• What questions you should ask to determine if you need to conduct a cyber exercise
• Who should be involved in the exercise
• What is the appropriate mix of actual recovery vs. tabletop
• How to plan – but not over plan – the exercise
• How to determine the appropriate scope for the exercise
• How to manage the exercise
• What you should do with the results