ABSTRACT
In addition to regularly performing penetration and validation tests against critical infrastructure, it is often a good idea for organizations (both public and privately sectored) to plan for real-life scenarios involving either partial or totally complete infrastructure operations failures. Thus, many organizations are now implementing either “tabletop” or “red-blue team” exercises. Executing these exercises (either one, or both) helps the organization identify any weaknesses or gaps in their procedural steps, training, staff development, as well as incident command response handling processes.
