DAY 1 -- Cyber Resilience: Setting the scene and align with business

- The scope of 'cyber': what to include / what not?
- Get an overview of the aviation-specific regulatory context
- Explore airport-specific cyber threats (What are they? How to discover them?)
- Discover the potential attack surface of your airport
- Gain insight about types and nature of attacks
- Learn how to benefit from cyber insurances
- Identify corporate functions to partner with (ESM/ITSM, GRC, IT-Architecture, ...)
- Gain an overview of a business impact analysis (BIA) and a risk assessment (RA)
- Three-phased approach: What to focus on and when during a BIA (preparation-conduct-analysis)
- Understand deliverables of a BIA: MTPD, RTO, RPO, time-critical process dependencies, single points of failure
- Explore how AI's potential to change the situation in cyber resilience
- Learn where to use automation in cyber resilience
- Setting up cyber resilience roles within an airport organization
- How to conduct a cyber resilience self-assessment
- 7-step action plan to improve cyber resilience
 

DAY 2 -- Tabletop Exercises: Foundation

- Understand about different objectives and adequate exercise types
- Typical scenarios for cyber resilience tabletop exercises (CyTTX)
- Conduct a dry-run on a pre-selected part of your crisis response plan (DR, ...)
- Gamification approach: A brief market overview 
- Opportunities and limits in a software-assisted approach

DAY 3 -- -- Tabletop Exercises: Use CyTTX.Airport to conduct a tabletop exercise

- Craft scenarios for exercises linked to current threats
- Elaborate a playbook for an exercise scenario (with some injects)
- Identify participants and their roles in an exercise
- Run a scenario and de-brief an exercise using CyTTX.Airport