Description
Book SynopsisTabletop exercises are a common way to test disaster recovery and business continuity plans, but they can also be some of the most dry and boring meetings any professional can attend. Following a set script with no variation can cause folks to lose interest and question the value of such exercises, even when they are required for compliance frameworks such as SOC2.What is a security professional to do? Simpleintroduce variability by adding dice!Gamification isn't a new idea, but applying some principles of gamification to a traditional tabletop exercise can breathe new life into a potentially monotonous activity. This book covers how to build a gamified tabletop exercise from the ground up, and provides example exercises you can build upon for your own needs. Not only will participation improve, but you will have reusable exercises to work with as each walk-through can produce different results, helping to cover multiple outcomes when testing your recovery capabilities. By providing examples and a methodical approach on how to build gamification into a traditional tabletop, the goal is to provide a new perspective on tabletop exercises that should be more engaging for all participants, and thus more beneficial for everyone involved. Avoid the monotony and start practicing with realistic consequences for decisions with dice rolls!What You Will LearnPlan, build, and execute tabletop exercises with participantsUnderstand and explaingamification benefits and how to add it to traditional tabletop exercisesUnderstandwhy and how to introduce such concepts to a traditional tabletop exerciseGet up to speed on the purpose of tabletop exercises as well as how to improve participation and retention of exercise participantsCompile tips and tricks to help when encountering unexpected issues during tabletop exercises, from unexpected decisions to difficult participantsKnow tools and techniques, such as using mind maps, tohelpplan and build gamified tabletop exercisesWho This Book Is ForGRC or security professionals who would are responsible for executing a tabletop exercise or otherwise tasked with annual testing of the company disaster recovery/business continuity plans. Even participants who are looking for alternatives to traditional happy path tabletops may be interested.
