Tabletop exercises test how well a team or process works by simulating a situation and acting out the planned response action. They have long been a valuable tool to prepare for adverse scenarios.
This guide explains what security tabletop exercises are and how to run them. It is based on the approach that is used by the Sophos Cybersecurity team to prepare our own organization for an attack. Transparency is a longstanding cornerstone of Sophos’s philosophy, and we are pleased to share our strategies and resources.