Price is US Dollars.

Lunch, refreshments and snacks are included. Please contact us with special meal requirements.

This course is a pre-requisite for the certified Cyber Crisis Management Planning Professional (C2MP2) designation. Students who pass the end-of-course exam will be awarded the Cyber Crisis Management Planning Professional (C2MP2) certification.

Each student receives a free copy of Cyber Crisis Management Planning: How to reduce cyber risk and increase organizational resilience (https://www.amazon.com/dp/0578523108)

During the fog of war (cyber crisis) is not the time to figure out how to respond. An effective response requires careful planning across an organization. This in-depth, hands-on immersive boot camp gives attendees the knowledge and tools to complete their own Cyber Crisis Response Plan / Cyber Crisis Management Plan (CCRP / CCMP).

DAY 1: FOUNDATIONS OF A CYBER CRISIS MANAGEMENT PLAN

• THE PLAN CORE
  • Acronyms
  • How to Use the Cyber Crisis Management Plan
  • Define Plan Purpose
  • Response Organization
  • Response Structure

• FUNCTIONAL INCIDENT RESPONSE PLANS
  • Functional Incident Response Plan (Detailed)
  • Functional Incident Response Plan (Summary)
  • Linking Incident Response Plans

• RESPONSE PROCESS FLOW
  • Response Process Flow Foundation
  • Master and CSIRT Incident Response Plans
  • Response Process Flow Completion

• CYBER WAR ROOMS & BRIDGE LINES
  • War Rooms
  • Bridge Lines
  • Cyber Crisis Logistics

• TEAMS, ROLES & RESPONSIBILITIES
  • Cyber Crisis Executive Team (CCET)
  • Cyber Crisis Management Team (CCMT)
  • Cyber Crisis Response Team (CCRT)
  • Computer Security Incident Response Team (CSIRT)
  • Cyber Crisis Support Team

• WORKING GROUPS
  • Communications Working Group
  • Technology Working Group
  • Additional Working Groups

DAY 2: CYBER CRISIS MANAGEMENT ROLES, CHECKLISTS & TEMPLATES

• PLAN OWNERSHIP AND GOVERNANCE
  • Plan Ownership
  • Plan Governance

• IMPACT CATEGORIES, SCALES & SCORES
  • Impact Categories, Scales & Scores Table

• CYBER ATTACK & CRISIS ANATOMIES
  • Cyber Attack Anatomy
  • Cyber Crisis Management Anatomy™

• CYBER CRISIS INFORMATION FORM
  • CCIF Development

• CHECKLISTS
  • Lead Incident Handler Checklist
  • Pre-Confirmation
  • Post-Confirmation
  • Cyber Crisis Deactivation Checklist

• TEMPLATES
  • LIH-to-EIC Email Template
  • EIC-to-CCRT Incident Notification Email Template
  • LIH-to-CCRT Initial Meeting Email Template
  • Initial CCRT Meeting Agenda Template
  • Subsequent CCRT Meeting Agenda Template
  • SEIC-to-CCET Email Template

• QUICK REFERENCE CARDS
  • CCET Quick Reference Card
  • SEIC Quick Reference Card
  • EIC Quick Reference Card
  • LIH Quick Reference Card
  • IRL Quick Reference Card

DAY 3: CYBER CRISIS MANAGEMENT/RESPONSE PLAN USAGE AND VALIDATION (TABLETOP WAR GAMES)

• PROJECT PLANNING
  • Project Resources
  • Project Phases & Activities
  • Phase I: Plan
  • Phase II: Build
  • Phase III: Test
  • Phase IV: Implement

• TRAINING THE ORGANIZATION
  • CCMP Training Deck

• TABLETOP CYBER WAR EXERCISES
  • Tabletop Exercises vs. Immersive Simulations
  • Exercise Roles & Responsibilities
  • Exercise Logistics
  • Exercise Materials
  • Exercise Execution
  • Exercise Conclusion
  • After-Action Reporting

• WRAP-UP
  • Version Control
  • Release Planning