The day will center around interactive group work (in groups of 6-8) to handle cyber incidents. The exercise will be based on a scenario of cyber incident occurring in banking sector.
Agenda for the day will be as follows:
9:00 – 10:30 Part 1: Crisis simulation exercise
10:30 – 10:50 Tea/coffee break
10:50 – 12:30 Part 2: Incident Response for Policymakers. Aligned to FIRST.org material
12:30 – 13:30 Lunch
13:30 – 15:00 Part 3: Exercise in own CSIRT/SOC buildout. Learning on practicalities of CSIRT/SOCs
15:00 – 15:20 Tea/coffee Break
15:20 – 16:30 Part 4: Incident response demo and wrap-up of the day