Incident Response Tabletops
A realistic but controlled and safe simulation, so your team has been through an incident before it happens
Nobody's first read should be mid-incident
Our Incident Response Tabletop service walks your team through a realistic incident in a controlled, safe environment, led by our incident response experts. Afterwards we update your incident response plan and playbooks with what the exercise actually exposed.
We build the scenario with your point person over several conversations first, so it reflects how your business actually runs rather than a generic script. Then your team works through it with nothing at stake and nobody being tested, and what surfaces becomes a plan made around your business.
Incident Response Tabletop overview (PDF)Benefits
- Resilience: your team is more aware and better prepared, so less downtime, disruption, financial loss, and reputational damage
- Peace of mind: plans and playbooks tested before they are needed
- Improved regulatory, contractual, and legal compliance
Features
Our incident response experts lead the room through dynamic, moderated simulations.
- One half-day Incident Response Tabletop covering two scenarios
- Coordinated incident scenario planning and preparation
- Expert-led tabletop scenarios
- Live, onsite, interactive simulations of common incident types
- Post-tabletop incident response plan updates
The scenario required us to work through a credible cybersecurity event with the ambiguity, competing priorities, and cascading consequences that would exist in an actual incident. That was valuable not only from a cybersecurity standpoint, but also as an exercise in leadership communication, prioritization, and decision-making under pressure.
Who should be in the room?
Not only the technical people. Leadership, whoever approves payments, whoever would speak to customers, and whoever decides to call the insurer. Most of the hard choices during an incident are not technical ones.
Is it run onsite?
We prefer onsite, and it works noticeably better. Reading the room is part of running the exercise, and the conversations that matter tend to happen between the scenario steps rather than during them.
How long does one take?
Part of a day. The exercise itself is shorter than people expect. What takes the time is the discussion it starts, which is the part worth having.
Tell us about your business.
A half-hour conversation about what you're being asked for and where you actually stand. If we can help, you'll have a proposal usually within a day.
Not ready to talk? Check your readiness in five minutes and see where to start.