Value
Granular Visibility. Obtain ground truth insight on the effectiveness of your insider risk management processes, procedures, and workflows.
Light touch – High value. Gain high visibility of your insider threat and risk management maturity levels in a fraction of the time of a full program assessment.
Immediate ROI and Feedback. Hands-on input from your frontline insider risk practitioners. Real-time understanding of what’s working and what needs to be improved upon.
Client Feedback. Our experience, your value.
“I really, really, really liked this! I’ve been a part of a lot of tabletop exercises, but they’ve all been focused on cyber (incident response and malware). I really liked your approach and model and have a lot of notes and ideas to move our program forward. Thank you!”
Sr. Insider Threat Lead, Fortune 100 – Technology
“Very good exercise, it showed our shortcomings and need for improvement . . . looking forward to the next exercise!”
Lead Engineer, Insider Threat, Fortune 100 – Energy
“This exercise will really help us to be more proactive and focus on preventing things before they occur. Provided a lot of great insight and will also allow us to ask the correct questions when evaluating our detection tools and vendors.”
Insider Threat Program Director, Fortune 500 – Manufacturing
Offering
Design and Build
We will design and build a comprehensive insider threat tabletop exercise tailored to your organizational needs, equities, and requirements. We will work closely with your team to understand your company, processes, procedures, and expectations. Each exercise will leverage our ITMG Insider Threat Playbook™ and include a complete design and build out of the following components:
- Use cases
- Scenarios
- Injects
- Key Capability Factors (KCFs)
- Key Risk Indicators (KRIs)
- Key Performance Indicators (KPIs)
- Objectives
- Outcomes
Organize and Facilitate
Our insider threat experts will organize your exercise by helping you identify the necessary participants, develop exercise collateral (scenario packets, input forms, data collection protocols, etc.), and plan an exercise schedule. Our experts are also available to facilitate the implementation of the exercise itself. We will serve as the lead Facilitator and be responsible for leading the discussions and keeping participants focused on exercise objectives and ensuring all KCFs, KRIs, and KPIs are explored in a time efficient manner.
Aggregate, Brief, and Report
We can also serve as primary Data Collectors and prepare an After-Action Report (AAR) that will provide a comprehensive overview of the exercise, describe best practices and strengths observed, and identify maturity levels of KCFs and KRIs as well as capture KPI performance and areas for improvement. The AAR will also include the identification of gaps, assigning maturity levels to each key indicator and capability, and the development of granular recommendations to improve the posture of each identified gap.
Contact ITMG to Build, Facilitate, and Implement Your Insider Threat Tabletop Exercise
ITMG is a pioneer in building insider threat tabletop exercises and an industry leader in helping organizations throughout the United States strengthen their insider risk management programs and securing sensitive data and intellectual property. Our team of bona fide experts has the real-world experience necessary to plan out and create holistic tabletop exercises tailored to the special needs and risks in your industry. Contact ITMG today to learn more about how we can help or submit an RFP to explore an engagement!