WiCyS SANS Introductory Cyber Crisis Exercise (Virtual)
The SANS Introductory Cyber Crisis Exercise helps organizations strenghten their cyber resilience. Skilled facilitators use real-world experiences to improve cyber crisis response plans and evaluate organizational preparedness.
WiCyS SANS Introductory Cyber Crisis Exercise (Virtual)
The 90 minute SANS Introductory Cyber Crisis Exercise (Virtual) places participants in a realistic, facilitated cyber incident where they will work alongside peers from multiple organizations to navigate complex business, operational, legal, technical, and communications challenges. The exercise is designed to strengthen executive decision-making, validate response plans, and reinforce the importance of cross-functional collaboration before a real-world incident occurs.
This interactive exercise highlights that cybersecurity is not solely a technical challenge it is an enterprise-wide business risk requiring coordinated action across executive leadership and key business functions.
By participating in this program, attendees will have the opportunity to:
- Experience the challenges of leading an organization through a simulated cyber crisis.
- Pressure-test crisis management and incident response plans.
- Practice executive decision-making under time pressure.
- Apply industry best practices for cyber incident response, governance, and crisis communications.
- Evaluate organizational preparedness and identify opportunities for improvement.
- Collaborate with peers from multiple organizations to share perspectives and leading practices.
- Strengthen relationships with fellow industry professionals through a collaborative learning environment.
- Earn 2 CPE credits if they attend the entire session.
Requirements:
- Applicants for this program must hold organizational leadership roles such as:
– Board of Directors
– Business Executives
– C-Suite Leaders: CEO, CIO, CISO, CFO, CLO, CMO, etc.
– Division or Departmental Managers
– Technical Subject Matter Experts - Ability to participate for the 90 minute exercise in a distraction-free virtual setting.
What to Expect:
Participants will work through an evolving cyber incident, making strategic decisions as new information becomes available. Throughout the exercise, facilitators will introduce realistic scenario updates (“injects”) that challenge participants to balance business continuity, regulatory obligations, communications, legal considerations, technical response, and executive leadership responsibilities.
The exercise is fun, collaborative, discussion-based, and designed to provide practical lessons that organizations can immediately apply to strengthen their cyber resilience.
Important:
Please note that once applications close for this program, SANS facilitators will review all submissions. All applicants will be notified of their status by the date listed in the event timeline.
SANS Introductory Cyber Crisis Exercise (Virtual)
August 25: Applications open
September 15: Applications close 4 pm CT
Seprember 22 – 24: Acceptance notifications and commitment form will be emailed
September 29: Deadline to complete commitment forms
October 1: Microsoft Teams virtual invitation and digital badges emailed to participants
October 7: SANS Introductory Cyber Crisis Exercise takes place
October 7: Post-exercise surveys emailed to participants

Testimonials from Executive Leaders
“It is helpful to have a holistic view of an organizational posture with regard to this kind of activity. It brings to light different areas that may need to be taken into consideration.” – Chief Operating Officer
“I have conducted our company’s annual BCP/DR tests for the past 4 years and am getting ready to conduct this year’s annual exercise. The exercise gave me many things to consider in designing the exercise and in reviewing existing policies and processes.” – Risk and Compliance Manager
“It was a great opportunity to work through a scenario in a controlled environment and make sure that I am considering all the various aspects of a crisis situation in my planning.” – Senior Level Officer
Good training for board members, executive leadership, and senior leadership teams. – CEO