Tips for Successful Tabletop Exercises By Dan Lohrmann and Bikash Barai

In today's dynamic world, preparedness is key to navigating unforeseen challenges. Whether it's a simulation or a real-life scenario, businesses must equip themselves with the necessary tools to weather any storm. One such tool is conducting crisis exercises, which not only simulate potential situations but also prepare individuals for the unexpected. Let's delve into a verbatim discussion highlighting crucial aspects of such exercises and how they can benefit organizations.

 

Here is the verbatim discussion:

But again, this may be not a real situation, but, like, here's what's happening in the world. You know, for an oil company, the price of oil has plummeted, yada. Kind of preparing people in advance for the scenario that's gonna hit them on the day of the exercise. So, yeah, I mean, definitely that should always be part of the preparation and making sure people who are coming in know what their role is gonna be. Know what their, know what. You know, some background is another thing we did. So I started giving you some other tips. What often happens at these is, is they start, you know, throw curves at people. You know, what I mean by that is, you know, kind of like, you can play cricket, but, you know, throw us baseball, you know, curveball. Change it up. So what do I mean by that? Like, they would come in day one and say, you, you, you, and you, top on the shoulder, you're gone. Get up, get out of here. You know, go stand in the corner of the room. You're an observer. You can't say anything. It's like, wait a minute, that's the, that's the CFO you just tapped on the shoulder. You can't. Yeah, but he's in Germany, so he's not, he's not able to be here right now, so. And what about that guy? So we're going to put him down in the basement, and you can call him on the phone, but he can't be in the room here. He can't look at any of the stuff, you know, going on. So, you know, that happens a lot. So, you know, try and, you know, that's one way. You can throw them a curve or you can something they're not expecting, because inevitably, whatever you plan, whatever you're thinking, whenever you think you're ready, you're never ready, right

 

Highlights:

Setting the Stage: Prior to the exercise, it's imperative to provide participants with context. This involves briefing them on current events or industry trends that could impact the scenario. For instance, in the case of an oil company, informing participants about a sudden plummet in oil prices helps set the stage for the exercise.

Clarifying Roles: Effective communication is vital in crisis situations. Participants should be aware of their roles and responsibilities beforehand to ensure smooth coordination during the exercise. Providing background information on each participant's role enhances their understanding and preparedness.

Expecting the Unexpected: Crisis exercises often involve throwing curveballs at participants to simulate real-world unpredictability. This could include sudden changes in personnel or unexpected constraints. By challenging participants with unforeseen scenarios, organizations can gauge their adaptability and resilience.

crisis exercises serve as invaluable tools for preparing businesses to navigate turbulent times. By providing context, clarifying roles, and introducing unexpected challenges, organizations can better equip themselves to respond effectively to crises. Remember, readiness is not about expecting the expected, but about being prepared for the unexpected.

 

Speakers:

Dan Lohrmann is an esteemed cybersecurity expert and Field Chief Information Security Officer (CISO) for Presidio, celebrated for his impactful career across both public and private sectors. With beginnings at the National Security Agency and roles at Lockheed Martin and ManTech, he has been recognized as CSO of the Year among other accolades. Dan is also a prolific author and speaker, sharing insights on cybersecurity and technology modernization through his award-winning blog and publications.


https://twitter.com/govcso

https://www.linkedin.com/in/danlohrmann/


Bikash Barai
is credited for several innovations in the domain of Network Security and Anti-Spam Technologies and has multiple patents in USPTO. Fortune recognized Bikash among India’s Top 40 Business Leaders under the age of 40 (Fortune 40-under-40).Bikash is also an active speaker and has spoken at various forums like TiE, RSA Conference USA, TEDx etc.

Earlier he founded iViZ an IDG Ventures-backed company that was later acquired by Cigital and now Synopsys. iViZ was the first company in the world to take Ethical Hacking (or Penetration Testing) to the cloud.

 

https://twitter.com/bikashbarai1

https://www.linkedin.com/in/bikashbarai/ 

 

 
 
 
 
E-mail me when people leave their comments –

You need to be a member of CISO Platform to add comments!

Join CISO Platform

RSAC Meetup Banner

CISO Platform

A global community of 5K+ Senior IT Security executives and 40K+ subscribers with the vision of meaningful collaboration, knowledge, and intelligence sharing to fight the growing cyber security threats.

Join CISO Community Share Your Knowledge (Post A Blog)