Crisis Tabletop Exercises
Test your leadership's response to ransomware, data breaches, and insider threats in a safe, simulated environment. Decisions are made, consequences are faced, and gaps are found - without real-world impact.
How We Run Exercises
A structured three-phase approach from design to actionable outcomes
Design
We build a custom scenario based on your sector, threat landscape, and organisational structure
Facilitate
We inject scenario updates in real-time, pressing participants to make decisions under pressure
After-Action Report
Detailed gap analysis with prioritised recommendations and updated playbooks
The Scenario Library
We design exercises around the crisis scenarios most relevant to your organisation
Ransomware Attack
Systems encrypted, backups uncertain, payment demanded. Test decision-making around containment, communication, and recovery priorities.
Data Breach
Customer data found on the dark web. Navigate regulatory notification, media response, and forensic investigation under time pressure.
Insider Threat
A privileged employee exfiltrating intellectual property. Balance HR, legal, and security considerations while preserving evidence.
Supply Chain Compromise
A critical vendor is breached and your systems are potentially exposed. Assess third-party dependencies and containment options.
Geopolitical / Kinetic
Nation-state targeting or physical disruption to infrastructure. Coordinate across security, operations, and executive leadership.
Regulatory Investigation
A regulator announces an investigation following a suspected breach. Manage legal obligations, board communication, and ongoing operations simultaneously.
Exercise Maturity Levels
We tailor exercise complexity to your organisation's readiness and goals
Discussion-Based
Facilitated conversation around a scenario. Ideal for teams new to tabletop exercises or wanting to test high-level decision frameworks.
- 2-3 hour session
- Focus on roles and responsibilities
- No time pressure
- Gap identification focus
Simulation
Real-time injects with evolving conditions. Participants face time pressure and escalating consequences that test coordination and communication.
- Half-day engagement
- Live scenario injects
- Cross-functional coordination
- Decision tree validation
Full-Scale Exercise
Multi-team, multi-day exercises that combine tabletop elements with technical validation. Tests the entire response chain from detection to recovery.
- Full-day or multi-day
- Technical + executive tracks
- External stakeholder involvement
- Board-ready assessment
What You Receive
Gap Analysis
Prioritised response gaps with specific recommendations
Updated Playbooks
Refined decision trees and runbooks for incident response
Board-Ready Summary
Executive report on readiness state and strategic needs
Is This Right for You?
Best for: Executive teams, boards, and compliance leaders who need to validate incident response readiness and satisfy regulatory requirements - without waiting for a real crisis to discover the gaps.
Schedule a Tabletop Exercise