Exercise Types
In this 2nd episode of September’s crisis simulation exercise series, Rob discusses the different types of exercises.
When planning your tabletop exercise, consider asking these 5 questions: 1. Why are we conducting this exercise? Is this a request from senior management or has it come down from the board? Is it a new internal or externally regulated requirement? Whatever the purpose, you should try to clearly define the reason you’re about to…
Cyberattacks don’t just expose technical weaknesses—they expose operational failures. Many organizations believe that they are ready because they have an incident response (IR) plan on paper. But in reality, most plans fail miserably during crises. The only way to truly validate your organization’s preparedness is through functional exercises—real-world simulations that test your response capabilities. These…
Some major corporations have formal crisis management teams with very experienced employees that have been exposed to various corporate crises throughout their careers. However, a significant number of organizations don’t have any crisis management capability at all. Or, if they have a capability in place, they have a less-than-effective program because of poor planning, ineffective…
In this 3rd episode of September’s crisis simulation exercise series, Rob discusses increasing the challenge as it relates to your exercise program.
In this episode, we interview Dan Gortze who is security expert and keynote speaker. We discuss the following: Cyber-security challenges Cyber threat actors Insider threats and the Common cyber-security gaps base on real events The importance of incident management simulation exercises Including critical vendors in cyber-attack preparedness planning Dan Gortze on LinkedIn
The exercise facilitator and control team will control the exercise through the Master Scenario Events List (MSEL). The MSEL is the primary document used to conduct the exercise, providing the framework for monitoring and managing the flow of exercise activities. It shows when events are expected to occur and when to insert event-implementer messages into…
Add your first comment to this post