Cyber tabletop exercises are the flavour of the season in the world of IT security. The COVID-19 pandemic has exposed vulnerabilities in the security infrastructure of businesses across the globe. It has also, interestingly, pushed the world into a whole new level of digitization, further increasing the risk perimeter of businesses across industries. Both these factors have made testing of cyber incident response capabilities more vital than ever before.
Running successful tests of cyber incident response plans has become increasingly vital for organisations. Further, regulatory authorities the world over, such as, the Monetary Authority of Singapore have emphasised the importance of conducting regular cybersecurity tabletop exercises for financial institutions in the recently revised Technology Risk Management guidelines 2021.
In the Middle East, Saudi Arabian Monetary Authority, Qatar’s Central Bank and the National Electronic Security Authority of UAE already have regulations in place that mandate regular business continuity testing and cyber tabletop exercises to evaluate the efficacy of Cyber Incident Response Plans, especially for businesses operating in sectors of critical national infrastructure.
Many organisations for whom it is not a regulatory requirement to conduct such exercises continue to do so as they understand that it’s the best way to ensure a certain degree of preparedness in case of a crisis. These tabletop exercises for cybersecurity help all stakeholders understand the risks their organisation is exposed to, the kind of cybersecurity tabletop exercise scenarios that they may need to confront and what their roles and responsibilities will be when a crisis occurs - yes, when and not if!
So, now that we know how important it is to conduct regular cyber table top exercises, it brings us to one vital question - how to ensure that the exercise you do conduct is actually effective and serves a purpose.
You can start by using our FREE resources created by the world's leading Cyber Tabletop Exercise Facilitators!
Want to go a step further in your commitment to your organisational cyber resilience? Check out our globally acknowledged Training on How to Conduct a Successful Cyber Table Top Exercise.
The CEO and Co-Founder of Cyber Management Alliance, Amar Singh, who is also one of the world’s most experienced and renowned facilitators of cyber table top exercises recently shared some Do's and Don’ts for successful tabletop exercises. Here’s a look at what he had to say:
At CM-Alliance, we have the expertise, the experience and requisite skills to support you in hosting a productive and effective cyber crisis tabletop exercise. We work with you on planning, creating scenarios, producing the scripts and artefacts and running the actual workshop. We can run a complete cyber tabletop exercise virtually using Zoom, Microsoft Teams or Google's Meet.