Tabletop Exercise
Tabletop Exercise ⫘
Service Overview ⫘
An incident response (IR) Tabletop Exercise assembles primary stakeholders and uses a scripted incident scenario to practice incident response. The exercise facilitator releases information in a controlled manner that will guide the exercise, while each stakeholder describes their response as if it were a real incident. An IR Tabletop Exercise is an efficient way to familiarize your organization's personnel with IR practices and the exercise proactively tests existing response capabilities, including the validation of roles, responsibilities, coordination, and decision making.
Service Methodology ⫘
In preparation for an IR Tabletop Exercise, Secureworks will distribute a brief questionnaire to gather information and understand your goals and expectations.
Information and insights collected through the questionnaire will be used to develop content for the IR Tabletop Exercise, which will be held either remotely or on-site. For some engagements, Secureworks may request a brief scoping teleconference with relevant parties to discuss the scope of the IR Tabletop Exercise.
When the engagement is assigned to a consultant, Secureworks will collaborate with you to develop and customize the IR Tabletop Exercise for your organization. Before the IR Tabletop Exercise is conducted, you will be provided with the proposed content to be used for the Tabletop Exercise and Secureworks can adjust the content as needed.
The standard IR Tabletop Exercise accommodates up to 15 participants and includes one scenario (approximately two hours) with a corresponding debrief session, in a conference room setting.
Outcome ⫘
At the close of the Engagement, you will receive an IR Tabletop Exercise Report that summarizes the event activities with risk-prioritized findings and recommendations to improve IR practices.
Standard IR Tabletop Exercise Reports may include the following:
- Exercise goals
- List of participants
- Description of the exercise scenarios
- Findings and observations
- Areas for development and recommendations
Scope and Service Units ⫘
On-site or remote; most tabletop exercises consist of up to two hours for delivery time during the course of one business day; each scenario may include up to 15 participants
A minimum of eight Service Units are required; Service Unit consumption may vary depending on scenario planning and facilitation requirements