Tabletop
Who does what when a cyber incident begins?
In a tabletop exercise, we work through a realistic incident scenario together. You practise decisions, cooperation and communication around the table. This reveals where arrangements are clear and where questions remain.
From question to insight
What we clarify
- Who makes which decision, and on what basis?
- How do IT, management and others involved work together?
- Which arrangements need refining?
When is this relevant?
Start with what you want to know.
You want to practise your incident plan, bring new role holders together or learn from a previous incident. The exercise can be tailored to the organisation, the time available and the chosen learning objective.
The approach
From scenario to insight.
01
A recognisable scenario
We choose a situation relevant to your organisation. We determine the learning objective and the roles needed at the table in advance, such as IT, management and communications.
02
Working through decisions
New information becomes available during the exercise. Participants discuss what they will do, whom they will involve and what information is still missing. The facilitation keeps the exercise focused on its learning objective.
03
Making arrangements specific
We discuss what went well and where there was uncertainty. You receive improvements for roles, decision-making, availability and communication. Together, we clarify who will take each action.
What you receive
Insight you can act on.
A shared understanding of the response and a specific action list to improve the incident plan. A follow-up exercise can show whether the new arrangements work.
A tabletop tests decision-making and cooperation through discussion. For technical testing of detection and response, we schedule a separate validation.
Discuss your exercise.
Tell us what you want assessed. We will help you find an approach that moves you forward.