Cyberpractice: Creating and Conducting Cybersecurity Exercises for the Organization: Cybersecurity Best Practices

This guide presents the principles and rules for planning, creating, and conducting cybersecurity exercises, and the process of learning lessons from them. The document also discusses annual and multi-year exercise programs, intended to be used by organizations in their overall effort to maintain, preserve, and promote their cyberresilience. The guide is divided into two sections: the first describes the conceptual basis, while the second focuses on selected issues, helping put theory into practice. This publication is part of the "Cybersecurity Best Practices" collection, a compendium of practices, methodologies and recommendations in cybersecurity oriented to organizations, developed by the Israel National Cyber Directorate (INCD), and adapted in this series by the Inter-American Development Bank (IDB), with the objective of facilitating access to this body of knowledge throughout the Latin American and Caribbean region.