Where this offering fits
Cyber Drills concerns rehearsing coordinated security decisions under a defined scenario. It is useful for testing handoffs and response choices that a technical lab alone cannot demonstrate. Start with the operational question the exercise should answer and the participants authorised to make those decisions.
Architecture and rollout decisions
Agree the scenario, assumptions, escalation boundaries and observation method. Use simulated information rather than unexpectedly triggering live actions. Include security, IT and business owners where the scenario crosses their responsibilities. The review should document decision gaps and assign corrective work. A repeat drill can then assess whether contact paths and procedures have improved.
An evaluation scenario for this offering
Rehearse a fictional incident that begins with incomplete information and requires a handoff between security and an application owner. Observe who requests evidence, who can authorise containment and how uncertainty is communicated. Do not require live system changes. The review should name the missing decisions and the people responsible for improving them. A later exercise can check whether those changes altered behaviour, rather than repeating the same scenario without examining the previous action register.
Evidence to request for this scope
- Approve participants, scenario scope and explicit stop conditions.
- Record decisions and missing information during the exercise.
- Track corrective actions before scheduling the next rehearsal.