EXERCISE MANAGEMENT & READINESS

Table-tops, DR tests and cyber war games are run ad hoc, so planning, coverage and results aren't tracked and lessons don't drive improvement. Readiness is asserted, not evidenced.

Actors

  • Head of Cyber Resilience
  • Incident Response Lead
  • Business Continuity Lead

Systems / Vendors

  • GRC platform
  • SOAR
  • BI / reporting

Business Question

"When did we last rehearse this scenario, how did it go, and did the lessons actually change anything?"

What SPoG Does

  • Plans and tracks table-tops, DR tests and cyber war games.
  • Records results and improvement actions.
  • Turns exercises into evidenced readiness.

Outcome Metrics

+50%

Scenario coverage

1

Exercise readiness view

6–10 wks

To first outcomes