Culture and Org. -> Education and Guidance: Conduction of war games
Risk and Opportunity
Risk: Understanding incident response plans during an incident is hard and ineffective.
Opportunity: War Games like activities help train for incidents. Security SMEs create attack scenarios in a testing environment enabling the rainees to learn how to react in case of an incident.
Required knowledge: High (two disciplines)
Required time: Very High
Required resources (systems): Very High