TTX-08
Phishing Tabletop Exercise: When MFA Isn't Enough
A ready-to-run phishing tabletop exercise: an adversary-in-the-middle kit steals finance sessions despite MFA. 8 timed injects, questions and a scoring rubric.
phishingtabletop-exercise
Guides & scenarios
tabletop-exercise
Tabletop Exercise for Small Business: A Low-Budget Guide
Run a tabletop exercise for your small business in 90 minutes with no security team: who plays what, 5 SMB scenarios, a prep checklist and a one-page agenda.
tabletop-exercisesmall-business
tabletop-exercise
Tabletop Exercise Requirements by Compliance Framework
Tabletop exercise requirements across SOC 2, ISO 27001, PCI DSS, NIST, NIS2, DORA, HIPAA, SEC rules and cyber insurance, with the evidence auditors expect.
tabletop-exercisecompliance
tabletop-exercise
20 Tabletop Exercise Examples for Cybersecurity Teams
20 cybersecurity tabletop exercise examples grouped by threat, each with a premise, audience, difficulty and the key decision it forces. 14 are ready to run.
tabletop-exercisescenarios
tabletop-exercise
How Often Should You Conduct a Tabletop Exercise?
How often should you conduct a tabletop exercise? Cadence by audience, triggers for extra sessions, a 12-month calendar and the metrics to report.
tabletop-exerciseexercise-program
tabletop-exercise
100+ Tabletop Exercise Questions for Incident Response
105 tabletop exercise questions for incident response, organised by phase and by role, plus how to ask them and weak-vs-strong question rewrites.
tabletop-exerciseincident-response
tabletop-exercise
Tabletop Exercise Template: Free Copy-Paste Kit
A free, copy-paste cyber tabletop exercise template: overview, roles, agenda, MSEL, inject cards, evaluation guide, hotwash and after-action report outline.
tabletop-exercisetemplate
tabletop-exercise
Tabletop Exercise vs Red Team: Which Test Do You Need?
Tabletop exercise vs red team, pen test, purple team and BAS: what each tests, when to use which, how they feed each other, plus a combined annual plan.
tabletop-exercisered-team
TTX-09
Third-Party Breach Tabletop Exercise: The MFT Zero-Day
A third-party breach tabletop exercise: your file-transfer vendor is mass-exploited and you hear it from the news. 8 injects on scoping, contracts and notification.
third-party-risktabletop-exercise