Tabletop exercises, sometimes called “TTXs,” are dialogue-based sessions to discuss team roles during cybersecurity, disaster, and pandemic scenarios and record bank responses to these emergencies.
TTXs can add immense value to a bank’s risk management practices, including:
- Raising internal awareness of cybersecurity issues.
- Gaining participation outside of the IT department.
- Achieving continual improvement of the institution’s incident readiness and response.
- Verifying the appropriate teams know their roles in case of an actual incident.
- Improving communication and coordination among internal and external teams.
- Displaying to management and the board that a plan is in place, staff members know how to execute it and when to escalate.
- Demonstrating regulatory compliance and preparedness.
When planning a TTX, it is important to compile a complete list of persons who should be involved, including participants from multiple bank areas if possible, and to schedule ample time for proper discussion. A facilitator who should be chosen ahead of time should draft scenarios specifically based on the bank’s operations, including a list of questions to prompt good discussion from all parties involved. A note taker should also be appointed to document discussions and takeaways, such as updating your incident response plan and writing a formal report to share with the board, management, and IT committee.
CCI has experts available to facilitate tabletop exercises at your institution. We will ensure that your exercises hit all critical points and are well-documented to be shared with all interested parties.
Read more about TTXs from the ABA in a recently published article here and please contact us to learn more about CCI’s IT services.