Tabletop Exercises

Incident Response Tabletop Exercises

Tabletop exercises simulate real-world incident scenarios relevant to your organization, and evaluate your response process and capabilities. Allow us to help identify potential gaps and areas of improvement in your incident response process.

Incident Simulation & Response Exercise

Our experienced security practitioners can run IR tabletop exercises to put your incident response plan through a simulated test. This helps ensure the comprehensiveness of your IR plan, and that all impacted parties are aware of their roles during a security incident. You will also know whether or not your team has followed the associated process with efficacy. We help you by:

Developing and delivering a custom incident simulation exercise to test your incident response plan and process.
Providing clear and actionable recommendations to improve your overall incident response program.

Talk to an Expert

Collaborating with You on the Right Tabletop Approach

Our team of Digital Forensics and Incident Response (DFIR) professionals collaborates with you to develop and accept a simulated incident from our list of predefined scenario topics, or custom-developed to your unique requirements.

We work hand-in-hand with your team to collect various information about your organization. This includes current processes, policies, infrastructure information, tools and other pertinent details that are helpful in creating a customized incident that will effectively evaluate your incident response process.

Simulating an Incident

The incident simulation process follows this flow:

Time is scheduled to execute the simulated incident with participants as defined in your existing incident response plan.
Our facilitator will present your team with the custom scenario developed for the simulation, and observe your discussions as to how you would respond to the incident.
During the exercise, the facilitator will provide observations and recommendations to guide you during the simulation, and use the opportunity to evaluate the associated response.

Delivering an Actionable Incident Readiness Summary

Our DFIR specialists will develop an incident readiness summary to provide a high-level overview of the incident response exercise. We identify whether the parties followed the plan, how effective the plan was in addressing the incident and any potential gaps or opportunities for improvement.