This episode of CISO Tradecraft, hosted by G Mark Hardy, delves into the concept, significance, and implementation of tabletop exercises in improving organizational security posture. Tabletop exercises are described as invaluable, informal training sessions that simulate hypothetical situations allowing teams to discuss and plan responses, thereby refining incident response plans and protocols. The podcast covers the advantages of conducting these exercises, highlighting their cost-effectiveness and the crucial role they play in crisis preparation and response. It also discusses various aspects of preparing for and executing a successful tabletop exercise, including setting objectives, selecting participants, creating scenarios, and the importance of a follow-up. Additionally, the episode touches on compliance aspects related to SOC 2 and the use of tabletop exercises to expose and address potential organizational weaknesses. The overall message underscores the importance of these exercises in preparing cybersecurity teams for real-world incidents.
Outline & References:
https://docs.google.com/document/d/13Qj4MOjPxWz9mhQCDQNBtoQwrXdTeIEf
Transcripts: https://docs.google.com/document/d/1yfmZALQfkhQCMfp9ao3151P9L2XcEXFm/
Chapters
#40 - Risky Business
#39 - Stressed Out? Find your Ikigai and 6 Invaluable Factors
#38 - CMMC and Me
#37 - Cyber Security Laws & Regulations
#36 - IPv6 Your Competitive Advantage (with Joe Klein)
#35 - Setting Up an Application Security Program
#34 - Metrics that Matter
#33 - 10 Steps to Cyber Incident Response Playbooks
#32 - Brace for Incident (with Bryan Murphy)
#31 - Executive Order on Improving the Nation’s Cybersecurity
#30 - Cloud Drift (with Yoni Leitersdorf)
#29 - Identity and Access Management is the New Perimeter
#28 - AI and ML and How to Tell When Vendors Are Full of It
#27 - Roses, Buds, & Thorns
#26 - Blockchain for CISOs
#25 - Slay the Dragon or Save the Princess?
#24 - Everything you wanted to know about Ransomware
#23 - NSA’s Top 10 Cybersecurity Mitigation Strategies
#22 - Modern Software Development Practices
#21 - Your First 90 Days as a CISO (with Mark Egan)
Create your
podcast in
minutes
It is Free
Insight Story: Tech Trends Unpacked
Zero-Shot
Fast Forward by Tomorrow Unlocked: Tech past, tech future
The Unbelivable Truth - Series 1 - 26 including specials and pilot
A Prairie Home Companion: News from Lake Wobegon