// securidigm rehearsal · drills and tabletop exercises · included for clients
Pick your kind of operation, a topic and how hard it should be. Rehearsal builds a complete drill or tabletop exercise around your own people, systems and site: the story, the timed events to hand out, questions for each role, a script for the person running it, and the after-action report with fixes, owners and dates. It runs in any web browser, with nothing to install and no internet connection needed.
For port facilities and vessels, pipelines, freight rail, passenger rail and transit, trucking and bus companies, and offices.
// what’s inside
The layout follows FEMA’s Homeland Security Exercise and Evaluation Program (HSEEP), the structure exercise planners and regulators already know.
Ransomware that reaches operations, vendor remote access misused, GPS and timing interference, a lost or stolen laptop, payment fraud by email and more, each with a full story in three parts and 512 timed events across the library.
Quick drills that test one part of your plan, each with its purpose, setup and what to record.
Office, port facility, vessel, pipeline, freight rail, passenger rail and transit, trucking and bus, each with its own roles, systems and words.
Situation manual, event list, facilitator script, evaluation guide, feedback form, after-action report and improvement plan. Nothing is hidden in collapsed sections when printed.
A guided setup, a clock for the person running the exercise, and twists to raise the difficulty when the team is ahead.
Drill and exercise records with date, participants and lessons, a calendar of what is due this year, and records kept encrypted behind a password.
// the rules it helps with
Coast Guard, 33 CFR 101.635(b)(1) (eCFR)
The CySO must ensure that cybersecurity drills are conducted at least twice each calendar year.
Helps you show: drills that each test a different part of your plan, spread through the year, with the record the Coast Guard expects.
Coast Guard, 33 CFR 101.635(c)(4)
Each exercise must test communication and notification procedures and elements of coordination, resource availability, and response.
Helps you show: Rehearsal checks that every exercise you build covers all four elements, and that your cybersecurity officer takes an active part.
TSA Security Directive Pipeline-2021-02G, section III.F.1.e
These exercises must test at least two objectives of the plan required by subparagraphs F.1.a. through F.1.d., and include the employees identified (by position) in paragraph F.2 as active participants.
Helps you show: the yearly exercise of your incident response plan, with the plan objectives it tested and the people who took part. Rail and transit (SD 1580-21-01E and 1582-21-01E) are covered the same way.
NIST Cybersecurity Framework 2.0, ID.IM-02
Improvements are identified from security tests and exercises, including those done in coordination with suppliers and relevant third parties.
Helps you show: for offices and trucking, the improvements each exercise found, with owners and dates, for Baseline and for your insurer.
Plain limit. Rehearsal gives evidence for your drills and exercises; it does not show that a requirement is met. Real incidents appear only with a public source; otherwise the scenarios are fictional. Nothing here is legal advice.
// screens
Screens show a made-up company, Harborview Marine Terminal.
// how clients get it
Rehearsal isn’t sold on its own. It comes with Harbor (Coast Guard), Signal (TSA pipeline and rail) and Baseline (small businesses), and with Securidigm’s managed services, for every site you have.
Rehearsal is a single file you open in a web browser. No install, no account, no internet connection needed after it arrives.
New topics and events arrive as signed library files, so you can tell they really came from Securidigm.
Written help comes with Rehearsal. Having Securidigm plan and run an exercise with you is part of the managed service packages.