Fork me on GitHub

CultureAndOrganization -> Education and Guidance: Conduction of war games

Risk and Opportunity

Risk: Understanding incident response plans during an incident is hard and ineffective.
Opportunity: War Games like activities help train for incidents. Security SMEs create attack scenarios in a testing environment enabling the trainees to learn how to react in case of an incident.

Usefulness and Requirements of this Activitiy

Usefullness: Medium
Required knowledge: High (two disciplines)
Required time: Very High
Required resources (systems): High

Additional Information

OWASP SAMM VERSION 2

ISO27001 2017