Phishing Tabletop Exercise: When MFA Isn't Enough
A ready-to-run phishing tabletop exercise: an adversary-in-the-middle kit steals finance sessions despite MFA. 8 timed injects, questions and a scoring rubric.
A ready-to-run phishing tabletop exercise: an adversary-in-the-middle kit steals finance sessions despite MFA. 8 timed injects, questions and a scoring rubric.
Run a tabletop exercise for your small business in 90 minutes with no security team: who plays what, 5 SMB scenarios, a prep checklist and a one-page agenda.
Tabletop exercise requirements across SOC 2, ISO 27001, PCI DSS, NIST, NIS2, DORA, HIPAA, SEC rules and cyber insurance, with the evidence auditors expect.
20 cybersecurity tabletop exercise examples grouped by threat, each with a premise, audience, difficulty and the key decision it forces. 14 are ready to run.
How often should you conduct a tabletop exercise? Cadence by audience, triggers for extra sessions, a 12-month calendar and the metrics to report.
105 tabletop exercise questions for incident response, organised by phase and by role, plus how to ask them and weak-vs-strong question rewrites.
A free, copy-paste cyber tabletop exercise template: overview, roles, agenda, MSEL, inject cards, evaluation guide, hotwash and after-action report outline.
Tabletop exercise vs red team, pen test, purple team and BAS: what each tests, when to use which, how they feed each other, plus a combined annual plan.
A third-party breach tabletop exercise: your file-transfer vendor is mass-exploited and you hear it from the news. 8 injects on scoping, contracts and notification.