Practical guidance on human risk and email trust

Cybersecurity Tabletop Exercises: Preparing Your People Before a Real Attack

When a real cyber incident happens, does everyone actually know what to do? A tabletop exercise places your people into a realistic simulated incident to test how they recognise threats, communicate, escalate and decide — without exposing the business to an actual attack.

In this article

• What a cybersecurity tabletop exercise is — and what it tests
• Seven realistic scenarios to build an exercise around
• The five stages of an exercise, from first alert to debrief
• A minute-by-minute human-risk scenario you can run