How to Run a Tabletop Exercise for Incident Response with Matt Lee

In this episode, host Steve Taylor and guest Matt Lee dive into the critical process of building and executing effective incident response plans in the MSP industry. They emphasize the importance of readiness and preparation, highlighting the value of conducting tabletop exercises to simulate and practice incident response scenarios.
Key Takeaways
• The importance of clear incident response plans and cybersecurity awareness training within organizations
• Conducting tabletop exercises to identify areas for improvement and potential upselling opportunities with clients
• The value of using generative AI to create tabletop scenarios for simulating cyberattacks and improving response capabilities
• The significance of developing incident response plans and fostering readiness in the MSP industry
• Not striving for perfection but focusing on iteration and continuous improvement in incident response planning
Timestamps and Topics
[00:23] Importance of Incident Response Plans
[08:45] Value of Tabletop Exercises
[17:12] Utilizing Generative AI for Simulations
[27:39] Challenges and Importance of Iteration
[34:56] Billing and Client Protection
[42:18] Changing Operational Layout
[48:10] Learning Through Simulations
[54:32] DHS Alerts and Tabletop Materials
[01:05:17] Engaging Employees & Testing Components
[01:12:05] Building Incident Response Plan