CARP Pre-Mortems Procurement

CARP is a transformational project aiming to improve MODs ability to recover safely and efficiently from cyber-incidents to minimize any operational, financial, and reputational implications. It seeks to achieve this through the delivery of direction, support and tools that empower system/service owners to develop, embed, test, and improve their individual cyber recovery plans and processes. One element of this support package includes the provision and facilitation of cyber 'pre-mortems.'

A cyber pre-mortem is an approach whereby a 1-2 day workshop is held that looks to work through the scenarios of certain threat cases having played out, with a view to working out what the pre-emptive steps are required to mitigate the chance of those incidents occurring. Similarly, they can also pivot towards looking at the steps required to recover from certain threat cases having played out. A post-mortem is when you look at what happened after the event. A pre-mortem is carrying out the assessment before the event happens.