tabletop-exercise
CISA Tabletop Exercise Packages (CTEP): How to Use Them
What CISA tabletop exercise packages (CTEPs) contain, their strengths and limits, and how to adapt a free CTEP to your organisation and run it live.
tabletop-exercisecisa
Guides & scenarios
Every guide on running a tabletop exercise and every scenario in the library.
TTX-10
Deepfake Tabletop Exercise: The CEO Who Wasn't There
A deepfake tabletop exercise: a synthetic CEO on a video call pressures the CFO into an urgent wire, then a fake audio clip goes viral. 8 injects with a rubric.
deepfaketabletop-exercise
tabletop-exercise
Executive Tabletop Exercise: A Guide for Boards and C-Suite
How to run an executive tabletop exercise: the decisions to force, a 2-hour agenda, briefing without jargon, facilitating senior rooms and reporting to the board.
tabletop-exerciseexecutive
TTX-13
Healthcare Ransomware Tabletop Exercise: EHR Down at 2 a.m.
A healthcare ransomware tabletop exercise: EHR and imaging encrypted overnight, ambulance diversion, paper downtime and HIPAA decisions. 9 injects, 3 hours.
tabletop-exerciseransomware
tabletop-exercise
HIPAA Tabletop Exercise: A Guide for Healthcare Teams
Plan a HIPAA tabletop exercise that tests incident procedures, contingency plans and breach notification, with attendees, scenarios and a checklist.
tabletop-exercisehipaa
TTX-11
Identity Provider Compromise Tabletop: Losing Your SSO
An identity provider compromise tabletop: MFA fatigue and help-desk fraud hand an attacker SSO super-admin. 9 injects on federation, break-glass and cutting SSO.
identity-securitytabletop-exercise
TTX-12
Lost Laptop Tabletop Exercise: Stolen from a Car Overnight
A lost laptop tabletop exercise: a stolen manager's device, unproven encryption, HR data and a surprise MDM check-in. 7 injects for legal, HR and IT.
tabletop-exercisedata-breach
tabletop-exercise
NIS2 Tabletop Exercise: Testing NIS2 and DORA Readiness
How a NIS2 tabletop exercise (and its DORA equivalent) tests reporting clocks, management oversight and continuity, and what evidence to keep for supervisors.
tabletop-exercisenis2
TTX-14
OT Tabletop Exercise: Ransomware Reaches the Plant Floor
An OT tabletop exercise for manufacturers: IT ransomware, an HMI with unexplained setpoint changes and a safety-first shutdown decision. 9 injects, 3 hours.
tabletop-exerciseot-security