Level 1: Sprint 3, Track C
Exercise: Technology Simulation
Instructions
A scenario will be provided to the Incident Commanders.
This is a simulation. You do NOT need to refer to real life logs or other data sources.
DELIVERABLES: Depending on the exercise, your instructor may ask you to prepare the deliverables outlined here:
- Identify SEV or P level for the incident.
- Create a list of SMEs, vendors, executives, etc. that would be dispatched to the incident.
- Draw an org chart depicting all the incident responders identified above.
- Draft an overall Mission Objective for the response.
- Draft a CAN report for the primary resolution plan A and Plan B.
- Identify any unique aspects or challenges of the response that may pose a challenge to the resolution effort.
- List the cadence and potential audiences for any briefings that need to occur outside the resolution effort.
Breakout Room
Incident Commander (IC)
- Appoint key positions.
- Brief the group on the scenario (CAN).
- Delegate and set time contracts.
- Drive the group toward resolution.
- Deliver an additional CAN report part way through the session.
Liaison Officer (LNO)
- Keep your own notes so you can deliver briefings when asked.
- Return to the main room when summoned to provide a CAN report to Unified Command.
- Review Scribe notes or request an update from IC to stay apprised of what happened while you were off the bridge.
Scribe
- Capture details and key events, documenting the incident.
- Screen share your document throughout the exercise.
SMEs
- Confirm tasks received
- Report back to the IC on the tasks you are assigned.
- Make up any missing details. You do NOT need to access real life data sources.
- Support the incident resolution effort.
Main Room
IC
Use the format of your choice to deliver a briefing, outlining your group’s progress toward resolution.
LNO
Use the IMS briefing format to deliver a briefing about the middle or end of this incident.
Scribe
Screen share your Scribe notes for discussion purposes. Be prepared to submit your document upon request.