Exercise in a Box - Phishing and Ransomware

This is a completely free workshop, and you don’t have to have a technical background to take part!

What is Exercise in a Box?

Exercise in a Box was developed by the National Cyber Security Centre (NCSC) as a self-use tool to help organisations test and practise their internal response to a range of cyber issues in a safe environment.

The online tool helps organisations find out how resilient they are to cyber attacks and practise their response in a safe environment. It recreates real world business scenarios and tests cyber resilience in each scenario.

What will happen at this workshop?

This is a practical workshop where Vertical Structure and Turley Legal will facilitate the scenario of a phishing attack (when attackers attempt to trick users into doing 'the wrong thing', such as clicking a bad link) leading to a ransomware infection, preventing you from accessing your computer (and the data that is stored on it).

Who should take part?

The individual: No technical skills are necessary! This is a great way to engage other areas of your business on cyber threats. The NCSC recommends the following:

• Senior decision makers
• Senior IT stakeholders
• Technical IT security owners
• Media/press/comms
• Company policy owners.

The organisation: Exercise in a Box has been piloted with small and medium enterprises but any private organisation would benefit from taking part.

Why attend?

Companies can walk themselves through NCSC’s tool at any time. But in our experience, we’ve found that many businesses need a bit of help and direction to make the most of this tool. The other benefits in attending include:

• Identify gaps in your "prevent, detect and response" processes and procedures
• Act out your response to a security breach without risk to your business
• Receive objective input into how cyber attacks can happen, from experienced cyber security experts from Vertical Structure and legal professionals from Turley Legal
• Get motivation to continue to address improving incident response process!

Brought to you by

Vertical Structure

Vertical Structure is an independent cyber security consultancy with a ‘human-first’ approach. It specialises in providing human-focused security and penetration testing services for web applications, cloud infrastructure and mobile applications. The team conducts technical security training, and helps companies to achieve certification to international standards including ISO27001, Cyber Essentials and CAIQ.

Turley Legal

Turley Legal is a next generation commercial law firm whose aim is to become a primary partner and resource for their clients, enabling organisations to deliver on their aspirations for both business and personal growth. Turley Legal delivers efficient, practical, cost effective legal services and solutions – every lawyer, every time.

Testimonial

“This was a really practical exercise that gave us the tools to help detect and respond to phishing attacks. It also identified potential vulnerabilities around current back-up solutions and supported us in developing procedures around what to do should a cyber-attack occur.

“Although this can be terrifyingly illuminating, it’s so much better than having to figure it out in a real-life scenario! This was definitely time well spent!”

Mary Nagele, CEO of Arts &Business NI