Board Tabletop Exercises
Interactive incident response exercises for senior leadership. Practice decision-making under pressure and validate your response plans in a safe environment.
Practice Before the Crisis
When a serious cyber incident hits, the board and executive team face intense pressure to make the right decisions quickly. Who approves the ransom payment? When do you notify regulators? What do you tell customers?
Our Board Tabletop Exercises let you practice these decisions in a safe, structured environment. Using NCSC-aligned scenarios tailored to your industry, we guide your leadership team through realistic incidents to test plans, clarify roles, and build confidence.
The exercises are designed for senior leadership - not technical teams. We focus on the strategic decisions boards must make: communication, regulatory obligations, business continuity, and crisis management.
Exercise Scenarios
Choose from proven scenarios, customised to your specific threat profile.
Ransomware Attack
Critical systems encrypted, operations halted, ransom demand received
Data Breach
Customer data exfiltrated, regulatory notification required, media interest
Supply Chain Compromise
Trusted vendor compromised, malware spreading through your network
Insider Threat
Employee suspected of data theft, legal and HR considerations
Ideal For
Boards preparing for their first incident response exercise
Leadership teams wanting to validate response plans
Companies with new or updated incident response procedures
Organisations in regulated industries with incident reporting requirements
Teams who want to practice under pressure without real consequences
Boards seeking to understand their role during a crisis
How It Works
A structured approach that maximises learning while respecting your board's time.
Preparation
Scenario selection, participant briefing, and logistics planning
1 week beforeThe Exercise
Facilitated 2-3 hour tabletop session with realistic injects and decisions
Half dayHot Wash
Immediate feedback session immediately following the exercise
30 minutesReporting
Comprehensive report with findings and improvement recommendations
3-5 daysWhat You Receive
Clear insights into your incident response readiness and a roadmap for improvement.
Customised Exercise Scenario
Realistic incident scenario tailored to your industry and threat profile
Facilitated Exercise Session
Expert-led tabletop exercise with structured decision points and injects
Decision Timeline Analysis
Review of key decisions, timing, and communication flow during the exercise
Gap Analysis Report
Identification of gaps in plans, processes, and team readiness
Improvement Recommendations
Actionable recommendations to strengthen incident response capability
Ready to Test Your Response?
Do not wait for a real incident to discover gaps in your response plans. Book a call to discuss scheduling a tabletop exercise for your board.