Evaluate People readiness to execute Cyber Crisis Plan
Evaluate security technology readiness against a cyber crisis
Hyper realistic cyber exercise to have the Team ready to execute the Cyber Crisis Plan
The goal is to practice the existing Cyber Crisis Plan, simulating real scenarios to proof how effective is the plan, from executive level to the technical team.
In this exercise we will evaluate the Executive, Communications, Legal, Marketing, Risk, Compliance, HR, IT, Business Units Teams and all other relevant areas which can cause impact in the business, according to the roles and responsibilities described in the plan.
Here we will validate if the pre-defined actions are effective and how the communication is flowing.
In case the Cyber Crisis Plan needs adjustments, or it is not well defined, this exercise will help the company to improve the Plan.
The Cyber Crisis Security Service intends to evaluate the security infrastructure readiness to react to a cyber crisis scenario.
Based in the PlayBook of the Cyber Crisis Plan, we will apply a combination of cyber Threat Hunting, Threat Intelligence and BAS technics.
The final report will indicate the Security Technology Readiness to react a Cyber Crisis scenario.
The cyber range is used to bring realism in the evaluation process.
The goal is to train and prepare the Cyber Crisis Team to achieve skills and abilities that allow them to effectively fulfill the Cyber Crisis Plan.
The exercises will be designed according to the Team profile and business needs.
For the Executive Team we will build scenarios that will help them to exercise the decisions during a Cyber Crises scenario.
For the Technical Team, exercises are based on CTF or war games.
To have effective preparation it is recommended to execute this exercises periodically, at least once per quarter.
The main outcome of this service are recommendations to improve the Plan and the capability of the Team