EX-RH2021

IF YOU HAVE QUESTIONS OR WANT A QUICK BRIEF ON THE EXERCISE:

We would be happy to invest 10-15 minutes (or longer if/as you have need) to give you any additional insights on the exercise that can support you or your company’s participation. If you desire this at any point before June 10th, simply email to [email protected] or [email protected] (if you like dealing with a live person) with your request and your available time. She will take care of the rest and we’ll promptly be in touch with you at your convenience. Our overview is designed to address what we’ve heard as frequently asked questions, and to anticipate what will best help you as you plan your and your company’s exercise participation. These calls have taken others approximately 15 minutes including our overview and your questions. We are available for longer if/as you have need.

WHAT HAPPENS AFTER YOU FINALIZE REGISTRATION:

RH-ISAC, in partnership with our sector’s trade associations will ensure that you are eligible to participate in the exercise. Upon completion of that brief vetting, you will receive a calendar invitation with instructions for your attendance in the virtual exercise session on June 10th from 12:00 to 5:30 PM. We will be using Zoom, and your invitation will work for YOU only so please ensure that you do not forward or otherwise compromise that invitation. If others need to attend, they must finalize their registration.

WHAT ELSE YOU CAN EXPECT TO RECEIVE FROM RH-ISAC BEFORE THE EXERCISE

In addition to the registration invitation, you will also receive several informational “teaser” emails regarding our exercise. We are working with our partners DHS/CISA, the FBI, the U.S. Secret Service and others to ensure that you receive information that is relevant to the exercise AND guidance that is relevant to your coordination with those entities in real world security matters. During the exercise, they will each play “themselves” and be available for you to connect and coordinate with, but we also thought it might be helpful to give you some additional information about them prior to the exercise to help you in your future planning as well as exercise play. Please take advantage of the exercise and the discussion sessions during our exercise play to get to know these agencies and to familiarize yourself with how they can support you!

WHAT “GAME DAY” WILL LOOK LIKE FOR YOU AS AN EXERCISE PARTICIPANT:

Next to finalizing your registration, THIS is probably the most helpful bit of information in this email.

Thanks to the support and participation of your peers across the sector who have provided our planning team with input and perspective, we have an Exercise Scenario that will appeal to each of you and your retail, hospitality, travel and eCommerce interests and that is built to challenge and inform your key security and business processes.

Our scenario will unfold in three different Modules, each lasting approximately 90 minutes each. Each module will include a session where exercise activities are injected to the group (these occurrences are called, not surprisingly, Injects). This will happen while all participants are in a plenary environment. You can coordinate with others, reach back to your company, emulate decisions and processes that your company would make, and carry forward with decisions and actions as the scenario unfolds. Generally the activities in each module will take 45 minutes to an hour to unravel.

At a certain time within each module, we will conduct a “PauseEx” and break into Breakout Discussion Sessions relevant to the exercise participant’s roles and duties and the events in that particular module. We will walk each breakout group through a series of facilitated discussion questions to unpack what just happened, what was done about it, why, and to explore alternative actions and responses. Upon completion of the breakout sessions, the groups will return to the plenary session and recap the major components identified in each relevant breakout group. Don’t worry…we’ll also be taking a good set of notes to provide you at a later date so that you don’t miss out on anything.

Following each pause and discussion set, we’ll take a brief break (we’re all only human, you know) and then conduct a “ResumeEx” where we will initiate the next exercise scenario module.

Following our last module and breakout discussion session, we’ll return and conduct a brief recap to highlight the key events, occurrences, and responses in order to solidify any immediate lessons learned, best practices, gaps, and key next steps. We call this brief but essential activity a “HotWash”. Because we’ll be at the end of our event at this time, we’ve also scheduled a follow-on hotwash for the following Monday that will allow for more extended discussion and coordination on next steps to support our learning and maturing as a result of the exercise.

IF YOU ARE INTERESTED BUT CAN’T AFFORD TO INVEST THE FULL FIVE HOURS FOR THIS EXERCISE:

Fear not. We have identified a number of key executives who would like but simply can’t afford to participate in all three exercise scenario modules. We highly encourage them to do so when/if possible, but where they just can’t we’ve identified the third module as the “if I can only invest two hours, which two hours should I join” portion of our exercise scenario. To support executive play and participation in the exercise, we have set aside a portion of the break proceeding that third module as both a break for other participants and an opportunity for us to provide an incident summary for participating executive leadership. Again, we strongly recommend full event participation, but reality happens. If all that your executives can invest in this event is those two hours, they should prioritize joining at 3:30 PM ET for our incident summary and engage in full presentation through our 5:30 PM ET ending.

THIS IS A LOT OF INFORMATION…IF YOU ARE AN AUDIO OR VISUAL LEARNER:

• AUDIO LEARNERS: Remember #2…email to [email protected] or [email protected] and we’ll connect with you and give you a brief on the exercise and your participation.
• VISUAL LEARNERS: Here is our planned exercise schedule. Reach out to us per #2 above, and we’ll be happy to walk you through what you need to know (in a video call…):