Executive Tabletop Exercise & After-Action Report
Most incident response plans have never been tested by the people who will have to make the hard calls. Who decides to pay or not pay? Who calls the insurer, the lawyers, the customers, the regulator? Public companies have four business days to disclose a material incident. Carriers and contracts increasingly ask for proof that leadership has practiced.
We build a scenario that fits your business — ransomware, stolen data, a compromised vendor, an insider — and facilitate it with your executives in the room. The exercise moves the way a real incident does, with new facts arriving and decisions due before anyone has the full picture.
Afterward you get an after-action report: where the plan held, where it broke, the decisions that stalled, and a ranked list of fixes with owners. It is written for leadership and board use, and it gives your insurer, customers, and assessors a record that the exercise happened.
Who it's for
- Executive teams and boards that have never practiced an incident together
- Public companies preparing for the SEC four-business-day disclosure rule
- Organizations whose insurer, customer, or framework asks for a tested plan
Call (888) 753-6725. Calls answered 24/7, 365 days a year.