IR Readiness & Tabletop Exercises
When an incident begins, the first six hours should be rehearsed, not improvised.
What this engagement addresses
A written incident plan does not guarantee teams have practiced decision-making. Contact lists can age, assumptions can fail, and executives can face unfamiliar choices under time pressure.
Who it's for & prerequisites
Designed for
Organizations with incident reporting duties or contractual requirements, and the executives and technical teams responsible for response.
What we need from you
The current incident response plan if available, a room or video session, three hours of executive attention, and an open debrief.
How we run it
Each stage produces an agreed input or output for the next stage.
Concrete deliverables
- Incident response plan review and refresh
- Playbooks for 3–5 relevant scenarios
- 2–3 hour executive crisis tabletop
- Technical response-team tabletop
- Improvement plan with owners and dates
What changes after
Clearer crisis responsibilities, tested escalation decisions and an owned improvement backlog.
Service FAQ
Will the exercise expose our gaps publicly?
No. The exercise is private; findings become your organization’s improvement plan.
Can we start without an incident plan?
Yes. Building the plan can be the first deliverable.
Where do scenarios come from?
Public regional incident patterns and practitioner incident-handling experience. No client data is reused.
Turn the requirement into an actionable scope.
Share the problem, the audience and your target outcome.