Tabletop Cyber Crisis Management

During the preparation, Secura agrees with you on the final scope of the exercise, our approach, the planning, and the desired results. With your knowledge, we will collect the proper documents about the IT environment and the crisis infrastructure within the organization.

The tabletop beings with an introduction into cyber attacks, tailored to the chosen scenario (e.g. ransomware, nation-state attack, third-party compromise).

How could a cyber attack unfold? And which parties might be involved? What threat does it present to your organization?

The second part of the training focuses on your organization's crisis process. It is the starting point of an interactive discussion about the extent to which these processes are up-to-date for a cyber incident within your organization.

The final part of the tabletop is built around a simulated incident where the participants conduct a crisis consultation in two rounds. We confront the participants with a challenging but realistic cyber scenario to test mutual collaboration and coordination. We prepare the crisis exercise and provide simulated notifications during the exercise, supervision, and observation. During the exercise evaluation, we look at the possibilities to improve the crisis approach.

After the tabletop exercise, Secura provides a memo of the observations made during the training and the exercise. This contains the learning lessons from the exercise and recommendations for the (cyber) crisis team that can be used to improve incident response and crisis management within your organization.