{"id":28545,"date":"2026-07-15T12:41:41","date_gmt":"2026-07-15T12:41:41","guid":{"rendered":"https:\/\/www.stroople.com\/?page_id=28545"},"modified":"2026-07-24T15:26:49","modified_gmt":"2026-07-24T15:26:49","slug":"formation-dexercice-de-cybercrise","status":"publish","type":"page","link":"https:\/\/www.stroople.com\/fr\/cyber-crisis-exercise-training\/","title":{"rendered":"Exercice de Cybercrise : Formation immersive pour le COMEX et DSI"},"content":{"rendered":"\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t
\n\t\t\t
<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

BCR-01<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t

\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Cyber Crisis Exercise: Immersive Training for COMEX and CIO<\/h1>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t
\n\t\t\t
<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\n\t\t
\n
\n <\/i> <\/div>\n \n
\n\t\t\t\t
\n\t\t\t\t\t\t 1<\/span>\n\t\t\t\t\t\t\t\t\t<\/div>\n <\/span>\n

day(s)<\/h2> <\/div>\n <\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\n\t\t
\n
\n <\/i> <\/div>\n \n
\n\t\t\t\t
\n\t\t\t\t\t\t In House<\/span>\n\t\t\t\t\t\t\t\t\t<\/div>\n <\/span>\n

<\/h2> <\/div>\n <\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\n\t\t
\n
\n <\/i> <\/div>\n \n
\n\t\t\t\t
\n\t\t\t\t\t\t On-site <\/span>\n\t\t\t\t\t\t\t\t\t<\/div>\n <\/span>\n

<\/h2> <\/div>\n <\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\n\t\t
\n
\n <\/i> <\/div>\n \n
\n\t\t\t\t
\n\t\t\t\t\t\t Training center<\/span>\n\t\t\t\t\t\t\t\t\t<\/div>\n <\/span>\n

Paris<\/h2> <\/div>\n <\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\n\t\t
\n
\n <\/i> <\/div>\n \n
\n\t\t\t\t
\n\t\t\t\t\t\t Audience<\/span>\n\t\t\t\t\t\t\t\t\t<\/div>\n <\/span>\n

Decision-makers<\/h2> <\/div>\n <\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\n\t\t
\n
\n <\/i> <\/div>\n \n
\n\t\t\t\t
\n\t\t\t\t\t\t Fee<\/span>\n\t\t\t\t\t\t\t\t\t<\/div>\n <\/span>\n

On request<\/h2> <\/div>\n <\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t
\n\t\t\t
<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

PRESENTATION & TARGET AUDIENCE<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

This training is designed for Executive Committee (COMEX) members and members of the IT Department (CIO office). It enables strategic decision-makers and operational leaders to share a common culture of cyber crisis management and to clarify each person’s role in a crisis situation. No prior technical expertise is required, as the training is designed for executives and managers.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t
\n\t\t\t\t\t

PREREQUISITES \n<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

No technical or theoretical prerequisites are needed to attend this training.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t
\n\t\t\t\t\t

LEARNING OBJECTIVES<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

The overall educational objective of this training is to experience, through simulation, the mechanisms and impacts of a cyber crisis, in order to draw the lessons needed to strengthen the organization’s crisis management process.<\/p>

This training prioritizes learning by doing: most of the time is dedicated to a full-scale cyber crisis management exercise, followed by a collective effort to analyze and improve the existing framework. Theoretical content is deliberately kept concise, both upstream (framing) and downstream (structuring the action plan).<\/p>

By the end of this training, participants will be able to:<\/p>

  • Identify the main attack vectors that can trigger a cyber crisis;<\/li>
  • Apply the principles of crisis unit management by taking on their actual decision-making role (strategic for the COMEX, technical and operational for the IT Department);<\/li>
  • Analyze, based on the lived experience of the exercise, the strengths and weaknesses of the crisis management process currently in place in their organization;<\/li>
  • Assess the impacts (business, financial, reputational, legal) that a comparable scenario would have generated in a real-world context;<\/li>
  • Build a concrete action plan to improve their cyber crisis management process (governance, tools, roles, procedures).<\/li><\/ul>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
    \n\t\t\t\t
    \n\t\t\t\t\t

    TRAINING METHODS<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
    \n\t\t\t\t
    \n\t\t\t\t\t\t\t\t\t

    This training is built above all on lived experience: an immersive cyber crisis management exercise, based on a realistic and evolving scenario, forms the core of the day. An initial framing session establishes the essential vocabulary and reference points; a collaborative lessons-learned workshop (after-action review), at the end of the day and 3 months later, enables participants to turn the practical exercise into concrete lessons that are directly applicable to their own crisis management process.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

    \n\t\t\t\t
    \n\t\t\t\t\t

    ASSESSMENT METHOD<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
    \n\t\t\t\t
    \n\t\t\t\t\t\t\t\t\t

    Effective mastery of all the learning objectives will be verified through a quiz (summative assessment).<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

    \n\t\t\t\t
    \n\t\t\t\t\t

    PROGRAMME<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
    \n\t\t\t\t
    \n\t\t\t\t\t\t\t\t\t

    Sequence I. Cyber crisis: a full-scale simulation exercise<\/strong><\/p>

    • Presentation of the scenario, roles and rules of engagement (COMEX in the strategic crisis unit, IT Department in the operational crisis unit)<\/li>
    • Running the exercise: escalation of the attack, successive injects, decisions to be made under time pressure<\/li>
    • Exposure to the real impacts of a cyber crisis: loss of resources, media pressure, uncertainty, business versus technical trade-offs<\/li>
    • Coordination between strategic steering (COMEX) and technical response (IT Department) under pressure<\/li><\/ul>

      Sequence II. Turning the exercise experience into improvements to the crisis management process<\/strong><\/p>

      • “Hot” debriefing: what happened, what was difficult, what was missing<\/li>
      • Collective analysis of the observed impacts (business, financial, reputational, legal) and what they reveal about current vulnerabilities<\/li>
      • Comparison between the crisis framework mobilized during the exercise and the process actually in place within the organization<\/li>
      • Collaborative workshop: identification and prioritization of areas for improvement in the crisis management process<\/li>
      • Construction of a concrete action plan (governance, roles, tools, upcoming drills) to be presented to the COMEX<\/li><\/ul>

        Sequence III. “Cold” debriefing: consolidating the action plan (at 3 months)<\/strong><\/p>

        • Additional collection of observations from participants<\/li>
        • In-depth analysis across key themes: crisis governance and processes, communication, decision-making and action tracking, technical and operational capabilities, interactions between teams and with external stakeholders<\/li>
        • Drafting of a structured summary: findings, strengths to maintain, areas for improvement<\/li>
        • Presentation of the consolidated and prioritized action plan to the COMEX, with milestones, owners and deadlines<\/li>
        • Definition of the upcoming training plan (frequency, increasing scenario complexity, extended scope)<\/li><\/ul>

          Updated on 3 July 2026<\/strong><\/em><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t

          \n\t\t\t
          \n\t\t\t\t\t\t
          \n\t\t\t\t
          \n\t\t\t\t\t\n\t\t\n\t\t
          \n\n\t\t\t

          Training Center<\/h2>\n\t\t\t\t\t\t\t
          \n\t\t\t\t\t

          PARIS
          \n\n\n121 rue d'Aguesseau (centre d'affaires Emergence)
          \n 92 100 Boulogne Billancourt
          \n
          \nRegistered under number: 11922630392.<\/p>\n\t\t\t\t<\/div>\n\t\t\t\n\t\t\t\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

          \n\t\t\t\t
          \n\t\t\t\t\t