We do over 100 exercises per year and in the past 18 months, many of them have been cyber security exercises. These are not so much from the technical aspects but the true incident (crisis) management issues – it is a complicated and meaty topic and well worth your time. It deeply involves executives, incident management teams, crisis communications and business units. A true multi-ring circus!
An article I just wrote on this topic has appeared in the UK magazine Crisis Response and is called Planning for the Breach.
It is available on your website by clicking on this link.