{{item.videoDuration}}
{{item.title}}
{{item.text}}
{{item.videoDuration}}
{{item.title}}
{{item.text}}
Latest insights - 4 items
Cybersecurity incidents in the public and private sectors have become prevalent. With organisations moving towards digitalising all the services they provide to end users and enhancing efficiency via automation and cloud migration initiatives, the surface area of cyber-attacks has expanded astronomically over the past few years.
Under the Singapore Cyber Landscape publication by The Cyber Security Agency of Singapore (“CSA”), there were a total of 137 ransomware cases reported in Year 2021. This indicates a 54 per cent increase from Year 2020 (89 cases), and a four-fold increase from Year 2019 (35 cases). Furthermore, organisations face constant scam campaigns designed to monetise the services provided to the public. These can be in a variety of forms such as phishing email, fake websites, and social engineering attacks.
In order to emerge stronger from crisis, companies need to:
- Prepare through training and testing via exercises and simulations
- Ground their response in the facts
- Establish governance via a cross-functional core team that combines communications, legal, and operational functions
- Understand their stakeholders and be authentic in their response
- Dedicate energy during crisis to “looking around the corner” for both risks and opportunities
- Take action on what was learned.
Although organisations spend a considerable amount of time and resources in preventing such cybersecurity incidents from occurring, emphasis needs to also be placed on the actions taken by the organisations if preventive measures fail and such an incident does occur. Actions taken within the first 48 hours of a cybersecurity incident are crucial in determining whether an organisation is perceived by public to be successfully managing and containing the incident.
How we can help you
Our cyber simulation exercises enables clients to practise their incident response skills in a safe working environment. We design scenarios and injects to simulate failures in an organisation's cyber defence, allowing us to test various aspects of crisis responses, such as incident detection, triage, escalations, communications with various stakeholders, senior management decision making, and steps taken to address members of the public and media.
- Tabletop exercises (TTX)
- Enhanced tabletop/ Command post exercises (CPX)
Tabletop exercises (TTX)
To prepare your strategy for responding to cyber incidents, tabletop exercises (TTX) provide opportunities to practise responding to realistic threat scenarios. These exercises, along with workshops and simulations, are part of the continuous improvement cycle that should be the foundation of your incident response planning.
Crisis responders sit together to work through broad scenarios, facilitated by an experienced crisis responder, and talk through how they would address the specific situation.
Tabletop exercises will help clarify critical elements of your strategy for incident response, including:
- Roles and responsibilities during a crisis
- Escalation procedures
- Established crisis response plans and procedures
- Senior management decision making
- Brand implications (e.g. legal, communications).
Enhanced tabletop/ Command post exercises (CPX)
Crisis responders participate in a timed exercise that simulates a realistic scenario that challenges information collection, decision-making, prioritisation, brand implications, and more in a setting that mimics some of the time pressures and information constraints of a real crisis. The objective is to increase realism by including challenges typically faced during a real incident, including:
- Remote working, where participants are working in different locations and communication will be simulated via emails, phone calls, and virtual meetings
- Participants simulate execution of certain processes (e.g. mock reporting to authorities, submission of incident tickets, etc).
{{filterContent.facetedTitle}}
{{contentList.loadingText}}
{{contentList.loadingText}}
Follow us
