Tabletop exercises
Scenarios such as ransomware or data leakage, run separately for executives and technical teams.
Service offering
Tabletop and IR preparedness
Practice for a cyber incident before it happens, with your executives and engineers in the room.
We test how your people respond to a cyber incident before a real one happens: scenario-based tabletop exercises for executives and technical teams, communication drills and a check of forensic readiness. Findings become an action plan with owners, and the incident response plan is updated to match.
Scenarios reflect the regional context: notifying bodies such as the UAE Cyber Security Council or the NCA in Saudi Arabia, speaking to media in Arabic and English, and incidents that fall on weekends or during Ramadan and Eid.
What we deliver
Communication drills
Practice with legal, communications and regulator notification steps, including who speaks and when.
Forensic readiness
A check that logs, retention and evidence handling would support an investigation.
Risk-based priorities
Work ranked by the threats and findings that matter most to your organisation, not by tool features.
Evidence for reviewers
Each change documented, so internal audit and regulators can see what was done and why.
When to run a tabletop exercise
Run one after a major change, before a peak period, or when the response plan has not been tested for a year.
- The incident response plan has never been exercised with executives.
- Roles for legal, communications and regulator notification are unclear.
- Logs needed for an investigation may not be kept long enough.
Talk to us about tabletop and IR preparedness
Share your constraints, compliance themes and timeline. We will return a phased approach, a staffing model and a risk register for your stakeholders to review.