrutiny that follows every critical infrastructure incident.
Built on the CrisisOS5™ Framework
All ICS/OT engagements are built on the CrisisOS5™ Framework — a five-pillar decision governance architecture covering Risk Intelligence, Rapid Response, Crisis Communication, Simulation Readiness, and Leadership Resilience.
Designed for organizations where cyber, safety, and regulatory exposure converge under speed.
Learn more about the CrisisOS5™ Framework →Recent water utility cyberattacks show exactly why decision authority is the gap that matters.
The Anomaly-to-Authority Gap
A Minnesota water utility's tower level started dropping before anyone knew it was a cyberattack. The lesson: the first signal is rarely labeled "cyber," and waiting for certainty costs the minutes that matter most.
Read the Case Study →The Manual Override Problem
Two New Jersey utilities switched to manual operations flawlessly when remote control was compromised. The harder question: did the operator know they were authorized to make that call, or did it just happen to work?
Read the Case Study →One Configuration, Multiple Victims
The FBI flagged shared third-party network configurations across multiple attacked utilities. When a vendor's design decision becomes everyone's exposure, whose authority governs the response?
Read the Case Study →Put CrisisOS5™ to work for your team.
Governance Continuity Assessment
$2,500A focused 90-minute session that maps where decision authority breaks down under pressure, delivered as a written finding within 48 hours. Built for utilities, water authorities, and energy providers who need clarity on governance gaps before an ICS/OT incident forces the question.
Book the Assessment →Schedule a Call With Ann Marie
Learn how CrisisOS5™ can scale across your organization through custom simulations, board coaching, and executive readiness programs tailored to the specific governance requirements of utilities, water authorities, and energy providers.
Schedule a Call →CrisisOS5™ ensures you do not write your crisis plan in the middle of the crisis. For executives who know delay is not an option.