Incident elapsed time:
Decision required
Immediate consequence
What the organization can observe now
You will work through a developing cyber incident and make decisions as new information becomes available. Your confirmed choices carry forward within the exercise and shape the organizational state presented at later decision points.