ABSTRACT
In addition to regularly performing penetration and validation tests against critical infrastructure, it is often a good idea for organizations (both public and private sector) to plan for real-life scenarios involving either partial or totally complete infrastructure operations failures. Thus, many organizations are now implementing either “tabletop” or “red-blue team” exercises. Executing either or both of these exercises helps the organization identify any weaknesses or gaps in their procedural steps, training, or staff development, as well as their incident command response handling processes.
