Room #3 - Sorting Challenge: Business Cases to Cymulate Use Case by Dalia Sharoni

daliagk — 2025-09-15 11:44:40 UTC

Start with the “Bank of Business Cases” column
- This column contains all the available business cases.
Review the Use Case columns on the right
- Each column is labeled with a Use Case.
- Your task is to match business cases to the correct use case. (There may be more than one correct case per use case)
Drag and Drop
- Click and hold the business case in the Bank of Business Cases.
- Drag it into the column where you believe it belongs.
- Drop it into place.
Complete all matches
- Continue until all business cases have been placed under the use case columns.
Check your work with SME
- Review each column to make sure the cases align with the use case description.

Reduce risk exposure

daliagk — 2025-09-15 11:44:40 UTC

by ensuring threats are detected before causing damage.

by detection \stopping threats early.

Prevent business disruption

daliagk — 2025-09-15 11:44:40 UTC

by blocking threats before they spread.

Demonstrate control effectiveness

daliagk — 2025-09-15 11:44:40 UTC

for board, auditors, and insurers.

Enable faster, safer cloud adoption:

daliagk — 2025-09-15 11:44:40 UTC

Build confidence to scale cloud initiatives without adding unnecessary risk.

Reduce patching workload

daliagk — 2025-09-15 11:44:40 UTC

by focusing only on exploitable vulnerabilities.

Extend scarce red team resources:

daliagk — 2025-09-15 11:44:40 UTC

Automate routine testing so experts can focus on advanced, high-value scenarios.

Lower incident response costs by reducing MTTD (Mean Time to Detect)

daliagk — 2025-09-15 11:44:40 UTC

with verified detection logic.

Optimize cloud security resources:

daliagk — 2025-09-15 11:44:40 UTC

Validate and prioritize cloud exposures based on exploitability.

Accelerate remediation cycles:

daliagk — 2025-09-15 11:44:40 UTC

Identify exploitable weaknesses quickly, prioritize them by impact, and measure improvement.

Prioritize remediation efforts

daliagk — 2025-09-15 11:44:40 UTC

based on validated business risk.

Maximize ROI on cloud security spend:

daliagk — 2025-09-15 11:44:40 UTC

Ensure existing tools and policies actually perform.

Justify resource allocation

daliagk — 2025-09-15 11:44:40 UTC

with business-aligned prioritization.

Continuously validate prevention tools

daliagk — 2025-09-15 11:44:40 UTC

(e.g., firewalls, EDRs, proxies).

Improve ROI on SIEM/EDR investments

daliagk — 2025-09-15 11:44:40 UTC

by validating that rules are effective (trigger an alert when they should).

Bridge the gap between vuln scanning and threat validation.

daliagk — 2025-09-15 11:44:40 UTC

Prevent alert fatigue

daliagk — 2025-09-15 11:44:40 UTC

by fine-tuning rules to reduce false positives.

Scale validation across the enterprise:

daliagk — 2025-09-15 11:44:40 UTC

Move from point-in-time manual testing to continuous, repeatable validation of controls, configurations, and attack paths.

Ensure defenses are up-to-date

daliagk — 2025-09-15 11:44:40 UTC

with evolving TTPs and threat actors.

Reduce risk of breach:

daliagk — 2025-09-15 11:44:40 UTC

Validate cloud posture against real-world attacks.