Cyber crime incidents can escalate quickly from a technology problem into a broader business disruption. Email stops working. Systems slow down or fail. Employees begin reporting the same issues across the organization. While technical teams investigate, leadership must make decisions about communications, priorities, and continuity with limited information.
These cyber crime tabletop exercises are designed to help organizations test how management will respond when a cyber incident begins affecting operations. The focus is not on technical remediation. It is on leadership coordination, internal and external communications, decision-making under pressure, and business resumption as the situation unfolds.
Each exercise below applies this scenario to a specific industry context, helping teams work through how the situation would affect their organization’s structure, obligations, and operational priorities.
The following exercises apply this scenario to different industries, helping organizations evaluate how a cyber incident would affect their operations, responsibilities, and response priorities.
Overview: A cyber attack disrupts the bank's internal network, slows systems to a crawl, prevents email from sending, and causes workstations to reboot unexpectedly. Leadership must assess the situation quickly, coordinate communications, and manage operational disruption while the attack unfolds.
Exercise Focus: Crisis Management, Communications, Business Resumption
View Cyber Crime Tabletop Exercise Details...
Overview: A cyber attack disrupts the association's internal network, slows systems to a crawl, prevents email from sending, and causes workstations to reboot unexpectedly. Leadership must assess the situation quickly, coordinate communications, and manage operational disruption while the attack unfolds.
Exercise Focus: Crisis Management, Communications, Business Resumption
View Cyber Crime Tabletop Exercise Details...
Overview: A cyber attack disrupts systems, threatens member data, and forces immediate response decisions. Credit union leadership must manage containment, communications, and regulatory considerations while maintaining critical operations.
Exercise Focus: Cyber Incident Response, Crisis Management, Communications
View Cyber Crime Tabletop Exercise Details...
Overview: A cyber attack disrupts systems, communications, and daily operations without warning. Leadership must assess the threat, coordinate communications, and manage business resumption while the incident unfolds.
Exercise Focus: Crisis Management, Communications, Business Resumption
View Cyber Crime Tabletop Exercise Details...
Overview: A cyber attack disrupts systems, communications, and daily operations without warning. Health care leadership must assess the threat, coordinate communications, and maintain continuity of care and operations while the incident unfolds.
Exercise Focus: Crisis Management, Communications, Business Resumption
View Cyber Crime Tabletop Exercise Details...
Overview: A cyber attack disrupts systems, communications, and daily operations without warning. Leadership must assess the threat, coordinate communications, and maintain continuity of claims processing and customer service while the incident unfolds.
Exercise Focus: Crisis Management, Communications, Business Resumption
View Cyber Crime Tabletop Exercise Details...
Overview: A cyber attack disrupts the law firm's internal network, slows systems to a crawl, prevents email from sending, and causes workstations to reboot unexpectedly. Leadership must assess the situation quickly, coordinate communications, and manage operational disruption while the attack unfolds.
Exercise Focus: Crisis Management, Communications, Business Resumption
View Cyber Crime Tabletop Exercise Details...
