E17： 不糟糕的练习.pdf

1、Exercises That Dont SuckExercises That Dont SuckMay 6-8,2024|Charlotte,NCDavid Trout,MBCP RTX:RaytheonRaytheon Company-Unrestricted ContentIntroductionsIntroductionsDavid Trout-MBCP(Master Business Continuity Professional)-25 years public safety&private sector resilience experience.-Currently at RTX

2、,managing Raytheons Business Resilience Program.-Areas of expertise:Planning&Evaluating value-added exercises-Active Assailant from TTXs to FSEs Weather Situational AwarenessWho are you?Introductions by those in attendance.Raytheon Company-Unrestricted ContentObjectives:Why Are We Here?Objectives:Wh

3、y Are We Here?Exercises are important:ISO 22301 Standard PracticeVisibility,Team Building,&Plan TestingContinuous Improvement&Risk MitigationThey should be:Value-Added&they should drive changeThey shouldnt be:A waste of time&they shouldnt suck!Raytheon Company-Unrestricted ContentFoundation:Know You

4、r BusinessFoundation:Know Your BusinessCompleting Risk Assessments is critical to designing a good exercise-Business Impact Analysis(BIA)-Threat&Vulnerability Assessment(TVA)-Physical Security Assessment(PSA)You should know:-Critical processes&dependencies,and disruptions that can cause huge losses-

5、Geography&infrastructure that makes your sites vulnerable to certain threats-Issues and gaps with facilities or procedures that create potential exposuresRaytheon Company-Unrestricted ContentFoundation:Know Your AudienceFoundation:Know Your AudienceCorporate,Business,or Site Level Team-Will inform t

6、he size&scope of your scenario-What level leaders will be in the room&what are their care-abouts Specifically,what keeps your Team Lead(s)up at night?-These will determine the amount of time you have&narrative depth of detailWho are the Team Members and who will be in attendance-Core business v.supp