Tabletop Exercises
A talk-through of a realistic security incident, so your team practises decisions before a real one happens.
Who it is for
- Leadership and IT teams that have an incident plan but have never tested it
- Businesses without a plan that want to see where the gaps are
- Organisations whose customers or insurers ask how they would respond to a breach
What you get
A scenario built for your business
For example ransomware or a leaked customer database, set in your own context.
A facilitated session
We guide the discussion and keep it practical and blame-free.
A written summary
What went well, what was unclear and who needs to decide what.
A short list of improvements
Prioritised actions for your plan and your people.
How an engagement runs
Free consultation
A short call to understand what you run, what worries you and any deadlines.
Scope and quote
We agree what is in and out of scope, the dates and the cost in writing before work starts.
Assessment
We run the exercise with the people who would be involved in a real incident, usually leaders, IT, and whoever handles communications.
Report and debrief
You receive a written summary and a short list of actions.
Fix and re-check
You fix what matters most. We can check the fixes and update the report.
Typical duration:To be confirmed: typical duration
Sample deliverable
A redacted excerpt of a exercise summary will appear here. To be confirmed: approved redacted sample.
Packages
Every engagement is quoted from its scope. The quote is fixed in writing before work starts.
Executive and technical
Separate sessions for leaders and technical teams on the same scenario.
Contact us for a quote
Ask about this packageSeries
Several exercises over a year, each building on the last.
Contact us for a quote
Ask about this packageFrequently asked questions
How long does a tabletop exercise take?
It depends on the size of what we are looking at. We give you dates in the written quote before you commit.
How much does it cost?
Contact us for a quote. We price each engagement from its scope, and the quote is fixed in writing before work starts.
Will you disrupt our systems or staff?
We agree the rules of the engagement with you first, including when testing may happen and what must not be touched.
Ready to talk?
Book a free consultation. We will ask about your systems, answer your questions and, if it suits you, send a written quote.