Tabletop vs functional vs full-scale exercise explained: the seven HSEEP exercise types with cyber examples, a comparison table and how to build a progressive programme.
What is a tabletop exercise? A clear definition, how a cyber TTX runs before, during and after, who attends, what it tests, formats, frequency and pitfalls.
A breach notification tabletop exercise: confirmed exfiltration of customer data with GDPR, NIS2, SEC and HIPAA deadlines running in parallel. 9 injects.
A DDoS tabletop exercise: a multi-vector flood takes down your storefront and API during peak season, then an extortion email arrives. 8 timed injects.
Turn a tabletop hotwash into an after-action report and improvement plan: structure, how to write findings, owners and due dates, tracking and re-testing.
A software supply-chain tabletop exercise: a trusted vendor's signed update contains a backdoor installed across your estate. 9 injects for technical and exec teams.
Evaluate a cyber tabletop without grading people: capability targets, HSEEP-style evaluation guides, P/S/M/U ratings, maturity rubrics and decision-time metrics.
An insider threat tabletop exercise: a privileged engineer resigns and copies data to personal cloud storage. 8 injects for HR, legal and security together.
Write tabletop injects that force real decisions: inject anatomy, types, branching, realism artifacts, pacing, and a Master Scenario Events List you can reuse.