How would you respond to a security incident affecting an engineering workstation used in an OT environment?