Skip to content

SERVICE

Tabletop Exercises

Your crisis committee faces a realistic scenario, ransomware, data leak, compromise of a critical third party, designed with your industry actor's TTPs and led by facilitators who respond to real incidents. AI agents generate dynamic injects that adapt the scenario to the decisions your team makes.

Dynamic AI injects3–4 hoursEvidence for the regulator
AT A GLANCE
Duration 3–4 hours + report
Participants 8 to 20 · committee, IT, legal, comms
Scenario Ransomware · leak · critical third party
Result Decision report and improvement plan
HOW WE WORK

The methodology, step by step

01

Scenario design

Ransomware, data leak or critical third party, with your industry actor's TTPs.

02

Evaluation objectives

What to test: decision-making, communication, regulatory deadlines.

03

Dynamic injects

✦ AI AGENT

AI agents adapt the scenario live to the decisions the committee makes.

04

Structured observation

Decisions and timing recorded by facilitators who respond to real incidents.

05

Gap report

Committee performance and documented plan and communication gaps.

06

Improvement plan

Prioritized and tracked; evidence for regulator, auditor and insurer.

SERVICE TIERS

Pick the tier that answers your question

The price is fixed in writing after a 30-minute scoping and does not change during the contract.

Single exercise

FORMAT
One scenario, 3–4 hours
PARTICIPANTS
Crisis committee
IDEAL FOR
First time or audit requirement
REPORT
Decisions and gaps
RECOMMENDED

Annual program

FORMAT
Two exercises a year with follow-up
PARTICIPANTS
Committee + second line
IDEAL FOR
Regulated entities
REPORT
+ tracked improvement plan

Technical + executive drill

FORMAT
Tabletop + real technical exercise
PARTICIPANTS
Committee + technical team
IDEAL FOR
Validating plan and capability together
REPORT
Integral performance

Thirty minutes and we tell you frankly what you need.

Sometimes the answer is "you don't need us yet." We prefer that to selling you something you won't use.