Plans & Tabletop Exercises

Incident Response Plans and Tabletops Fully Covered by the Resilience Retainer

Incident response planning and tabletop exercises are seamlessly integrated with our Resilience Retainer, along with dozens of hardening, response, and recovery solutions. Retainer clients can allocate dollar-for-dollar credits towards developing or refining response plans or a new tabletop exercise, in addition to securing prioritized access to Cybereason’s elite digital forensics and incident response team in the event of an incident. 

HOLISTIC INCIDENT PREPAREDNESS

With our holistic approach to preparedness, you can have peace of mind knowing that your organization is fully equipped to handle any cyber threat that may come your way. Our Incident Response Planning (IRP) services cover technical, operational, and strategic levels, whilst our TTXs (Tabletop Exercises) are designed to prepare both technical responders and strategic decision-makers. By involving every level of your organization, we ensure that everyone is aligned and equipped to respond effectively to cyber incidents.

Diverse Playbooks and Exercise Scenarios

As the threat landscape continues to evolve, playbooks and exercise scenarios must keep up but some threats are nearly perennial. Strengthening response plans around these common threats can greatly improve most organizations' resilience, so we typically suggest these as initial considerations:

• Ransomware Attack Simulations, including detection, isolation, negotiation, recovery
• Data Breach Simulations, focusing on containment and remediation to prevent further data loss and meet regulatory reporting obligations.
• Business Email Compromise (BEC) Simulations, including detection, response, and mitigation capabilities along with communication protocols to prevent financial loss.
• Insider Threat Scenarios, simulating compromise of sensitive data or systems by an internal actor and the organization’s ability to detect, contain, and mitigate in a timely manner.
• Supply Chain Attacks, replicating incidents where participants must identify vulnerabilities, assess damage, and coordinate vendor risk management, restore systems and develop external communication strategies with vendors and clients potentially impacted.
• Nation-State Attack Simulations, primarily for larger organizations or those in critical industries, involving sophisticated, long-term attacks require advanced threat detection, countermeasures, and potentially the involvement of federal law enforcement.