Intelligent CISO Issue 28 | Page 39

FEATURE How can you be sure that individuals will act with the correct approach to incident response after attending the course? The objective of CM-Alliance’s cyberincident response training is to create muscle memory within employees and key stakeholders. Nobody can be sure that they will do all the right things in a crisis. However, one can try their best to train one’s mind to respond correctly. We drive home the importance of testing response plans several times throughout the course. By inculcating good practices of creating incident response checklists, rehearsing them repeatedly and testing their effectiveness, you can minimise the chances of error under pressure. The practice of incident response training, creating response checklists and testing the plans regularly through cyber tabletop exercises in cybersecurity is akin to the simulation sessions and checklist rehearsals that take place in the aviation industry. Best practices are so ingrained in the minds of aviation professionals that 99 times out of 100, they will do the right thing in case of crisis. That’s what makes modern-day flying so safe. Yet, one-in-11 million accidents do happen as some things continue to be out of anyone’s control and that’s how it is in every industry prone to cataclysmic events. How do you think attendees would summarise how the course has benefitted them in preparing and responding to future attacks? We have over 120 video testimonials and over 450 written testimonials from past attendees. The feedback has been both a mix of business and personal advantages. While there are some who say that the course actually helped them to see the loopholes in the processes at their organisation, one young lady recently told me how the course helped her ace an interview and opened up new career opportunities for her. Overall, the response has been overwhelmingly positive and in line with the outcomes we expect the training to generate. u Amar Singh, Founder and CEO of Cyber Management Alliance www.intelligentciso.com | Issue 28 39