Preparing for a cybersecurity incident at your company is important. There are several phases to a successful tabletop exercise. A tabletop exercise provides an opportunity for an organization to test contingency plans. These plans may address a variety of challenges which face an organization. Challenges to business continuity may come from Weather, Terrorism, Cyber incidents, insider threat, or a natural disaster. There are multiple levels of contingency plans, including incident response plans, emergency evacuation plans, business continuity plans.
This presentation will focus on helping you understand why you should perform a cyber exercise, and provide step-by-step guidance on how to create and conduct a cyber exercise from scratch through the following steps.
- Understand why to perform a cyber exercise
- Determine the type of exercise to be performed
- How to build the Exercise Design Team
- Create the Exercise Plan
- What drives the story? The narrative
- One more look at Injects
- Leading up to the Big Exercise Day
- Exercise Day
- Writing the After-Action Report (AAR)
- Exercise Follow-Up and Process Improvements
