Running DRP Tabletop Exercises
summary
A college IT group runs collaborative tabletop exercises in Feb–Mar 2024 with a 15-person team, walking three scenarios: VM hypervisor compromise, a web host breach affecting 136 websites, and physical data center loss. Exercises reveal a single node compromise can corrupt storage and expire backups forcing a rebuild from zero with no backups, missing build guides, and inconsistent DR plans. Outcomes: standardized template, annual cadence, updated plans and build guides, disk encryption, VM affinity rules, facilitator training, and survey scores improving from 4.3 to 4.71.
AI-written summary · about
chapters (14)
- 0:00Introduction
- 3:50University scope
- 8:08Problems in DR plans
- 13:55DR plan components
- 18:08Tabletop exercise purpose
- 21:03Exercise scenarios
- 23:52Key takeaways
- 24:16Measuring success
- 28:57Future improvements
- 30:01Next steps
- 33:53Long-term strategy
- 34:58Plan considerations
- 36:45Resources
- 37:29Q&A
related talks
45mLet's play a real life Dungeon and Dragons
40mBecoming a Gamemaster: Designing IT Emergency Operations and Drills
33mGames We Play to Improve Incident Response Effectiveness
35mHow We Organize Large-Scale DDoS Exercises in the Netherlands
47mBuilding Resilience
05mDisaster Recovery and Contingency Planning for Platforms
46mGames We Play to Improve on Incident Response
14mDisaster Recovery preparedness