Runbook and drills

The runbook records who submits (assigned representative), the security owner, legal contact, CISO, executive escalation, ENISA SRP account status, CSIRT contact, notification rules and internal communication procedure. The dashboard shows whether the organisation is reporting-ready.

A drill is a clearly labelled simulation: a scripted vulnerability or incident, a simulated awareness time, mock 24h / 72h / final report forms, elapsed-time measurement and readiness findings with a score. Drills never create a legal case or notify an authority, and they satisfy the "process exercised" requirement.