Cybersecurity incident response personnel participate in joint cybersecurity exercises with other organisations
Context and Guidance: If possible, incident response personnel should participate in joint cybersecurity exercises to become familiar with the entities and individuals they would need to work with in a real-world incident, gain experience in response activities, possibly identify deficiencies in internal response plans, and share their knowledge and experience with others in the community. One example of a joint exercise in the Electric Sector is the Grid Security Exercise (GridEx), the Department of Energy’s annual two-day exercise.
Related Practices • Progression: This practice is part of a practice progression. Practice progressions are groups of related practices that represent increasingly complete or more advanced implementations of an activity. The practices in this progression include: RESPONSE-3g, RESPONSE-3k.