Participants were introduced to practical approaches for designing and conducting simulation exercises, including tabletop, cyber range, and red-blue team scenarios covering threats such as ransomware, supply chain attacks, and data breaches. The session also highlighted methods to evaluate readiness, including detection capabilities and response times.

Overall, the seminar provided LAC4 members with practical guidance to strengthen cyber resilience through regular exercises, reinforcing that preparedness, coordination, and continuous improvement are key to effective incident response.

Most important takeaways from the seminar:

• When responding to incidents you are not only bringing the technical approach but also the business approach.
• Simulation exercises are essential to understand the steps attackers follow and to better prepare business to respond effectively to cyberattacks.
• Participating in cyber exercises that simulate cyberattacks provides participants with the opportunity to experience and respond to different scenarios, preparing them to make decisions in various roles and situations during real cyber incidents.
• The idea of cyber rage is to put the static learning into real movement
• The main objectives of cyber exercises are: to improve detection and response capability, validate processes and playbooks, train teams under realistic pressure and to measure readiness not compliance.
• Traditional trainings are no longer enough to be prepared for modern cyber attacks.
• Cyberattacks are becoming increasingly sophisticated, making it essential for organisations to remain better prepared and continuously updated.
• There are different types of exercises: discussion-based tabletop exercises (walking), functional exercises conducted in cyber ranges (running), and full red team–blue team exercises (sprinting).
• In a crisis scenario, you must be able to filter and refine the information you receive, and to prioritise your actions.
• When a cyberattack takes place, it is important not only to communicate accurate information but also to share information that supports effective decision-making.
• Cyber exercises don’t prove you’re secure, they prove how you respond when you’re not.

LAC4 remains committed to supporting its members in strengthening their capabilities to address cyber incidents in a coordinated and mature manner, with well-prepared teams with well-prepared teams and prior preparation through simulation exercises. The seminar was attended by 253 stakeholders and policymakers from LAC4 Participant Nations. It was specifically designed for cybersecurity stakeholders and policymakers from LAC4 member countries, including Antigua and Barbuda, the Bahamas, Chile, Colombia, Costa Rica, the Dominican Republic, Ecuador, El Salvador, Estonia, Guatemala, Honduras, the Netherlands, Panama, Uruguay, RedCLARA, Cyber 4.0: Cyber Competence Center (Italy) and NUMU Group.