Free kit · Incident response

The Incident Response Tabletop Kit

Three ready-to-run scenarios, discussion questions, and an after-action template for a 90-minute exercise.

  • Ransomware, email fraud and cloud data exposure scenarios
  • Who to invite and how to run the 90 minutes
  • An after-action template your auditors will recognize

Get the free kit

Free PDF. We'll email you a copy too.

What's inside

Everything you need to run your first tabletop

Scenario 1: Ransomware

Three injects that test decisions on backups, insurers and paying.

Scenario 2: Email fraud

A business email compromise that tests your payment controls.

Scenario 3: Cloud exposure

Public data, a reporter's call, and your notification duties.

Before the exercise

The plan, contacts and roles to have ready.

After the exercise

How to capture findings, owners and dates.

After-action template

A fill-in summary to share with leadership.

Who it's for

Built for

  • Leadership teams that have never run an exercise
  • Companies with an IR plan that hasn't been tested
  • Teams that need tabletop evidence for SOC 2, HIPAA or CMMC

Rather we run it for you?

We facilitate tabletops built around your real systems and obligations, and deliver an after-action report your auditors and insurers will recognize.

Book a 30-minute call