Hands On Incident Response Drilling
Interhack founder Matt Curtin teams up with Keith Fricke of the Cleveland Clinic Health System to teach a hands-on method of incident response drilling at the annual Contingency Planners of Ohio conference on Tuesday, September 30, 2008.
Tabletop exercises have become increasingly popular in organizations looking to train staff. These role-playing drills tend to involve people in ways that classroom-style lecture and interaction do not. Organizations looking to bring more realism and greater value to their training should consider moving beyond the tabletop.
This presentation will discuss the management of live drills for information security incidents to augment staff training and to test for the effectiveness of response plans. Critical issues covered will include the resources necessary to develop a successful drill, the objectives of such drills, how to bring out the important take-aways for staff, and how to integrate the newfound knowledge into the experience of staff who might be called upon to respond to real-world incidents.
Based in Columbus, Ohio, Interhack Corporation is a professional services firm with clients all over North America. Founded in 1997 by a team of information security researchers, Interhack accepted the mission to make global computing and communications infrastructures worthy of trust. Interhack's two practice areas, Information Assurance and Forensic Computing, support that mission.
Established in 2000, Interhack Forensic Computing helps in-house counsel, incident response teams, law enforcement agencies, and law firms establish facts that can be used in litigation or criminal prosecution.
Interhack is a supporting member of The Usenix Association. Additional information about Interhack is available at web.interhack.com.