Skip to content

Glossary · Social engineering and simulation

Tabletop exercise

A discussion-based rehearsal in which a team walks through how it would respond to a realistic incident.

What is a tabletop exercise?

A tabletop exercise is a discussion-based rehearsal in which a team walks through how it would respond to a realistic incident, such as ransomware or a data breach, step by step. It tests plans, roles and decisions without touching production systems.

How it works

A facilitator presents a scenario in stages, called injects, and the team decides what to do at each one: who to call, what to shut down, what to tell customers and regulators. Gaps in the plan surface as questions no one can answer.

Executive tabletops focus on decisions such as disclosure and ransom; technical tabletops focus on containment and recovery.

Why it matters

Teams that have rehearsed respond faster and make fewer costly mistakes. Regulators and cyber insurers increasingly expect to see evidence of exercises.

How Living Security helps

VTX, the Virtual Tabletop Experience, lets teams practice the breach before it happens, and supports your incident-response training and exercise program.

See which people and AI agentsare driving your risk.

A live walkthrough with our team, on the tools you already run.

  • 68%Less time in a risky state after targeted action (2026 Human Risk Report)
  • LeaderNamed Leader in the Forrester Wave™: Human Risk Management Solutions, Q3 2024
Book a demo