Lion Cipher Lab
Run a tabletop exercise to test your incident plan
- GRC / Compliance
- Beginner
- ~45 min
- Free · no account required
Why it matters
A plan you've never rehearsed is a guess. A tabletop exercise is the cheapest, safest way to test an incident-response plan: participants sit around a table (real or virtual) and talk through how they'd respond to a realistic scenario, step by step, with no real systems affected. It reliably surfaces the gaps you can't see on paper — the contact who isn't reachable, the backup no one knows how to restore, the decision no one is authorized to make — while it's still cheap to fix them, instead of discovering them at 2am during a real breach. Tabletops are a staple of serious security programs…
What you'll learn
- what a tabletop exercise is
- writing a realistic scenario with injects
- facilitating a discussion-based exercise
- capturing gaps and action items
- improving a plan from what you learn
Steps in this lab
- What a tabletop exercise is
- Set a small, clear objective
- Write a realistic scenario with injects
- Facilitate: ask, don't lead
- Capture gaps and action items as you go
- Debrief and improve the plan
- Why talking through it beats hoping