Choose your region
Your regulatory region sets the frameworks, notification windows and authorities used in your exercises and debriefs. Choose the region whose rules your organisation works under.
What the region changes
- The regulatory frameworks, notification deadlines and authorities the AI uses in scenarios.
- The regulatory notes in your debrief and PDF report.
- How the Real World Attacks library is grouped: incidents from your region first, then globally relevant ones.
- Whether third-party resilience exercises are available, and which regulatory reference they use. See Third-party resilience.
- The fictional organisation and staff names used in exercises.
Regions you can choose
- United Kingdom
- European Union
- United States
- Canada
- Australia
- Singapore
- India
- Japan
- United Arab Emirates
- Saudi Arabia
- Qatar
- Bahrain
- Global / Framework-Agnostic
Choose Global / Framework-Agnostic if no single region fits. It uses widely recognised frameworks such as ISO 27001, NIST CSF, MITRE ATT&CK and CIS Controls.
Set your region
You first choose your region on the Welcome to Adversary X form, under Regulatory region.
To change it later:
- Go to Settings, then Preferences.
- Under Regulatory region, pick a Region.
- Select Save region. You see Saved when it has worked.
Change your region before you start an exercise. The region is a setting on your own account.
Last updated on