成功进行桌面练习.pdf

1、Emily Gladstone Cole emilygcberkeley.eduRunning a Successful Tabletop ExerciseEmily Gladstone ColeUC Berkeleyemilygcberkeley.eduEmily Gladstone Cole emilygcberkeley.eduAgenda1.Introduction(We are here)2.Planning(How to set goals and choose participants)3.Scenario Ideas(Some of the many sources for s

2、cenario ideas)4.Running(What to keep in mind during your Tabletop)5.Summary(Conclusions and wrap up)Emily Gladstone Cole emilygcberkeley.eduwhoamiUC Berkeley gradWorked for small startups,large startups,small companies,large companies,government agencies,and now UC Berkeley!Security Analyst in Infor

3、mation Security at UC BerkeleyStaff to two catsEnjoys performing light operaEmily Gladstone Cole emilygcberkeley.eduTabletop EssentialsA Tabletop Exercise is a talk-through of your Security Incident Response process using an example incident.Pick the Participants who will be there for the ExerciseCh

4、oose a Scenario that you want to work throughCome up with Prompts to ensure key points are addressedRun the Exercise with your chosen participantsReview and learn the same way you do for other IncidentsEmily Gladstone Cole emilygcberkeley.eduEmily Gladstone Cole emilygcberkeley.eduHow do you get to

5、Carnegie Hall?Emily Gladstone Cole emilygcberkeley.eduPlanning your ExerciseEmily Gladstone Cole emilygcberkeley.eduGoals of the ExerciseThis will determine a lot about the scenario etc.that you chooseYearly compliance exerciseHands-on run through of playbooksThought exercise in response to a scenar

6、io in the newsEnsuring external departments understand the processEmily Gladstone Cole emilygcberkeley.eduParticipantsTechnical StaffLeadershipEmily Gladstone Cole emilygcberkeley.eduParticipants can help define your ScenarioBuilding bridges with other technical teamsWalking through an incident resp