Laserfiche WebLink
<br />©2025 Lumifi Cyber, Inc. All rights reserved. <br />PRIVATE - Controlled by Lumifi Cyber <br /> <br />12/19 <br />PRIVATE - Controlled by Lumifi Cyber <br />Prepare and Plan <br />The Kickoff Meeting will serve as the forum for initial TTE planning and exchange of <br />information. Fourteen example scenarios are presented in the CyberRX ranging in <br />complexity from one to three stars (levels of complexity, 3 being the most complex) <br />and a subset of those chosen to be used in the first TTE. <br />After review of the collected information and documentation, the Lead Consultant will <br />adjust the plan and communicate those adjustments back to Kittitas County. Kittitas <br />County will approve the final TTE plan no less than five (5) business days prior to the <br />scheduled TTE. Additional adjustments, or adjustments requested within five (5) <br />business days prior to the scheduled TTE may affect the price and schedule <br />commitments. Approximately 48 hours prior to the TTE, a short, final pre -TTE <br />conference call will be conducted to ensure any final details have been addressed. <br />Conduct Exercise <br />The Lead Consultant will conduct the formal onsite TTE and document the strengths <br />and weaknesses of the Kittitas County IR plan, process and policy. The areas <br />measured in a TTE are referred to in the CyberRX as the 10 Markers. The following <br />ten markers are typical industry practices and are key activities, policies, or products <br />to strengthen an organization’s cybersecuri ty capabilities: <br />1. Governance/People <br />2. Incident Response Policy and/or Guidelines <br />3. Internal Communications and Escalation <br />4. Training <br />5. Information Sharing <br />6. Vulnerability & Threat Management <br />7. Asset Management and <br />8. Vendor assessment <br />9. Lessons Learned <br />10. Updating plans and policies <br />Lessons Learned <br />Lumifi Cyber will create a TTE report with a Table of Findings and Recommendations <br />built around the Ten Markers and will form the basis of the Lessons Learned phase <br />and will include the remediation activities for Kittitas County to consider for the <br />Improve Cybersecurity Program phase. Kittitas County will be given an opportunity <br />to review the report before a final draft is delivered. Requested revisions will be