The challenges facing CNI and II are undoubtedly complex as operational technology is increasingly connected to the internet introducing new risks. Legacy industrial control systems were not designed with security in mind and are difficult to. In the face of this complexity, how can cybersecurity professionals proactively and dynamically manage cyber risk to strengthen the resilience of critical national and industrial infrastructure? What are the key criteria of an effective incident response and recovery plan? This panel will discuss how to build resilience to withstand cyber-attacks.