|
|||
|
|
|
| Home |
| About |
| Hobbies |
| Software |
| Hardware |
| ICT Hotlist |
| Purpose |
React:
ICT-Hotlist Topic
Back to the ICT-Hotlist...Publication: Practice makes perfect by NCSC
Practice makes perfect
You have neatly created a disaster plan (BCM), assigned tasks, made the necessary provisions, and then? This excellent publication from the Dutch National Cyber Security Centre (NCSC) emphasizes the importance of practicing within organizations to effectively manage, for example, cyber incidents. It also provides a framework for engaging in discussions with management to practice emergency situations at various levels using staff and resources.
Employees play a crucial role in managing cyber incidents and crises. Regular exercises with simulated scenarios help build experience and improve response effectiveness.
Why Practice?
- Ensures theoretical plans work in real situations
- Improves backup recovery, communication, and crisis management
- Raises awareness of individual roles during incidents
- Strengthens collaboration across teams and organizations
- Identifies weaknesses in procedures and systems
- Engages leadership in cybersecurity preparedness
- Supports compliance with regulations like GDPR and ISO 27001
Types of Exercises
What types of exercises are conceivable?
- Tabletop Exercises: Structured simulations based on fictional scenarios
- Targeted Practical Exercises: Focused tests of specific processes (e.g., restoring backups or phishing attacks)
- Cross-Organizational Simulations: Large-scale exercises involving multiple organizations
Steps to Organize an Exercise
- Step 1: Create a high-level exercise plan based on goals, risks, and organizational needs
- Step 2: Develop and execute the exercise using best practices and existing frameworks
- Step 3: Follow up with evaluations and improvements
OTOTEL Framework
To build cybersecurity skills, use the OTOTEL cycle: Educate, Train, Practice, Test, Evaluate, Learn.
Source:
You can find the webpage with further information at: National Cyber Security Centre
You can find the PDF here: PDF
The website and document are only available in Dutch.
Scripts and programming examples disclaimer
Unless stated otherwise, the script sources and programming examples provided are copyrighted freeware. You may modify them, as long as a reference to the original code and hyperlink to the source page is included in the modified code and documentation. However, it is not allowed to publish (copies of) scripts and programming examples on your own site, blog, vlog, or distribute them on paper or any other medium, without prior written consent.Many of the techniques used in these scripts, including but not limited to modifying the registry or system files and settings, impose a risk of rendering the Operating System inoperable and loss of data. Make sure you have verified full backups and the associated restore software available before running any script or programming example. Use these scripts and programming examples entirely at your own risk. All liability claims against the author in relation to material or non-material losses caused by the use, misuse or non-use of the information provided, or the use of incorrect or incomplete information, are excluded. All content is subject to change and provided without obligation.
