With the increased frequency and sophistication of attacks becoming a greater challenge, organisations must be prepared for both the everyday attack, such as social engineering, the rise of deep fakes, or phishing, and major incidents such as ransomware. This session will examine ways to truly stress test an organisation's security policy, developing muscle memory for the organisation and identifying any weaknesses before a major breach exposes a company, its critical data and its reputation.