NIS2 · ISO 27001 · DORA · TISAX
Rehearse a serious incident in 30 minutes.
The report for your audit is written as you go.
You pick an attack scenario, and your team makes the decisions in the browser. At the end there is a report with roles, decisions and timestamps that you can hand to the auditor. You do not need an external facilitator.
The demo is free of obligation. The exercises follow the ENISA exercise methodology.
Why SecDrills
Evidence an auditor can read
NIS2 Art. 21 requires regular testing. The report shows when the exercise took place, who took part and how the team decided. It also serves as evidence for ISO 27001, DORA and TISAX.
30 minutes are enough to start
Pick a scenario, send a link, play it through. Everyone sees the same situation at the same time, and you talk as usual in Teams or Google Meet. After the last decision you download the report.
Not an IT project
SecDrills runs in the browser, on tablets too. Nothing is installed, and SecDrills needs no access to your systems. Hosting is in the EU, in a Frankfurt data centre.
Four scenarios from the catalogue
The production systems are encrypted and a ransom demand has arrived. Who decides, who reports?
A tampered update from your supplier brings malicious code into the company. How do you contain the damage?
A payment instruction in the name of the managing director. Do your controls hold?
After a phishing wave, customer data has leaked. Who has to be informed, and by when?
Request a demo
In the demo we play through a scenario with you and show you the finished report. Then you can judge for yourself whether it is enough for your next audit. We get back to you within two working days.