Seafood Processing Incident Response Lab

A working lab, not a lecture. Teams of five are given a simulated seafood processing environment and a genuine intrusion to unpick — starting from a single odd alert and ending with a written statement for customers.

The exercise deliberately includes the messy parts: an unreachable vendor, a manager who wants the line restarted immediately, and evidence that has already been overwritten.

Laptops are provided. Prior incident-response experience is helpful but not required — each team is balanced by the facilitators.