The day will center around interactive group work (in groups of 6-8) to handle cyber incidents. The exercise will be based on a scenario of cyber incident occurring in banking sector.

Agenda for the day will be as follows:

9:00 – 10:30 Part 1: Crisis simulation exercise

10:30 – 10:50 Tea/coffee break

10:50 – 12:30 Part 2: Incident Response for Policymakers. Aligned to FIRST.org material

12:30 – 13:30 Lunch

13:30 – 15:00 Part 3: Exercise in own CSIRT/SOC buildout. Learning on practicalities of CSIRT/SOCs

15:00 – 15:20 Tea/coffee Break

15:20 – 16:30 Part 4: Incident response demo and wrap-up of the day