Find out who freezes, before the morning it matters
A facilitated walk-through of a real incident, to find out who freezes, who does not know the number, and whether the backup actually restores.
$1,400 per exercise. Prices in Australian dollars, excluding GST.
Three questions that never get answered until the day
Who decides?
At 7am on a Saturday, with systems encrypted and a supplier waiting on payment, somebody has to make a call. Most businesses discover who that is during the incident.
Who do you ring?
Insurer, bank, IT provider, lawyer, staff, customers. In what order, and does anyone have the number that is not in the email account you have just lost access to?
Does the backup restore?
"We have backups" and "we restored 40GB in six hours last Tuesday" are different sentences. Only one of them is a control.
-
01
A scenario built for your business
Ransomware on a Friday afternoon, or a fraudulent payment already out the door. Your systems, your suppliers, your people — a generic scenario gets generic answers.
-
02
Information arrives in stages
You do not get the full picture at the start, because you never do. Decisions get made on incomplete information, which is the entire skill being practised.
-
03
The hot wash, in the room
Findings are captured while everyone still remembers what they were thinking. This is the most valuable part and it always runs over — the time is booked for it.
-
04
A written findings report
What worked, what did not, what to fix, in priority order. About systems and decisions, never about individuals.
The session is recorded so that facilitating and capturing can both be done properly. That consent is written into the engagement letter and stated aloud before the exercise starts. If anyone in the room is not comfortable being recorded, say so and we work another way.
This is a discussion-based exercise around a table. It is not a technical attack simulation and it is not a red-team engagement. Nothing is executed against your systems, no phishing email is sent to your staff, and nothing is installed anywhere.
Technical simulation is not offered by IN‑SEC. If that is what you are being asked for, it is a different piece of work and we will say so rather than stretch this one to fit.
Two hours, and nobody has to be embarrassed
The rule at the start is that findings are about systems, never about people. It is said out loud, and it is meant. Twenty minutes on a call will tell you whether your team is ready for one of these.