Tabletop Cyber Crisis Management

Cyberattacks appear in the news every day. Organizations are increasingly aware that being well prepared is essential. The question is no longer 'if' an organization will be attacked but 'when'. What do you do in case of an attack?

During Secura's Tabletop Cyber Crisis Management workshop, operational procedures for dealing with such an incident will be practiced and evaluated using a realistic scenario. These scenarios and our approach are based on NIST standard SP 800-84 to effectively prepare and execute cyber incident exercises. Employees involved in the first phase of a cyber crisis within the ICT chain in an incident such as ransomware will be trained through the tabletop crisis exercise.

For industrial environments with Operational Technology (OT) and Industrial Control systems (ICS) we offer a special OT Tabletop Cyber Crisis Management Workshop.

A cyber exercise is a good preparation

Do you know if your organization is well prepared for a cyberattack? Who are the first points of contact? What are everyone's responsibilities, and what can be expected from each other? How quickly can you intervene, and what are the follow-up steps?

How does it work?

The Tabletop Cyber Crisis Management is an interactive workshop with lots of information, simulated reports, and evaluations to learn how to act effectively together during an incident. The exercise also contributes to team building and developing mutual respect. The training workshop is useful to improve cybersecurity skills and become better aligned as an organization for other incidents.

Preparation

Kick-off meeting & collection of relevant documentation

During the preparation, Secura agrees with you on the final scope of the exercise, our approach, the planning, and the desired results. With your knowledge, we will collect the proper documents about the IT environment and the crisis infrastructure within the organization.

Crisis Training

Introduction to ransomware & crisis procedures

The ransomware tabletop begins with an introduction to the concept of ransomware. How does a ransomware attack work, and which parties are involved? What threat does it present to your organization? The second part of the training focuses on your organization's crisis process. It is the starting point of an interactive discussion about the extent to which these processes are up-to-date for a cyber incident within your organization.

Cyber Crisis Exercise

Supervising the exercise & identifying improvements

The final part of the tabletop is built around a simulated incident where the participants conduct a crisis consultation in two rounds. We confront the participants with a challenging but realistic cyber scenario to test mutual collaboration and coordination. We prepare the crisis exercise and provide simulated notifications during the exercise, supervision, and observation. During the exercise evaluation, we look at the possibilities to improve the crisis approach.

Evaluation

Evaluation in cooperation with the organization

After the tabletop exercise, Secura provides a memo of the observations made during the training and the exercise. This contains the learning lessons from the exercise and recommendations for the (cyber) crisis team that can be used to improve incident response and crisis management within your organization.

Interested in Tabletop Cyber Crisis Management?

Would you like more information on a Tabletop Cyber Crisis Management in your organization? We are happy to discuss how we can help you the best. You can contact us via the contact form, by telephone at +31 (0) 88 888 31 00, or by email at info@secura.com.

Also interested in the Tabletop Ransomware Crisis Management?