Conducting Table Top Exercises to Get Your Team Battle Ready
No ratings
Presented at LASCON2018 2018 by
For this session, we will be conducting a live Security Table Top Exercise (TTX). We will talk about some free resources that you can use to make your own and give guidance on how they work and can be used for process improvements.Cyber Incident Response TestFor those of you who are unfamiliar with the term, a Table Top Exercise is a small but inclusive exercise that occurs as part of a the Cyber Security Organization’s attempt to be better prepared to potential cyber related incidents.The TTX serves as a means to exercise preparedness, validate plans, test operational capabilities, maintain leadership effectiveness and examine the ways we work with the larger community outside of our company to prevent, protect from, respond to, recover from, and mitigate cyber related incidents. Larger FocusCyber incidents are no longer, “Just an IT problem.” With more and more companies under attack by hacktivists, organized criminals and nation state militaries, incidents are routinely making front page news and will require many different organizations both internal and external to the company to respond- much like you wouldn’t ask the communications team to build out a defense-in-depth security program, the IT Security organization shouldn’t be interfacing directly with the media. Additionally, many branches of law enforcement have enhanced their capabilities to better assist organizations of all sizes respond to incidents. By including them, and others, in the exercise and/or identifying areas where there may be touch-points, we can be better prepared to reach out and enlist their help in the event an incident occurs.Cyber Incident ScenarioThe scenario focuses on the company’s ability to coordinate and implement prevention, preparedness, response and recovery plans and capabilities pertaining to a significant cyber event or a series of events. In addition, the process examines response plans and procedures, including the Cyber Incident Response Plan, any response frameworks and more.