Incident response exercises help keep responders ready to respond to an actual incident. In this video, Mike Chapple discusses tabletop exercises, walk-throughs, and simulations.
- [Instructor] Hopefully, you don't need to activate your incident response plan on a frequent basis. However, it's still important to keep the plan in front of team members to provide them with the opportunity to keep their skills sharp. Let's talk about a few ways that you can exercise and test your incident response process. Read-throughs are the simplest form of incident response plan testing. They're also known as checklist reviews. In this approach, incident response team leaders distribute copies of the current plan to all personnel involved in incident response efforts, and they ask them to review the procedures. Team members then provide feedback about any updates needed to keep the plan current. Walk-throughs go a step further and involve getting everyone together to review the plan at the same time. For this reason, the walk-through is also known as a tabletop exercise. Walk-throughs achieve the same result as read-throughs, but they're generally more effective because they give the team the opportunity to discuss the plan together. And the next level of incident response testing is the simulation. As with the structured walk-through, the simulation pulls the team together. The difference is that in the simulation they're not just talking about the plan, they're discussing how they would respond in a specific scenario. The test planners design a simulation of an incident and then the incident response team describes how they would react. Simulations may go beyond just talk depending upon the nature of the exercise. They may evolve into full scale cybersecurity exercises with hands-on components. At that point, they become closer to penetration tests involving the participation of red and blue teams.
We are a CompTIA Partner. As such, we are able to offer CompTIA exam vouchers at a 10% discount. For more information on how to obtain this discount, please download these PDF instructions.