From Planning to Impact: Lessons from Poland’s National Cybersecurity Exercises with a Dedicated ...
summary
Three national KSC‑EXE editions validate an NIS‑based approach using a dedicated CyberBastion TTX platform that runs realistic multi‑sector scenarios with MITRE ATT&CK mapping, conditional injects and role/permissioned playbooks. Preparation takes about six months, scenario timelines can reach hundreds of injects but compress to a 70‑minute compressed run for testing. Exercises put ~120 people in‑room plus hundreds remote, capture telemetry and produce participant‑specific metrics and post‑exercise reports; an integrated Bastion AI drafts initial scenarios and injects.
AI-written summary · about
chapters (10)
- 0:00Poland’s cyber exercises intro
- 3:37Evolution of Poland’s cyber exercises
- 8:43Methodology and planning
- 12:15Cyber Bastion platform
- 16:32Managing injects and scenarios
- 22:10Preparing exercise team
- 27:01Monitoring during exercises
- 33:56Post-exercise analysis
- 37:55Automating scenarios with Bastion AI
- 42:42Summary
related talks
26mBuilding PPP Resilience Through National Level Cyber Exercises
32mHow to Orchestrate a Cyber Security Incident Tabletop Exercise
30mShall We Play a Game?
35mThe long road to autonomous cybersecurity
40mAs Worlds Collide: Responding to Cyber Events in a Converged IT/OT Universe
54mSOCcing: Responding to a Cyber Incident
28mThe CISO is Dead, Now What ?
33mDealing With Uncertainty: Scenario Planning for Cybersecurity Decision-Making