Incident Response Training Module

This module contains realistic, interactive scenarios which should be used to develop the best response to a real life data breach situation.

Business Value

Using these scenario practice sessions can literally save your company from the catastrophic results of a data breach incident. The majority of companies both large and small are now getting their networks breached resulting in data leaks, lost production time and a huge waste of management resource time.

Not all breaches can be prevented, and, the manner in which a company responds can be either efficient, professional and positive for the company or unprepared, haphazard and extremely damaging for the company.

Completing the exercises gives the Board insight and allows the participants to gain some real-life experience of making difficult decisions.

Cyber Awareness

Ask questions, Explore answers

It is important for all participants to view these exercises provide a safe environment for participants to freely ask questions, explore answers and to broaden knowledge.

The intention is to spark discussion, there are trick questions or no hidden agendas, these are realistic scenarios that actually happen to businesses. Participants should validate assumptions and ask additional questions. There are no "wrong" answers because it is a discovery of your own organisation operating is challenging situations.

There will be five scenarios and we recommend that boards plan to complete one exercise every two months, thereby covering the entire course within the year.

The Facilitator

This module is structured into sections, and each section contains the scenario material and directions to the facilitator. The company can appoint a manager as it's facilitator or may hire an independent third party to assist them.

You can get help in delivering this Incident Response Training module direct from the developer David R.Bird who specialises in this work and is available to provide the Facilitator Service or to train your in house facilitator.

The Scenarios

Incident Response Scenario 1

Launching Your New Mobile App. You are at a very positive Board meeting: your IT chief has demonstrated your new mobile app and the marketing director has gone over his campaign, everything is ready. Your cyber security guy gives the thumbs up, no problems. You are ready for launch.

Incident Response Scenario 2

Great Customer Service. One of your customers contacts you by email because he is having difficult making payment and thinks there may be some incorrect details on the invoice. The customer needs some help from your finance department.
Your company prides itself on great customer service.

Incident Response Scenario 3

Journey to Chaos? Your area sales manager is reading the newspaper while waiting for the train. She puts the paper down on top of her phone. Three minutes later the train arrives, leaves the paper on the table as she has work to do on the train.

Incident Response Scenario 4

Istanbul Cafe Your assistant accountant has a meeting at a third party vendors office planned for 3.00pm and arrives early. He decides to spend twenty minutes in the cafe just opposite the vendors building. Enjoys a coffee and logs onto the company network to do some preparation for the meeting.

Incident Response Scenario 5

Is it An Inside Job? Some of your company's designs have appeared on a Facebook page. The designs are intellectual property and the costing data, if also stolen, will give competitors an easy way to undercut your pricing and capture market share.