Tabletop exercise

A discussion-based exercise: a facilitator presents a scenario, such as ransomware encrypting the file server, and the people named in a plan talk through what they would do, which tests whether the plan works. No real systems are touched, so it is a cheap way to expose gaps in decision rights, external reporting and contact lists. Include management, legal and communications staff.

Further reading: csrc.nist.gov

All terms