CISA Tabletop Exercise Packages (CTEP): How to Use Them
What CISA tabletop exercise packages (CTEPs) contain, their strengths and limits, and how to adapt a free CTEP to your organisation and run it live.
Alle Leitfäden zur Durchführung einer Tabletop-Übung und alle Szenarien der Bibliothek.
Artikel erscheinen zuerst auf Englisch. Diese Links öffnen die englische Fassung.
What CISA tabletop exercise packages (CTEPs) contain, their strengths and limits, and how to adapt a free CTEP to your organisation and run it live.
A deepfake tabletop exercise: a synthetic CEO on a video call pressures the CFO into an urgent wire, then a fake audio clip goes viral. 8 injects with a rubric.
How to run an executive tabletop exercise: the decisions to force, a 2-hour agenda, briefing without jargon, facilitating senior rooms and reporting to the board.
A healthcare ransomware tabletop exercise: EHR and imaging encrypted overnight, ambulance diversion, paper downtime and HIPAA decisions. 9 injects, 3 hours.
Plan a HIPAA tabletop exercise that tests incident procedures, contingency plans and breach notification, with attendees, scenarios and a checklist.
An identity provider compromise tabletop: MFA fatigue and help-desk fraud hand an attacker SSO super-admin. 9 injects on federation, break-glass and cutting SSO.
A lost laptop tabletop exercise: a stolen manager's device, unproven encryption, HR data and a surprise MDM check-in. 7 injects for legal, HR and IT.
How a NIS2 tabletop exercise (and its DORA equivalent) tests reporting clocks, management oversight and continuity, and what evidence to keep for supervisors.
An OT tabletop exercise for manufacturers: IT ransomware, an HMI with unexplained setpoint changes and a safety-first shutdown decision. 9 injects, 3 hours.