Cybersecurity Incident Response  -Tabletop Exercise (TTX)

Read Presentation Here

As her final assignment for her Fall 2024 Cybersecurity Law and Policy course at GWU, Fehintola participated in a Cybersecurity Incident Response Tabletop Exercise (TTX) designed to simulate a real-world cyber crisis scenario involving a fictional conflict between two countries, Calorman and Narnia. In this exercise, she represented the Cybersecurity and Infrastructure Security Agency (CISA) as the Head of the Cybersecurity Division. Her role was crucial in advising and coordinating with Company Y, a global social media platform headquartered in Narnia's capital, Cair Paravel, to navigate and mitigate cybersecurity threats amidst escalating geopolitical tensions. Throughout the TTX, her group explored the intricacies of incident response, inter-agency collaboration, and strategic decision-making under pressure. At the conclusion of the exercise, Fehintola and her classmates presented the "After Action Report — The Calorman-Narnia Incident" to a hypothetical new incoming CEO and Chief of Staff of Company Y. This presentation detailed a comprehensive review of the incident, including a timeline of events, lessons learned, proposed enhancements for security, and highlighted the critical need for early and sustained involvement of CISA. Special emphasis was placed on the slides titled "How Company Y Should Have Included CISA" and "Resources CISA Could Have Provided," underscoring the missed opportunities for early threat intelligence sharing and the potential benefits of leveraging CISA's cybersecurity frameworks and risk assessment tools to better prepare and protect the company during such crises.

Strengthening Corporate Defense Against Insider Threat - Final Paper

Read Paper Here

As a part of the Fall 2024 Information Systems Protection course for her Master of Professional Studies in Cybersecurity Strategy & Information Management program at GWU, Fehintola Bright wrote a 50-page research paper, titled "Strengthening Corporate Defense Against Insider Threats", that examines the growing risks posed by insider threats to organizations. It provides a comprehensive analysis of various types of insider threats, including malicious and negligent employees, and explores the attack techniques commonly used, such as phishing, malware, social engineering, and industrial espionage. The paper emphasizes the financial, operational, and reputational damage that insider threat incidents can cause. It also outlines multiple prevention and intervention methods, including the importance of employee training, behavior monitoring, least privilege policies, email security, and detailed incident response plans. Fehintola’s paper stresses the need for organizations to adopt a multi-layered defense strategy to mitigate the potential damages of insider threats and improve corporate resilience.