Security Simulations: This Is Only A Test

Security simulations and tabletop exercises help CSOs practice and plan the best response for worst-case scenarios.

Attendees say they plan to practice more of these types of exercises during future events. And they'll also be expanding their own response rehearsals with more blended threats across more corporate departments and even with business partners.

"This exercise drove home for me how cyberattacks can be a mechanism to set off a chain reaction incorporating all measures of a security infrastructure," Teglas adds.Connect the DotsSometimes incidents are bigger than just one industry. For example, the Northeast blackout of 2003 called for cross-sector communications because all businesses require electricity. Another example: It takes oil to create power. Yet, without water, you can't pump oilanother finding from the Houston oil and gas tabletop in February.

This is why FS-ISAC chair Suzanne Gorman, who also heads the ISAC Council with membership from all sectors, planned a cross-sector tabletop at the ISAC Council's annual meeting in Florida in October. In future events, Gorman aims to include a larger presence of physical security leadership than the 15 percent representation in the April financial services tabletop. She also hopes to see more CEOs there. The ECTF made a concerted effort to bring infrastructure CEOs into the tabletops. While the majority of the invited CEOs instead sent their executive security teams to the exercises, about a half-dozen CEOs attended each tabletop, according to Graves.

So while today's simulations are giving CSOs a detailed look at preventing disaster, tomorrow's events may provide even greater value by helping other business leaders connect the dots as well.