Beyond Tabletop: Hands-On Incident Response Training

Interhack founder Matt Curtin will team up with Keith Fricke of the Cleveland Clinic Health System to present a class in conducting incident response drills at the Information Security Summit in Independence on November 2, 2007.

Abstract

Tabletop exercises have become increasingly popular in organizations looking to train staff. These role-playing drills tend to involve people in ways that classroom-style lecture and interaction do not. Organizations looking to bring more realism and greater value to their training, however, should consider moving beyond the tabletop.

This presentation will discuss the management of live drills for information security incidents to augment staff training and to test for the effectiveness of response plans. Critical issues covered will include the resources necessary to develop a successful drill, the objectives of such drills, how to bring out the important take-aways for staff, and how to integrate the newfound knowledge into the experience of staff who might be called upon to respond to real-world incidents.

About Interhack

Based in Columbus, Ohio, Interhack Corporation is a professional services firm with clients all over North America. Founded in 1997 by a team of information security researchers, Interhack accepted the mission to make global computing and communications infrastructures worthy of trust. Interhack's two practice areas, Information Assurance and Forensic Computing, support that mission. The company is a supporting member of The Usenix Association. Additional information about Interhack is available at web.interhack.com.