Cybersecurity Tabletop Exercises: From Planning to Execution
Author: Robert Lelewski (Author), John Hollenberger (Author)
Publisher finelybook 出版社: No Starch Press
Publication Date 出版日期: 2024-10-29
Language 语言: English
Print Length 页数: 200 pages
ISBN-10: 1718503822
ISBN-13: 9781718503823
Book Description
The complete start-to-finish guide for planning and delivering successful cybersecurity tabletop exercises. Cybersecurity Tabletop Exercises, written by veteran security consultants Robert Lelewski and John Hollenberger, is an essential resource for cybersecurity professionals and anyone tasked with enhancing their organization’s incident response capabilities. This comprehensive guide to tabletop exercise planning and delivery offers practical insights, step-by-step instructions, and real-world examples to improve your team’s ability to prevent and respond to cyberattacks.
The book is divided into two main parts. In Part I: The Tabletop Exercise Process, you’ll learn:
- Why you should perform tabletop exercises and what their organizational benefits are
- Effective planning and logistics tips, including how to gain executive sponsor support
- How to develop realistic scenarios, injects, and storyboards
- Facilitation techniques to ensure active participant engagement
- Evaluation methods and follow-up activities
The example scenarios in Part II include:
- Technical tabletops covering phishing campaigns, ransomware attacks, and zero-day vulnerabilities
- Executive-level exercises that focus on high-impact incidents
- Cross-functional cases such as physical security breaches, social media compromises, and insider threats
With examples tailored for various roles, you’ll discover how to transform tabletop exercises from a mere compliance requirement into a powerful strategic preparedness tool. Whether you’re new to tabletop exercises or an experienced practitioner, this book provides proven insights to strengthen your organization’s cyber incident response capabilities and overall security posture.
Review
—Jeffrey J. Carpenter, FIRST Incident Response Hall of Fame inductee
“Lelewski and Hollenberger offer a masterclass in cybersecurity preparedness, covering every facet of incident response planning with meticulous detail and practical insights. Their focus on engaging an executive audience is particularly noteworthy, shedding light on the critical role that C-level executives and cross-functional leaders play in managing cybersecurity incidents. Tabletop Exercises’sets a new standard in the field and is essential reading for any organizations aiming to enhance their cybersecurity readiness.”
—Brian Nesgoda, CIO/CISO, Black Swan Technologies “Rob and John clearly guide readers on how to design and get the most value out of a tabletop exercise rather than it just being another compliance requirement. They will not steer you wrong!”
—Troy M. Bettencourt, Global Partner & Head of IBM X-Force
“Whether you are brand new to the concept of tabletops or a seasoned professional, this book empowers both individuals and teams to learn and improve on the planning, development and facilitation of these critical cyber exercises. Tabletop Exercises leads readers right from the design stage through to delivery, feedback gathering and even gaining organisational buy-in, with a variety of fabulous example scenarios and injects that many teams could simply pick up and run with! This should be on the bookshelf of any cyber professional who takes their tabletops seriously.”
—Rebecca Taylor, Threat Intelligence Knowledge Manager @ Secureworks “This book is a great resource for anyone looking to start or enhance their cyber simulation exercise capability. The practical insights, examples and step-by-step instructions can be immediately applied, helping readers to effectively test and evaluate a team’s ability to respond to a cyber incident. Good Stuff!”
—Anthony Giandomenico, Global VP, FortiGuard Security Consulting
About the Author
相关文件下载地址
相关推荐
- Hands-On Machine Learning with C++: Build, train, and deploy end-to-end machine learning and deep learning pipelines, 2nd Edition
- Mastering QuickBooks® 2025: Bookkeeping for small businesses with US QuickBooks® Online, 6th Edition
- IDS and IPS with Snort 3: Get up and running with Snort 3 and discover effective solutions to your security issues
- Microsoft 365 Administration Cookbook: Enhance your Microsoft 365 productivity to manage and optimize its apps and services, 2nd Edition
- Zabbix 7 IT Infrastructure Monitoring Cookbook: Explore the new features of Zabbix 7 for designing, building, and maintaining your Zabbix setup, 3rd Edition
- Refactoring with C++: Explore modern ways of developing maintainable and efficient applications