Volunteer Opportunity Details

WG16 of ISA99 is drafting a technical report (TR) as the authoritative guidance on ACS (aka ICS/OT) incident management including incident response.

To support drafting efforts, this email represents a WG16 open call for volunteers for drafting. Later in 2026 (post-drafting), there will be request for review and comment of the TR.

The group has identified the following phases which will have chapters drafted in the new TR:

1. Preparation (including People, Process, and Technology)
2. Identification (including Detect, Analysis, Triage, Declaration, Reporting, etc.)
3. Containment (Response) (including isolating ACS assets and/or ACS networks)
4. Eradication (Response)
5. Recovery (Response) (including considerations for DRP, BCP, Restoration from backups, etc.)
6. Post-incident (including stand down ending incident, lessons learnt/after action, post-incident reporting)

If you have expertise in ACS (ICS/OT) incident management/response and would like to support the drafting of one or more sections, please:

1. If required, apply to join the ISA99 standards committee
2. Confirm that you have access to the WG16 TR working folder
3. The next WG16 meeting will be Tuesday 30th June 10:00 EST (Biweekly)