FS-ISAC is hosting its third annual Cybex Paladin functional exercise, designed specifically for small and mid-sized financial institutions.
Scenario
The exercise will cover a two-day period that tests the participating organizations’ incident coordination and communication mechanisms in response to a fraudulent account takeover.
Details
During this multi-day exercise, participants will engage in a realistic and challenging cybersecurity-focused exercise scenario. They will be tasked with addressing the ongoing situation using their organization’s existing incident response plans, policies, and procedures, including simulating any necessary internal and external communications, requests for information, technical assistance, etc.
Exercise play can take place alongside real-world work activities, so impacts to organizational productivity should be minimal. Exercise injects will be delivered via email.
Participation
This exercise is designed to test crisis management and business continuity during a fraud focused incident. Therefore, staff involved in fraud, crisis management, customer relations, business continuity/operations, public affairs, and client relations are encouraged to participate. This exercise is not a technical exercise and does not require participation from network defenders or other technical staff.
A functional exercise is an operations-based exercise designed to test and evaluate capabilities and functions in the context of a realistic, real-time environment. Exercise players are asked to perform the duties required in their incident response plans in real time by interacting with other players and participating organizations via any number of communication methods, including phone, email, text, etc., just as they would during a real-world incident.
Operations-based exercises, such as this one, allow for a more realistic observation of incident response activities at all levels of operations, from individual firms, to the interaction of multiple firms, to public private partnership activities in a way that discussion-based exercises, such as tabletops, don’t allow—players actually perform their actions in real-time, as opposed to simply discussing what these could, should, or would be. Our overarching objectives for this exercise are:
Cybex Paladin is free of charge for all participants.
© Copyright 1999 - FS-ISAC, Inc. All Rights Reserved.