White-team control should: 1. Immediately pause or stop the exercise—scope drift or an exclusion breach is a safety stop. 2. Preserve and log the report, time, affected scope, evidence references, authority, and accountable owner. 3. Notify the exercise director and authorization owner; do not silently change scope or continue. 4. Separate the observation from adjudication and hand it to an independent adjudicator. 5. Restart only after fresh authorization, runtime/safety gates, confirmed exc...
Installs into .claude/skills of the current project.
Are you the author of Cyber Exercise Control?
Add the live security badge to your README. It updates with every re-scan.
[](https://www.skillsdirectory.com/skills/hoangnguyen0403-cyber-exercise-control-7e20ca4a)
White-team control should:
1. Immediately pause or stop the exercise—scope drift or an exclusion breach is a safety stop.
2. Preserve and log the report, time, affected scope, evidence references, authority, and accountable owner.
3. Notify the exercise director and authorization owner; do not silently change scope or continue.
4. Separate the observation from adjudication and hand it to an independent adjudicator.
5. Restart only after fresh authorization, runtime/safety gates, confirmed exclusions, and a recorded restart decision. If safety cannot be confirmed, keep the exercise stopped.
