Ransomware TTX | Seven scenarios to include in your next TTX
Source: YouTube · SANS Digital Forensics and Incident Response · published Jun 26, 2025 · 28:24
BLUF: The speaker shares insights on organizational cybersecurity gaps derived from facilitating dozens of tabletop exercises, aiming to highlight common struggles and critical scenarios for improvement 0:17.
Key Takeaways:
• The discussion originates from the presenter's experience running approximately two dozen tabletop exercises across various organizations in the past 18 months 0:22.
• The primary goal is to identify commonalities in where organizations currently stand, specifically focusing on gaps and areas of struggle 0:31.
• The presentation will focus on tabletop exercises to assess current capabilities and emphasize their importance in security readiness 0:43.
• The speaker plans to analyze seven specific scenarios to illustrate these common vulnerabilities and operational challenges 0:53.
Closing Statement: By examining these common scenarios and gaps, organizations can better understand their current security posture and improve their incident response capabilities.
Sources:
- 0:17 Introduction to the topic based on facilitation experience
- 0:22 Scope of exercises conducted over the last 18 months
- 0:31 Focus on identifying organizational gaps and struggles
- 0:43 Importance of tabletop exercises in security strategy
- 0:53 Overview of the seven specific scenarios to be discussed
Generate CPE Credits
Generate a professional CPE document from this video's transcript.
Estimated credit: 0.5 CPE hours
Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.
Topic: Incident Response. Commonly maps to: Security Operations, Security Assessment and Testing. Exact CISSP domains are assigned during generation.
Free account. One generation at a time, with a daily limit.
CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.
Transcript Preview
First 800 characters of the transcript
Well, thanks everybody uh for joining me this morning or this afternoon wherever you are. Uh the genesis of this discussion uh over the next uh say 2530 minutes really comes out of my experience running and facilitating tabletop exercises across a variety of organizations. I think maybe a two dozen in the last 18 months. And I really wanted to kind of pull some of the commonalities of of where things uh sit in terms of gaps and uh where organizations are really kind of have some struggles and really kind of highlight those. Uh what we'll be looking at today uh we'll look at tabletop exercises a little bit in focus kind of where we are where I see things and uh you know as was pointed out very important for us to uh to do. Uh we're going to look at seven scenarios specific scenarios. This i…