When an incident happens, responsibilities must already be clear
A serious cyber incident demands more than technical intervention. Leaders must make decisions about continuity, communication, mandatory reporting, affected services and recovery priorities. In this hands-on workshop, participants practise those decisions in a realistic scenario.
Participants
- Senior leaders and information security officers (IBF)
- IT managers and operations personnel
- Data protection officers, legal and compliance teams
- Communications and business continuity personnel
- Incident response team members
Workshop agenda
- Define roles, escalation paths and communication channels
- Introduce a realistic scenario: ransomware, account compromise, exfiltration, supplier attack or service outage
- Assess initial evidence, immediate containment actions and record keeping
- Practise management decisions on service continuity, external support and resources
- Determine whether and how incidents must be reported to competent authorities or CSIRTs
- Coordinate staff, customer, partner and media communications
- Plan recovery priorities, secure restoration and evidence preservation
- Conduct an after-action review: what worked, gaps and corrective actions
What you receive
A concise after-action summary and practical improvement recommendations for your organisation.
Standard workshop
Duration: 4 hours. HUF 249,000 + VAT per organisation. Includes preparation, adapted scenario, up to 10–12 active participants, a short debrief and improvement proposals.
Tailored and extended options
Tailored organisational workshop from HUF 349,000 + VAT, including discovery, bespoke scenario, roles, a 4–6-hour exercise and detailed review. Multi-department tabletop exercise from HUF 499,000 + VAT, including staged incidents and management communications.