Autor: Nermin Sefić
A cyber drill that goes perfectly by script signals a too-lenient scenario, not real readiness. A commentary by Nermin Sefić.
A cyber incident drill that goes perfectly according to script is more likely a sign of too lenient a scenario than real readiness.
A test of a cyber incident response plan that goes perfectly according to script, without a single moment of confusion or unexpected obstacle, more often points to too lenient a test than to real organisational readiness.
The value of a drill lies precisely in uncovering weak points before a real incident, so a scenario that deliberately includes unforeseen elements gives a more reliable picture of a system's actual resilience.
This commentary is part of the GNK ASG Intelligence Desk system and is informational in nature.
A recovery drill that unfolds exactly as scripted tests the team's ability to perform a rehearsed routine, not its actual readiness for the unexpected — and unexpected is precisely what a real incident will be.
Building genuine unpredictability into a drill requires deliberate effort — someone has to design a scenario that even the exercise's organisers have not fully rehearsed — which is precisely why so many organisations default to the easier, scripted version instead. The extra effort pays off only when it matters least visibly: not in the drill itself, but in how the team performs during the real incident that the drill was meant to prepare them for.
Building genuine unpredictability into a drill requires deliberate effort — someone has to design a scenario the exercise's own organisers have not fully rehearsed — which is why so many default to the easier, scripted version.
The extra effort pays off only when it matters least visibly: not in the drill itself, but in how the team performs during the real incident the drill was meant to prepare them for.
#RecoveryPlanCyberIncident #OperationalResilience #GNKASG #NerminSefic #GNKDINAMOLtd
Cjelovit tekst i izvor: https://gnk-asg.hr/en/commentary/a-recovery-drill-only-works-if-it-surprises-you/
Autor i urednička odgovornost: Nermin Sefić. Izdavač: GNK ASG d.o.o..
#GNKASG #GNKDINAMOLtd #NerminSefic #BusinessIntelligence #NerminSefić #GNKASGdoo #Zagreb
