Executive cyber incident tabletop

Rehearse leadership decisions during a simulated ransomware incident or data breach.

Format
Facilitated session and debrief
Your team
Executives and advisers who would make or inform decisions during an incident
Part of
Incident readiness and response planning

The challenge

Incident plans are usually written by technical teams, but the hardest calls during a ransomware attack or data breach fall to leadership: when to escalate, whether to shut systems down, and what to tell customers.

  • When to engage

    For leadership teams that want to see how their incident plan works across IT, operations, communications and executive management.

  • How we work

    We design a discussion exercise around your organisation and introduce updates as the scenario unfolds. Participants decide who leads the response, when to escalate, how to manage disruption and what to communicate. We then debrief and agree on improvements.

  • What you receive

    • Tailored scenario and facilitated leadership session
    • After-action report covering decisions, strengths and gaps
    • Prioritised improvement plan with proposed owners
  • How to get started

    Bring your response plan and nominate the people who would make or advise on decisions during an incident.

    Plan a tabletop exercise

Questions

Common questions.

Do participants need technical knowledge?

No. The exercise is about decisions, not technical recovery steps. Your IT lead or provider takes part to explain what is technically possible, so leadership can weigh the options.

How is this different from your incident readiness service?

The tabletop is a single, focused exercise for leadership. Incident readiness is broader: it reviews and updates your response plan and playbooks, and can include exercises for several teams.

Advisory packages

Other packages.

Talk it through first.

Tell us about your situation and timeline. We will confirm whether this package fits, or suggest a better starting point.

Request a Consultation