- Cybersecurity
- English
- Selvana Naiken Gopalla
- Sachindra Reechaye
- Emmanuel NIYIKORA
- Manish Lobin
- Kaleem Ahmed USMANI
Intermediate
Description
Cyber security exercises are a very effective way of learning the practical aspects of information security. But designing such exercises is not an easy task. This course provides a number of steps and guidelines that should be followed when designing a cyber exercise. The steps include: defining the objectives, choosing an approach, designing network topology, creating a scenario, establishing a set of rules, choosing appropriate metrics and learning lessons. This 3 days training course examines the key elements required to develop Cyber Disaster Response Simulation exercises. It will enable participants to increase collaboration, through greater understanding and familiarity of interaction between private and public sector and a better understanding of cyber attacks as well as the protection and defense of critical information infrastructures so that knowledge and skills for planning, implementing, and following up on cyber disaters can be improved.
- Chief Information Officers
- Chief Technical Officers
- Chief Information Security Officers
- Information Security Officers
- Security Directors
- Security Managers
- Network Engineers
- Systems Administrators
Experience in Incident response, Network Security, Information System Security and System administration.
The main objective of the course is to enable participants to develop simulation exercises that will help them build their capabilities and train them in handling cyber incidents. Other objectives include:
- Develop crisis management capabilities and leadership with responsible actors;
- Improve the ability to interact with other actors in the crisis management system;
- Increase the ability to make quick decisions and communicate situation information;
- Develop the participants’ knowledge and skills in incident response
- Maintain awareness of the complexity that is characteristic of crisis situations;
- Examine and develop contingency plans that mirror reality;
- Highlight weaknesses and strengths in resources and technology.
Upon completion of this course, participants will be able to:
- Develop incident response and crisis management plans;
- Develop and design a cyber security simulation exercise;
- Learn how to execute the simulation exercises such as TTX and technical simulations.
The training will be carried out online through the ITU Academy Platform. It will include presentations by instructors and explanation on the group work exercises.
An exam consisting of 25 – 30 multiple choice questions will be carried out at the end of the last day.
Participants who will achieve a total score higher than 70% will obtain the ITU certificate.
Day 1
14 June 2023
11am – 1pm
(CEST)
Exercise Preparation & Planning
- Cybersecurity preparedness
- Cyber incident response plan
- What is a simulation exercise?
- Benefits of simulation exercises
- Types of exercises
- Exercise planning
Day 2
15 June 2023
11am – 1pm
(CEST)
Exercise Preparation & Planning (contd.)
- Actors and roles in exercise organisation
- Design components and development of scenarios
- Scenario example walkthrough
- Establishment of communication channels, planning of logistics, support materials and pre-exercise training
- Best practices
- Formulation of the requirements for developing cyber exercises scenarios.
Day 3
16 June 2023
11am – 1pm
(CEST)
Implementation & Evaluation
- Information Gathering
- Exercise Elaborated
- Implementation of a TTX Scenario
- Infrastructure Requirements
- Simulation Environment
- Example of the Implementation of a Simulation Exercise