As a part of Indiana University, OmniSOC is a security operations center that provides virtual cybersecurity services to members of the I-Light network. Included in those services are free security tabletop exercises to help organizations test and improve their security posture.
OmniSOC security tabletop exercises
Regular security exercises are essential to...
- Find and fix flaws in systems
- Ensure policies hold up
- Improve processes
- Raise teams' stress floor
- Create security awareness and responsibility among staff
Prefer a printable version of the OmniSOC security tabletop exercises description?Download the handout
OmniSOC will tailor a specific tabletop exercise that fits your needs, whether it is a technologist-centric tabletop designed for technical teams and the technical aspects of security incidents, to leadership-inclusive tabletops that involve executive leadership and focus on the business impact of security incidents.
The tabletop exercise process is straightforward and offers significant return
on a minimal investment of time. If interested, members should follow these
- Contact OmniSOC to schedule an exercise. The OmniSOC team will facilitate scheduling and logistics.
- Join a 30-minute prep call to discuss your environment, particular threats you are concerned about, and what personnel should be included during the exercise.
- Participate in a 60-minute tabletop exercise, immediately followed by a 30-minute postmortem to discuss the exercise's results and identify areas for improvement.
- Review OmniSOC’s after action report draft and provide feedback. OmniSOC typically provides this draft two weeks after the exercise.
Overall, regular security exercises are essential for any organization's security
posture, and OmniSOC's tabletop exercises are a great way to strengthen
yours. With two types of exercises available and a straightforward process for
conducting them, members of the I-Light network can improve their security
posture with ease.
"It forced us to review our documents and realize the redundant parts."
"The facilitator did a great job of keeping the scenario moving, incorporating all stakeholders in the exercise."
“The exercise provided a good opportunity for our staff to work through a security incident response. It was helpful to talk through not only the actions of different people, but to consider what tools might help in response, or to mitigate the severity of an incident.”