WEBVTT
00:00:00.080 --> 00:00:01.040
And hello everybody.
00:00:01.120 --> 00:00:02.160
Happy Cyber Sunday.
00:00:02.319 --> 00:00:03.040
Hope you're doing well.
00:00:03.200 --> 00:00:11.599
I think we've all heard the idea that it takes 10,000 hours of practice to be an expert in something.
00:00:11.839 --> 00:00:19.440
Now I've read some places somewhere that have, I don't know, disproven that, but basically just say it's it's a false premise.
00:00:19.679 --> 00:00:22.879
There's different ways of practicing and that kind of thing.
00:00:23.199 --> 00:00:39.280
But in general, the concept is you've even if you don't think that that's exactly right, you you've got to take time and practice to be good at something, no matter what it is, in general, or to be an expert at it anyway, but you you definitely need to practice.
00:00:39.439 --> 00:00:54.320
So that's that concept, that idea immediately came up in my mind when my friend Peter posted on the idea of practicing for tabletop exercises.
00:00:54.479 --> 00:01:11.920
So, yeah, I've talked about tabletop exercises on here uh a lot, but he made a great point that he made an analogy that it looked like if you're playing hockey, or if you're in a, I think he said Philharmonic, you know, like an orchestra, something like that.
00:01:12.079 --> 00:01:27.920
If you're in those, or if you're going to see those, you're going to see a hockey game, or you're going to see an orchestra play and spend the money, the hundreds and you know, possibly thousands of dollars to go see something like that, that you expect it to be really good.
00:01:28.000 --> 00:01:41.599
And you expect it to be good, and usually it's going to be good, typically, especially if you're seeing a profess a professional hockey team or a professional football team or a professional orchestra, because they practice a lot.
00:01:41.840 --> 00:01:43.359
They practice a whole lot.
00:01:43.599 --> 00:01:50.719
And he used that analogy to say, why do we limit ourselves to one to four tabletop exercises per year?
00:01:51.040 --> 00:01:54.000
We have to practice those in order to get good at them.
00:01:54.159 --> 00:01:55.040
And it's a great point.
00:01:55.120 --> 00:01:56.879
You you absolutely do have to practice it.
00:01:56.959 --> 00:02:04.319
Now, I I don't think Peter would say that you have to practice 10,000 hours to be obviously that a little crazy.
00:02:04.480 --> 00:02:16.080
But it what it also brought up in my mind was me being at uh customer a few weeks ago and kind of sitting on the sidelines while I performed a tabletop exercise.
00:02:16.240 --> 00:02:27.919
And I think I've mentioned it on Cyber Sunday before this particular instance, but this tabletop exercise was not limited or was not uh among the like IT and the cybersecurity group.
00:02:28.080 --> 00:02:42.479
And it was it was broader than that at a higher level with business unit leaders from all kinds of different business units, legal and finance, and think it was HR and some other groups in there.
00:02:42.719 --> 00:02:48.800
So the point is that if you're at that level, uh that that's the kind of level of tabletop exercise you're doing.
00:02:49.759 --> 00:02:58.159
It's extremely hard to get them together more than probably a couple times a year to do a half day exercise like they did that way.
00:02:58.240 --> 00:03:06.560
And I I know that actually doesn't sound like a whole lot, but I mean that those people have got a lot of work to do that's not cybersecurity focused.
00:03:06.800 --> 00:03:08.560
They've got to do a lot of other stuff.
00:03:08.800 --> 00:03:13.439
Same way, just if you're just in cybersecurity, you've still got to do your day-to-day job.
00:03:13.680 --> 00:03:24.000
So, how do you do tabletop exercises more than a few times a year when everybody's got other stuff to do, especially if they're not in cybersecurity?
00:03:24.240 --> 00:03:29.919
So somebody made the point down in the comments, and I'll post, I'll put a link to Peter's post in this.
00:03:30.080 --> 00:03:41.840
They made a comment of using tools like Threat Gen, my my buddy Clint, and his uh his company, which I've been involved with a lot, where they do tabletop exercises with a tool.
00:03:41.919 --> 00:03:43.199
And that's a great idea.
00:03:43.280 --> 00:03:57.520
It's the efficiency that you need to build into that process in order to get the practice you need without having to take all of those people into a room multiple times a year and going over that.
00:03:57.680 --> 00:04:00.080
So there's efficiencies you can build in using tools.
00:04:00.159 --> 00:04:07.199
And AI, yes, I said it, everybody drink, has enabled that a lot, and Clint is using that in his tool.
00:04:07.439 --> 00:04:14.159
There's also a matter of just having plans in place that people can review on a regular basis.
00:04:14.479 --> 00:04:18.480
You could tell that that team, that company I was at, they had a pretty good plan.
00:04:18.560 --> 00:04:21.839
There was some gaps in it, and they that's why they were doing it to find that out.
00:04:22.000 --> 00:04:25.759
But getting a plan in place like that is absolutely what you need.
00:04:26.000 --> 00:04:30.160
Does that mean you have to get everybody in the room to practice that plan multiple times a year?
00:04:30.319 --> 00:04:31.439
Maybe, maybe not.
00:04:31.680 --> 00:04:35.839
Can you use tools with that plan in it or have people review that plan?
00:04:36.240 --> 00:04:36.879
Yes.
00:04:37.600 --> 00:04:41.120
Do you need to do the practice to find out where the gaps are in the plan?
00:04:41.439 --> 00:04:42.000
Absolutely.
00:04:42.240 --> 00:04:43.920
100% agree with Peter on that.
00:04:44.000 --> 00:04:57.120
Again, I don't think he would mean you've got to get people together 40 times a year, but you do have to get people together, but you've got to figure out ways of being more efficient with it so everybody in their different roles can keep doing their jobs.
00:04:57.439 --> 00:05:13.360
So think about ways of being efficient with your tabletop exercises, of getting that knowledge in people's head of how the path needs to work, of practicing it, reviewing it, being efficient with it, maybe limiting those things to an hour when you do them if you can do them.
00:05:13.519 --> 00:05:21.360
Those are the kind of things you do, you need to do so you can practice those tabletop exercises, but not be such a heavy burden that nobody wants to do them.
00:05:21.439 --> 00:05:26.399
Because that's what you run into the danger of is like everybody's like, this is too heavy of a burden.
00:05:26.480 --> 00:05:26.959
I can't do it.
00:05:27.120 --> 00:05:27.920
So let me know what you think.
00:05:28.000 --> 00:05:33.360
Give me some other ideas you've got for building efficient tabletop exercises and doing that throughout the year.
00:05:33.600 --> 00:05:34.480
Talk to you next time.
00:00:00.080 --> 00:00:01.040
And hello everybody.
00:00:01.120 --> 00:00:02.160
Happy Cyber Sunday.
00:00:02.319 --> 00:00:03.040
Hope you're doing well.
00:00:03.200 --> 00:00:11.599
I think we've all heard the idea that it takes 10,000 hours of practice to be an expert in something.
00:00:11.839 --> 00:00:19.440
Now I've read some places somewhere that have, I don't know, disproven that, but basically just say it's it's a false premise.
00:00:19.679 --> 00:00:22.879
There's different ways of practicing and that kind of thing.
00:00:23.199 --> 00:00:39.280
But in general, the concept is you've even if you don't think that that's exactly right, you you've got to take time and practice to be good at something, no matter what it is, in general, or to be an expert at it anyway, but you you definitely need to practice.
00:00:39.439 --> 00:00:54.320
So that's that concept, that idea immediately came up in my mind when my friend Peter posted on the idea of practicing for tabletop exercises.
00:00:54.479 --> 00:01:11.920
So, yeah, I've talked about tabletop exercises on here uh a lot, but he made a great point that he made an analogy that it looked like if you're playing hockey, or if you're in a, I think he said Philharmonic, you know, like an orchestra, something like that.
00:01:12.079 --> 00:01:27.920
If you're in those, or if you're going to see those, you're going to see a hockey game, or you're going to see an orchestra play and spend the money, the hundreds and you know, possibly thousands of dollars to go see something like that, that you expect it to be really good.
00:01:28.000 --> 00:01:41.599
And you expect it to be good, and usually it's going to be good, typically, especially if you're seeing a profess a professional hockey team or a professional football team or a professional orchestra, because they practice a lot.
00:01:41.840 --> 00:01:43.359
They practice a whole lot.
00:01:43.599 --> 00:01:50.719
And he used that analogy to say, why do we limit ourselves to one to four tabletop exercises per year?
00:01:51.040 --> 00:01:54.000
We have to practice those in order to get good at them.
00:01:54.159 --> 00:01:55.040
And it's a great point.
00:01:55.120 --> 00:01:56.879
You you absolutely do have to practice it.
00:01:56.959 --> 00:02:04.319
Now, I I don't think Peter would say that you have to practice 10,000 hours to be obviously that a little crazy.
00:02:04.480 --> 00:02:16.080
But it what it also brought up in my mind was me being at uh customer a few weeks ago and kind of sitting on the sidelines while I performed a tabletop exercise.
00:02:16.240 --> 00:02:27.919
And I think I've mentioned it on Cyber Sunday before this particular instance, but this tabletop exercise was not limited or was not uh among the like IT and the cybersecurity group.
00:02:28.080 --> 00:02:42.479
And it was it was broader than that at a higher level with business unit leaders from all kinds of different business units, legal and finance, and think it was HR and some other groups in there.
00:02:42.719 --> 00:02:48.800
So the point is that if you're at that level, uh that that's the kind of level of tabletop exercise you're doing.
00:02:49.759 --> 00:02:58.159
It's extremely hard to get them together more than probably a couple times a year to do a half day exercise like they did that way.
00:02:58.240 --> 00:03:06.560
And I I know that actually doesn't sound like a whole lot, but I mean that those people have got a lot of work to do that's not cybersecurity focused.
00:03:06.800 --> 00:03:08.560
They've got to do a lot of other stuff.
00:03:08.800 --> 00:03:13.439
Same way, just if you're just in cybersecurity, you've still got to do your day-to-day job.
00:03:13.680 --> 00:03:24.000
So, how do you do tabletop exercises more than a few times a year when everybody's got other stuff to do, especially if they're not in cybersecurity?
00:03:24.240 --> 00:03:29.919
So somebody made the point down in the comments, and I'll post, I'll put a link to Peter's post in this.
00:03:30.080 --> 00:03:41.840
They made a comment of using tools like Threat Gen, my my buddy Clint, and his uh his company, which I've been involved with a lot, where they do tabletop exercises with a tool.
00:03:41.919 --> 00:03:43.199
And that's a great idea.
00:03:43.280 --> 00:03:57.520
It's the efficiency that you need to build into that process in order to get the practice you need without having to take all of those people into a room multiple times a year and going over that.
00:03:57.680 --> 00:04:00.080
So there's efficiencies you can build in using tools.
00:04:00.159 --> 00:04:07.199
And AI, yes, I said it, everybody drink, has enabled that a lot, and Clint is using that in his tool.
00:04:07.439 --> 00:04:14.159
There's also a matter of just having plans in place that people can review on a regular basis.
00:04:14.479 --> 00:04:18.480
You could tell that that team, that company I was at, they had a pretty good plan.
00:04:18.560 --> 00:04:21.839
There was some gaps in it, and they that's why they were doing it to find that out.
00:04:22.000 --> 00:04:25.759
But getting a plan in place like that is absolutely what you need.
00:04:26.000 --> 00:04:30.160
Does that mean you have to get everybody in the room to practice that plan multiple times a year?
00:04:30.319 --> 00:04:31.439
Maybe, maybe not.
00:04:31.680 --> 00:04:35.839
Can you use tools with that plan in it or have people review that plan?
00:04:36.240 --> 00:04:36.879
Yes.
00:04:37.600 --> 00:04:41.120
Do you need to do the practice to find out where the gaps are in the plan?
00:04:41.439 --> 00:04:42.000
Absolutely.
00:04:42.240 --> 00:04:43.920
100% agree with Peter on that.
00:04:44.000 --> 00:04:57.120
Again, I don't think he would mean you've got to get people together 40 times a year, but you do have to get people together, but you've got to figure out ways of being more efficient with it so everybody in their different roles can keep doing their jobs.
00:04:57.439 --> 00:05:13.360
So think about ways of being efficient with your tabletop exercises, of getting that knowledge in people's head of how the path needs to work, of practicing it, reviewing it, being efficient with it, maybe limiting those things to an hour when you do them if you can do them.
00:05:13.519 --> 00:05:21.360
Those are the kind of things you do, you need to do so you can practice those tabletop exercises, but not be such a heavy burden that nobody wants to do them.
00:05:21.439 --> 00:05:26.399
Because that's what you run into the danger of is like everybody's like, this is too heavy of a burden.
00:05:26.480 --> 00:05:26.959
I can't do it.
00:05:27.120 --> 00:05:27.920
So let me know what you think.
00:05:28.000 --> 00:05:33.360
Give me some other ideas you've got for building efficient tabletop exercises and doing that throughout the year.
00:05:33.600 --> 00:05:34.480
Talk to you next time.
