Tier 1 Tabletop Exercise (“TTX”)

• Format: 90-minute virtual session
• Core Services
• Pre-session scoping call using condensed form
• Selection from scenario menu
• One 30-minute scenario review session with Client representatives
• 90-minute facilitated tabletop exercise
• Deliverables
• After-Action Summary Email
• Summarizes key discussion points and decisions made during the exercise
• Highlights observed strengths and gaps in the response process
• Provides high-priority recommendations
• Copy of tabletop exercise presentation

Tier 2 Tabletop Exercise (“TTX”)

• Format: Three-hour virtual session
• Services
• One 60-minute planning and scoping call with designated Client representatives
• One-hour discovery session with key stakeholders
• One 30-minute pre-session scenario review call with Client representatives
• Three-hour facilitated tabletop exercise for a defined stakeholder group (i.e., Technical or Executive/Senior Leadership)
• Deliverables
• After-Action Report (AAR): Written report that includes an executive summary, identified strengths and areas of improvement, and prioritized roadmap for improvements
• One thirty-minute follow-up call to review and answer questions
• Copy of tabletop exercise presentation

Cyber Risk Program – Essential is an annual subscription that is an Independent Cyber Audit based on external, non-invasive continuous monitoring for 12-months to identify, prioritize, and validate cyber risks to an organization’s revenue and reputation.  It leverages cyber risk monitoring for one Entity (e.g., xyz.com) where analytics are performed to provide a non-technical executive overview.  Included in this offering: continuous cyber risk monitoring; Quarterly Cyber Risk Scorecard and Cyber Risk Findings Report that details analysis and vulnerability findings; and 40-hours of SME services to support debrief of results, prioritized, actionable recommendations, and additional analysis as requested.

Cyber Risk Radar:  Automated Supplier/Vendor Risk Assessments – Basic 20 is a 30-day subscription that provides businesses and organizations a topline cyber risk snapshot as an indicator of an organization’s effectiveness at addressing the impacts of online crime and fraud across a portfolio of 20 Companies/Organizations (internet domains). Included in this offering: 30-days of cyber risk monitoring across 20 Entities; Cyber Risk Scorecard, updated daily, for each Entity that provides context and analytics that augment the risk indicators, enabling companies to take action to mitigate cyber risks to their revenue, reputation, and operations; a one-time Cyber Risk Portfolio Report that is based on analytics across the portfolio of Vendors as a whole to provide insights to bolstering resilience; and a 1-hr debrief of results and actionable recommendations.