For information on how to lead the tabletop exercise, see the accompanying document “Emergency Exercises Training Package Instructions” within the Emergency Exercises Package.
In this tabletop exercise, you should imagine that you are a member of your school’s emergency planning team and that you have access to only the resources and systems you currently have in place. You will discuss your response to a hypothetical cybersecurity incident, specifically a data breach that occurs as a result of malware.
A scenario will first be presented to you and then be followed by individual questions. After each question is asked, you should pause and discuss it with your group. Additional information on how the scenario unfolds, called injects, and questions are then posed on how the school would respond.