Find the gaps on a Tuesday afternoon, not during a real incident.

A tabletop exercise is a conversation, not a drill: the team talks through a scenario and the decisions it forces, without touching a real system.

This kit has three ready-to-run scenarios, ransomware, invoice fraud and a compromised supplier, each with discussion prompts and facilitator notes on what a strong answer sounds like.

We suggest at least one exercise a year, starting with ransomware. Run this with a client, then log the result in the exercise log at the back.