Incident Response & Digital Forensics

Crisis Simulation & Tabletop Exercises

Fail in a conference room rather than in production.

The situation

Facilitated exercises that put decision-makers under realistic pressure — from a two-hour executive tabletop to a multi-day technical simulation with injects, media pressure and a regulatory clock running.

The value is in the gaps discovered: the authority nobody holds, the contact list that is out of date, the assumption that the backups are tested. Every exercise ends with a specific, owned improvement plan.

What the client receives

Schedule of deliverables

01Scenario design tailored to the organisation's real threat profile
02Executive and board-level tabletop facilitation
03Technical team simulation with live injects
04Cross-functional exercise covering legal, communications and operations
05Regulatory notification drill against real clocks
06Observation report and prioritised improvement plan

Frameworks and standards

Assessment is carried out against named references, so a conclusion can be traced back to the requirement it was measured against.

NIST SP 800-84
ISO 22398
ENISA exercise guidance
DORA Art. 11(6)

Incident Response & Digital ForensicsIncident Response Planning & PlaybooksPlans written by people who have run the incident, not the template.Service detail Incident Response & Digital ForensicsCompromise AssessmentAnswer the question 'are we already breached?' before the attacker answers it for you.Service detail

Discuss this engagement

Tell us about who should be in the room and the scenario you fear most and we will set out the scope, the method and the reporting format.