← Back to all workshops
Day 2 · Judge
×

Judge the Defence

Weigh a password, map a control to three standards at once, read a policy for the gap everyone missed, and run an incident from detection to lessons learned.

Day 2 · 2026 08:30 – 15:30 Institute of Banking Studies, Kuwait

Workshop brief

Where Day 1 was about recognising the threat, Day 2 is about judging the defence. You'll test what actually holds — how quickly a weak password falls, why one control can satisfy ISO 27001, NIST and PCI DSS together, where a tidy-looking policy leaves a door open — and finish by running a live incident end to end in a scored tabletop.

Run of show

A guide, not a script — timings flex to the room.

  1. 1
    Session 1 — Open, crack-time meter & password strength08:30
    Watch a weak password fall in seconds and a passphrase outlast the universe, then crack a real hash and see why length wins.
  2. Break10:00
  3. 2
    Session 2 — Standards · Security policy & its gaps10:15
    ISO 27001, NIST and PCI DSS mapped to one control set, then reading a policy the way an auditor does — straight to the gap.
  4. Lunch & prayer11:45
  5. 3
    Session 3 — Incident response, phase by phase12:15
    Detect, contain, eradicate, recover, learn — what each phase actually demands, building toward the capstone.
  6. Break13:45
  7. 4
    Session 4 — The scored tabletop & wrap-up14:00
    A live, scored incident run table-by-table, a debrief on what each team would do differently, and the two-day close.