04/23/2026
Early during a routine shift, an operator identifies anomalous VPN authentication activity originating from an external IP address. Initial log reviews provide insufficient data, leaving the full authentication history obscured. Despite a lack of reported system outages, the indicators suggest a potential compromise within the cooperative’s network.
In this moment of uncertainty, the path forward is critical: What are the immediate protocols? What resources are available? And who is designated to lead the response? An upcoming tabletop exercise, Guardian: Under Siege, will look at these questions, developed from a documented, real-world incident. April 30, 1-3 p.m. EST.