Cyber Tabletop Exercise: Proven Steps to Avoid Costly Risk
An incident response plan that has never been tested is a document, not a capability. A cyber tabletop exercise is the cheapest way to find out whether your organisation can actually respond — who holds shutdown authority, when the regulatory clock starts, and whether anyone has drafted a holding statement before they needed one. This guide covers the full cycle: setting objectives and scope, choosing a scenario grounded in your real risk register, deciding who belongs in the room, building the four-document exercise pack, a three-hour run sheet, the facilitation techniques that keep the discussion honest, and the after-action reporting that converts findings into tracked and closed actions.
