IBM X-Force is tackling this challenge by taking a different approach. This approach combines a realistic AI driven attack simulation with an immersive crisis exercise, for both business and technology leaders. This model helps organizations see first-hand how realistic threats – including those powered by AI – can escalate, and how their teams respond to them under pressure.
Too often technical teams and executive leaders are trained in isolation. True preparedness comes from bringing them together to bridge the gap between operational response and strategic decision-making so they can function as a unified team when it matters most.
In practice, that means having the adversary simulation team execute reconnaissance activities. These activities include things like using AI to build target profiles against an organization to build custom social engineering pretexts, as part of an initial access effort. Before the time of modern AI, this process that might have taken days, but now it could be completed in an hour. After that, attackers can move on to active initial access efforts attempting to bypass security controls and processes.
The resulting findings then become the backbone of an immersive cyber response training exercise. By bringing these elements together, the simulation is calibrated to the organization’s actual exposure, not a generic scenario. It shifts the conversation from “what might happen” to “this is what would could happen in your environment today.”
This approach helps organizations move from preparing for yesterday’s threats and start training at the new speed of attack. Grounding preparation in real attacker behavior provides clarity on what your environment surfaces, what it misses, and how your response holds up under pressure. It tests not only tools, but coordination, communication, and decision-making at speed—where breakdowns are most likely to occur.
Too often, technical teams and executive leaders are trained in isolation. True preparedness comes from bringing them together, inevitably bridging the gap between operational response and strategic decision-making. Ultimately allowing them to function as a unified team when it matters most.
We’ve seen kind of shift before. When organizations moved to remote work, the attack surface expanded overnight. Security teams had to adapt quickly, not just defending the new environment, but learning how to test and train against it.