CISA Tabletop Exercise Packages (CTEP): How to Use Them
What CISA tabletop exercise packages (CTEPs) contain, their strengths and limits, and how to adapt a free CTEP to your organisation and run it live.
Tous les guides pour mener un exercice sur table et tous les scénarios de la bibliothèque.
Les articles paraissent d'abord en anglais. Ces liens ouvrent la version anglaise.
What CISA tabletop exercise packages (CTEPs) contain, their strengths and limits, and how to adapt a free CTEP to your organisation and run it live.
A deepfake tabletop exercise: a synthetic CEO on a video call pressures the CFO into an urgent wire, then a fake audio clip goes viral. 8 injects with a rubric.
How to run an executive tabletop exercise: the decisions to force, a 2-hour agenda, briefing without jargon, facilitating senior rooms and reporting to the board.
A healthcare ransomware tabletop exercise: EHR and imaging encrypted overnight, ambulance diversion, paper downtime and HIPAA decisions. 9 injects, 3 hours.
Plan a HIPAA tabletop exercise that tests incident procedures, contingency plans and breach notification, with attendees, scenarios and a checklist.
An identity provider compromise tabletop: MFA fatigue and help-desk fraud hand an attacker SSO super-admin. 9 injects on federation, break-glass and cutting SSO.
A lost laptop tabletop exercise: a stolen manager's device, unproven encryption, HR data and a surprise MDM check-in. 7 injects for legal, HR and IT.
How a NIS2 tabletop exercise (and its DORA equivalent) tests reporting clocks, management oversight and continuity, and what evidence to keep for supervisors.
An OT tabletop exercise for manufacturers: IT ransomware, an HMI with unexplained setpoint changes and a safety-first shutdown decision. 9 injects, 3 hours.