Proposal for Conducting Cyber Crisis Drill, Tabletop Exercise (TTEx) & CCMP Readiness Exercise

The420.in Staff
2 Min Read

In view of the increasing frequency and sophistication of cyberattacks on the banking sector and the regulatory emphasis on cyber resilience, Algoritha Security Pvt. Ltd. proposes to conduct a comprehensive Cyber Crisis Drill and Executive Tabletop Exercise (TTEx) for your Bank, along with review, development and operational testing of the Cyber Crisis Management Plan (CCMP).

The exercise can be customised to the Bank’s technology and business environment and may cover:

  • Cyber Crisis Drill: Realistic simulation of ransomware, data breach, Active Directory compromise, payment/CBS disruption, cloud compromise, insider threat or third-party cyberattack.
  • Executive TTEx: Scenario-based crisis decision-making involving Senior Management, CISO/SOC, IT, Risk, Compliance, Legal, Operations, BCP/DR and Communications teams.
  • CCMP Review & Development: Review/update of the Bank’s CCMP covering crisis activation, roles and responsibilities, incident classification, escalation matrix, regulatory reporting, crisis communication, BCP/DR, third-party coordination and recovery.
  • Regulatory Compliance Mapping: Exercise and documentation aligned, as applicable, with RBI IT Governance, Risk, Controls & Assurance Practices Directions, CERT-In requirements, NABARD/NPCI/NCIIPC requirements and other applicable regulatory mandates.
  • Post-Exercise Assessment: Cyber Crisis Readiness Scorecard, gap analysis, After-Action Report and prioritised remediation roadmap.

The exercise will be followed by a post-exercise assessment comprising a Cyber Crisis Readiness Scorecard, gap analysis, After-Action Report, and a prioritised remediation roadmap. The objective is to help the Bank move beyond documentation-based compliance and practically validate its ability to detect, escalate, contain, communicate, report, and recover from a major cyber crisis. Algoritha Security Pvt. Ltd. would be pleased to make a brief presentation and customise the scope, scenario, and exercise methodology according to the Bank’s requirements. For further details, please contact triveni@algoritha.in.

Stay Connected