OT Security All-in-One, Volume 4: Ransomware Resilience, Recovery, and AI Risk

OT Security All-in-One, Volume 4: Ransomware Resilience, Recovery, and AI Risk is a 378-page professional reference work about what happens when prevention fails. It walks the full arc of an industrial cyber incident: recognising that a plant is under attack, escalating in the control room, isolating without an unsafe shutdown, rebuilding, operating in manual and degraded mode, meeting recovery-time objectives, and proving to a regulator and a board that the plant is safe again.

Chapters cover why ransomware shuts down industrial operations, IT ransomware with OT consequences, destructive malware and wiper scenarios, loss of view, loss of control and loss of confidence, decision-making during an industrial cyber crisis, the first 24 hours of an OT cyber incident, building an OT incident response plan, control-room escalation and decision rights, cyber recovery and continuity for critical infrastructure, and the emerging AI risks to operational technology together with the future of OT security.

Every chapter follows the same practitioner rhythm: objectives, a scenario (usually a crisis), a plain-English explanation, a technical deep dive, a verified real-world incident, common failure patterns, a controls-and-evidence table, the board-level implication, a checklist, review questions and key takeaways. The final chapter is a master review and practitioner exam spanning all four volumes of the OT Security All-in-One series.

Written for CISOs, CIOs, COOs, OT security architects, industrial control engineers, SOC leaders, GRC managers, auditors, board advisors, critical infrastructure operators, consultants, suppliers and system integrators responsible for environments where cyber incidents can become physical incidents.

Key topics include: OT incident response; industrial ransomware; wiper malware; loss of view and loss of control; control-room decision-making; degraded-mode operation; cyber recovery; critical infrastructure resilience; recovery-time objectives; AI risk to OT; the future of OT security; operational technology.

Professor Kai London is a cybersecurity executive, security architect, author and professional researcher with extensive experience across cybersecurity, critical infrastructure, resilience, governance, risk and technology. His work focuses on complex operational, security and institutional challenges, including cyber resilience, infrastructure protection, evidence, governance, recovery and reconstruction. He writes practitioner-focused professional reference works designed for executives, specialists, researchers and institutional readers.