Crisis readiness
you can
prove.
Has your leadership team ever played through a cyber attack under time pressure? Who reports to the authority, who talks to customers, who decides whether the systems go offline? NIS2 holds the management body responsible for this (Art. 20).
Request a demo →A short exercise takes 30 minutes. The process follows the ENISA exercise methodology, and the report serves as evidence towards auditors and supervisors.
What lands on your desk immediately in a real incident
Reporting obligation
Under NIS2 Art. 23, an early warning must reach the authority within 24 hours. Do you know who triggers it in your organisation?
Communication
Customers, media and the authority all want to know what is going on at the same time. Who speaks for the company, what is said, and when?
Business interruption
Shut systems down or keep them running? Pay the ransom or not? Decisions like these should not be taken for the first time in a real incident.
What your leadership team plays through in the exercise
An example from a ransomware scenario. Every decision is recorded with a timestamp and ends up in the report you can hand to the auditor.
The SOC reports suspicious activity in the network. The signs of ransomware are confirmed.
The CISO is informed and forms a first picture: which systems are affected, how big is the damage?
CEO, CFO, CIO, legal and communications come together in the crisis team.
The 24-hour deadline is running. Who reports, what goes into the report, and which authority receives it?
Isolate systems, inform customers, answer press enquiries, all at the same time.
Let us talk in person
We get back to you within two working days. The conversation is about your questions: which obligations apply to your organisation, what the auditor wants to see and whether an exercise with SecDrills fits. For your IT department: SecDrills runs in the browser, needs no access to your systems and is hosted in the EU.