ArmorText and the international law firm of Crowell & Moring LLP have just released an updated version of their tabletop exercise guide, now offering new exercise scenarios under a Creative Commons license. The Cyber Resilience: Incident Response Tabletop Exercises Q2 2024 addresses urgent challenges facing executives, including disruptive attacks by sophisticated criminal actors and complex regulatory obligations.
“We are seeing new and extremely sophisticated cyberattacks taking organizations by surprise and costing them millions. Preparedness is the best cybersecurity tool to mitigate the impact of attacks, including the ensuing regulatory obligations,” said Navroop Mitter, CEO of ArmorText.
The new publication includes two additional scenarios, each with tailored injects and facilitator prompts focusing on key trends such as targeting executive communications, social engineering attacks, and stakeholder focus on incident management and communication.
“To help organizations improve their incident response, we have continued making the scenarios free to take and use. Our plan is to continue adding to this collection of modules through future publications to reflect the continuing evolution in the cyberattack landscape,” continued Mitter.
The two new modules include Rapid Exploitation, which involves escalating attacks and AI-enabled threats, and Disclosure Dialogues, which focuses on responsible disclosure of cybersecurity incidents in light of increased scrutiny from regulators and stakeholders.
According to IBM’s Cost of a Data Breach Report 2023, over half of companies who experience a cyberattack increase spending post-incident, with Incident Response planning and testing being a top investment. Organizations with an IR team and pre-attack testing were able to identify breaches 54 days faster than those without.