Incident Drill Defensibility

An expert-level blue-team operations course on designing, running and evidencing incident drills so that they genuinely improve response and let the organisation answer a regulator's question, 'prove your response capability works'. Work across the Drill Evidence Board - eight rows, one per chapter, against six evidence columns: what the regulator asks to see; measurable objectives and the drill type that tests them; realistic injects and a drill control team; observers and structured logs; response times, decision quality and communication; graded, owned after-action findings; actions closed and re-tested; and board participation, the annual programme and a re-performable evidence pack.

What you'll learn

• Inventory past drills against a supervisory request, frame expectations with Compliance and Legal, and record gaps honestly in an owned register.
• Write measurable drill objectives, sign success criteria in bands before the drill, and choose the drill type by the evidence each objective needs.
• Write injects from the responder's seat, ground scenarios in the organisation's own history, separate the control team, and plan benign technical drills.
• Brief independent observers, log events on a drill clock against objectives, mark reconstructions, and seal the evidence bundle.

Sign in to enrol — you can pay by bKash or Nagad, or apply a promo code.