Cybersecurity Tabletop Exercises

From Planning to Execution

Robert Lelewski, John Hollenberger (Autoren)

Buch | Softcover

152 Seiten

2024
No Starch Press,US (Verlag)
978-1-7185-0382-3 (ISBN)

Lieferbar (Termin unbekannt)
Versandkostenfrei
Auch auf Rechnung

Artikel merken

One of the most effective ways an organization can prepare for cybersecurity incidents and test out their response processes are 'tabletop exercises,' commonly used to discuss various actions in a hypothetical emergency. Veteran security consultants Robert Lelewski and John Hollenberger have run hundreds of such exercises, and they've now boiled down their vast experience planning these mission-critical events into the Tabletop Exercises handbook. Designed to take you from start to finish, the book's chapters are arranged linearly - from management's initial request to after-action review activities - empowering you to understand each and every necessary step for ensuring your tabletop is a true success. You'll see how to design a scenario that properly evaluates your team's existing controls, pinpoints your weaknesses, and encourages collaboration. You'll also examine the logistics of planning the event itself, develop effective facilitation skills, and explore ways of making process changes based on the tabletop's outcomes. Along the way, you'll learn: who to invite to your tabletop event, and why; preparatory steps, like getting an executive sponsor and forming a development team; how to properly create a realistic tabletop exercise scenario; facilitation strategies, such as audience interaction and managing the discussion. This essential soup-to-nuts resource also includes example scenarios geared at varying audiences at different levels - including infosec analysts, tech team members, non-technical employees, and executives - that you can easily adapt for your own organization depending on the goals of your tabletop.

Robert Lelewski has more than 20 years of experience in IT, cybersecurity, incident response, and risk management. He is the VP of cybersecurity strategy at Zurich Insurance’s Global Ventures and holds numerous industry certifications, including CISA, CISM, CRISC, CIPM, and CDPSE. John Hollenberger is a seasoned cybersecurity consultant with over 16 years of experience in web and host-based vulnerability assessments, incident response, digital forensics, and data loss prevention. He is a senior security consultant of proactive services at Fortinet, with certifications that include CISSP, GCIH, GWAPT, and Security+.

Acknowledgments
Introduction

Part I: The Tabletop Exercise Process
Chapter 1: Why Perform Tabletop Exercises?
Chapter 2: Planning the Tabletop Exercise
Chapter 3: The Development Process: Where the Rubber Meets the Road
Chapter 4: Facilitating a Successful Exercise
Chapter 5: Acting On What You’ve Learned: Evaluation and Next Steps

Part II: Example Scenarios
Chapter 6: Engaging a Technical Audience
Chapter 7: Engaging an Executive Audience
Chapter 8: Engaging the Business

Appendix: Reporting Templates
Index

Erscheinungsdatum	16.10.2024
Verlagsort	San Francisco
Sprache	englisch
Maße	177 x 236 mm
Themenwelt	Informatik ► Netzwerke ► Sicherheit / Firewall
Themenwelt	Wirtschaft ► Betriebswirtschaft / Management ► Unternehmensführung / Management
ISBN-10	1-7185-0382-2 / 1718503822
ISBN-13	978-1-7185-0382-3 / 9781718503823
Zustand	Neuware