Before You Start

Pre-flight checklist — complete these before the exercise to set your team up for a productive session.

01

Define success criteria

Define the single scenario objective and decision threshold for success.

02

Assign leadership

Assign one accountable incident commander and one communications owner.

03

Set decision points

Set role-specific decisions each participant must make during the run.

04

Write injects

Write three injects: initial alert, escalation, and executive pressure event.

05

Define triggers

Pre-define legal, compliance, and leadership escalation triggers.

06

Capture actions

Capture actions, owners, and due dates before ending the exercise.

07

Schedule follow-up

Schedule a 30-day follow-up to verify remediation closure.

Tell us about your organization

Select your industry and company size. We’ll customize the exercise for you.

Industry
Company size

See a real exercise report

Enter your work email to instantly download a sample audit-ready report from a ransomware tabletop exercise.

We'll send a copy to your inbox too. No spam, ever.