tabletop-exercise
CISA Tabletop Exercise Packages (CTEP): How to Use Them
What CISA tabletop exercise packages (CTEPs) contain, their strengths and limits, and how to adapt a free CTEP to your organisation and run it live.
tabletop-exercisecisa
Tagged: #tabletop-exercise
TTX-10
Deepfake Tabletop Exercise: The CEO Who Wasn't There
A deepfake tabletop exercise: a synthetic CEO on a video call pressures the CFO into an urgent wire, then a fake audio clip goes viral. 8 injects with a rubric.
deepfaketabletop-exercise
tabletop-exercise
Executive Tabletop Exercise: A Guide for Boards and C-Suite
How to run an executive tabletop exercise: the decisions to force, a 2-hour agenda, briefing without jargon, facilitating senior rooms and reporting to the board.
tabletop-exerciseexecutive
TTX-13
Healthcare Ransomware Tabletop Exercise: EHR Down at 2 a.m.
A healthcare ransomware tabletop exercise: EHR and imaging encrypted overnight, ambulance diversion, paper downtime and HIPAA decisions. 9 injects, 3 hours.
tabletop-exerciseransomware
tabletop-exercise
HIPAA Tabletop Exercise: A Guide for Healthcare Teams
Plan a HIPAA tabletop exercise that tests incident procedures, contingency plans and breach notification, with attendees, scenarios and a checklist.
tabletop-exercisehipaa
TTX-11
Identity Provider Compromise Tabletop: Losing Your SSO
An identity provider compromise tabletop: MFA fatigue and help-desk fraud hand an attacker SSO super-admin. 9 injects on federation, break-glass and cutting SSO.
identity-securitytabletop-exercise
TTX-12
Lost Laptop Tabletop Exercise: Stolen from a Car Overnight
A lost laptop tabletop exercise: a stolen manager's device, unproven encryption, HR data and a surprise MDM check-in. 7 injects for legal, HR and IT.
tabletop-exercisedata-breach
tabletop-exercise
NIS2 Tabletop Exercise: Testing NIS2 and DORA Readiness
How a NIS2 tabletop exercise (and its DORA equivalent) tests reporting clocks, management oversight and continuity, and what evidence to keep for supervisors.
tabletop-exercisenis2
TTX-14
OT Tabletop Exercise: Ransomware Reaches the Plant Floor
An OT tabletop exercise for manufacturers: IT ransomware, an HMI with unexplained setpoint changes and a safety-first shutdown decision. 9 injects, 3 hours.
tabletop-exerciseot-security
TTX-08
Phishing Tabletop Exercise: When MFA Isn't Enough
A ready-to-run phishing tabletop exercise: an adversary-in-the-middle kit steals finance sessions despite MFA. 8 timed injects, questions and a scoring rubric.
phishingtabletop-exercise
tabletop-exercise
Tabletop Exercise for Small Business: A Low-Budget Guide
Run a tabletop exercise for your small business in 90 minutes with no security team: who plays what, 5 SMB scenarios, a prep checklist and a one-page agenda.
tabletop-exercisesmall-business
tabletop-exercise
Tabletop Exercise Requirements by Compliance Framework
Tabletop exercise requirements across SOC 2, ISO 27001, PCI DSS, NIST, NIS2, DORA, HIPAA, SEC rules and cyber insurance, with the evidence auditors expect.
tabletop-exercisecompliance
tabletop-exercise
20 Tabletop Exercise Examples for Cybersecurity Teams
20 cybersecurity tabletop exercise examples grouped by threat, each with a premise, audience, difficulty and the key decision it forces. 14 are ready to run.
tabletop-exercisescenarios
tabletop-exercise
How Often Should You Conduct a Tabletop Exercise?
How often should you conduct a tabletop exercise? Cadence by audience, triggers for extra sessions, a 12-month calendar and the metrics to report.
tabletop-exerciseexercise-program
tabletop-exercise
100+ Tabletop Exercise Questions for Incident Response
105 tabletop exercise questions for incident response, organised by phase and by role, plus how to ask them and weak-vs-strong question rewrites.
tabletop-exerciseincident-response
tabletop-exercise
Tabletop Exercise Template: Free Copy-Paste Kit
A free, copy-paste cyber tabletop exercise template: overview, roles, agenda, MSEL, inject cards, evaluation guide, hotwash and after-action report outline.
tabletop-exercisetemplate
tabletop-exercise
Tabletop Exercise vs Red Team: Which Test Do You Need?
Tabletop exercise vs red team, pen test, purple team and BAS: what each tests, when to use which, how they feed each other, plus a combined annual plan.
tabletop-exercisered-team
TTX-09
Third-Party Breach Tabletop Exercise: The MFT Zero-Day
A third-party breach tabletop exercise: your file-transfer vendor is mass-exploited and you hear it from the news. 8 injects on scoping, contracts and notification.
third-party-risktabletop-exercise
tabletop-exercise
Tabletop vs Functional vs Full-Scale Exercise: Cyber Guide
Tabletop vs functional vs full-scale exercise explained: the seven HSEEP exercise types with cyber examples, a comparison table and how to build a progressive programme.
tabletop-exercisehseep
tabletop-exercise
What Is a Tabletop Exercise? The Complete Guide
What is a tabletop exercise? A clear definition, how a cyber TTX runs before, during and after, who attends, what it tests, formats, frequency and pitfalls.
tabletop-exerciseincident-response
TTX-07
Data Breach Notification Tabletop: Racing Regulatory Clocks
A breach notification tabletop exercise: confirmed exfiltration of customer data with GDPR, NIS2, SEC and HIPAA deadlines running in parallel. 9 injects.
data-breachtabletop-exercise
TTX-06
DDoS Tabletop Exercise: Peak-Season Outage and Extortion
A DDoS tabletop exercise: a multi-vector flood takes down your storefront and API during peak season, then an extortion email arrives. 8 timed injects.
ddostabletop-exercise
Running a Tabletop
Writing a Tabletop After-Action Report and Improvement Plan
Turn a tabletop hotwash into an after-action report and improvement plan: structure, how to write findings, owners and due dates, tracking and re-testing.
tabletop-exerciseafter-action-report
TTX-05
Supply-Chain Compromise Tabletop: A Trojanized Signed Update
A software supply-chain tabletop exercise: a trusted vendor's signed update contains a backdoor installed across your estate. 9 injects for technical and exec teams.
supply-chaintabletop-exercise
Running a Tabletop
Scoring Tabletop Exercises: Evaluation Guides and Rubrics
Evaluate a cyber tabletop without grading people: capability targets, HSEEP-style evaluation guides, P/S/M/U ratings, maturity rubrics and decision-time metrics.
tabletop-exerciseevaluation
TTX-04
Insider Threat Tabletop: The Departing Privileged Engineer
An insider threat tabletop exercise: a privileged engineer resigns and copies data to personal cloud storage. 8 injects for HR, legal and security together.
insider-threattabletop-exercise
Running a Tabletop
Designing Tabletop Injects and the MSEL
Write tabletop injects that force real decisions: inject anatomy, types, branching, realism artifacts, pacing, and a Master Scenario Events List you can reuse.
tabletop-exerciseinjects
TTX-03
Cloud Access Key Leak Tabletop: Public Repo to Billing Spike
A cloud security tabletop exercise: a long-lived access key pushed to a public repository, cryptomining, storage enumeration and a race to rotate. 8 injects.
cloud-securitytabletop-exercise
Running a Tabletop
Facilitating a Tabletop Exercise: Techniques That Work
How to facilitate a cyber tabletop: ground rules, pacing, time compression, probing questions, handling dominant voices, remote play and a clean hotwash.
tabletop-exercisefacilitation
TTX-02
BEC Tabletop Exercise: The Supplier Bank-Detail Change
A ready-to-run BEC tabletop exercise: a compromised mailbox, a fraudulent supplier bank change and a wire already sent. 8 injects for finance, IT and leadership.
business-email-compromisetabletop-exercise
Running a Tabletop
Tabletop Exercise Roles: Who Does What in the Room
Facilitator, controller, scribe, evaluators, players and trusted agents: responsibilities, a RACI matrix and sizing guidance for cyber tabletop exercises.
tabletop-exerciseroles
TTX-01
Ransomware Tabletop Scenario: Double Extortion on a Friday
A ready-to-run ransomware tabletop exercise: encrypted hypervisors, a leak-site countdown and a ransom demand, with 9 timed injects and discussion questions.
ransomwaretabletop-exercise
Running a Tabletop
How to Run a Cyber Tabletop Exercise: A Planning Guide
Plan a cyber incident-response tabletop exercise end to end: objectives, scenario choice, participants, a 6–8 week timeline, logistics and follow-up.
tabletop-exerciseincident-response