06/10/2026

Tabletop Exercises: What Actually Makes Them Useful?

Looking for ideas and practical tips from others here around tabletop exercises!

More organizations are running simulated cyber incident scenarios to test how teams respond under pressure, not only technically, but also across communication, escalation, decision making, and coordination between teams.

Typical scenarios can include:

  • ransomware

  • supplier compromise

  • API outages

  • large-scale DDoS attacks

Curious what worked well in your organization:

  • Scenarios you recommend simulating?

  • Useful tools or frameworks?

  • Tips that made the exercise more realistic or effective?

  • Things you discovered only during the exercise itself?

Stay safe and proactive