
309
15
Tabletop/Red – Blue
Exercises
Robert Radvanovsky
In addition to regularly performing penetration and validation tests against critical
infrastructure, it is often a good idea for organizations (both public and privately
sectored) to plan for real-life scenarios involving either partial or totally complete
infrastructure operations failures. Thus, many organizations are now implementing
either “tabletop” or “red–blue team” exercises. Executing these exercises (eitherone,
or both) helps the organization identify any weaknesses or gaps in their procedural
steps, training, staff development, as well as incident command response handling
processes. ...