Tabletop exercises are the foundation of a good testing strategy. It is great to have good policies and procedures, but if you never test those documents against real-life scenarios, you won’t know if they actually work. The first thing you must do is to review your policies and procedures on at least an annual basis. The next thing you must do is to test those policies and procedures against scenarios in a role-playing atmosphere. For some systems you should test them in live exercises. However, those live exercises can be dangerous, sometimes unexpectedly bringing down systems. However, tabletop exercises can never bring down a system since the exercise never leaves the training room.
One of the most common tabletop exercises is one in which your network has been breached. We will work with you to personalize the scenario to your company’s needs. As this is the scenario most likely to play out in real life, this is our most popular exercise. However, that breach can lead to hundreds of different scenarios (with ransomware being just one example). Public data release of internal email can be another example. Public data release of sensitive client information is another. Stolen financial credentials of both business and personal banking accounts is yet another. The list goes on. Contact us to schedule a complementary scoping call with one of our expert facilitators.
Tabletop exercises are often thought of as C-Suite events where broad business decisions about how to react to different scenarios are tested. However, we can get technical too. Our experts can take your IT staff through tabletop exercises which can test the detailed procedures intended guide staff through such emergencies. By testing these procedures, we can help you determine whether the procedures are practical and appropriately sequenced when applied in an actual event. By having the participation and input of the IT staff actually doing the work, we can help you refine those procedures to serve you better in a real-life incident.
Sometimes a company has specialized processes and functions that are critical to its core business. We can help you stress test your incident and disaster recovery policies and procedures in an safe atmosphere before a real disaster happens. Contact us for a free consultation with one of our experts.