# Incident Response Readiness & Tabletop Exercise

> From $25K · Managed Security & Incident Response · https://cisomarketplace.services/services/incident-response-readiness-tabletop-exercise

Comprehensive incident response assessment and tabletop exercise designed to validate your organization's IR preparedness through focused policy review, stakeholder coordination validation, and scenario-based team exercises. Our specialized approach combines industry-standard IR maturity assessment with practical tabletop simulations to enhance your incident response capabilities, team coordination, and regulatory compliance readiness.

## In scope

- Comprehensive IR policy review and gap analysis against industry standards (6 hours)
- Current incident response capability maturity assessment (4 hours)
- Insurance and legal coordination validation with carrier requirements (4 hours)
- Threat landscape analysis and scenario development (6 hours)
- Multi-scenario tabletop exercise facilitation (4 hours)
- Team readiness discussion and role validation session (3 hours)
- Interactive Q&A on IR procedures and decision-making (2 hours)
- OSINT research on insurance claims history and provider ecosystem (3 hours)
- Process walkthrough using developed scenarios with timing analysis (4 hours)
- Communication and escalation pathway validation (2 hours)
- Technical response capability assessment (4 hours)
- Post-exercise analysis and improvement recommendations (3 hours)

## Deliverables

- Comprehensive IR readiness assessment report (15-20 pages)
- Current state vs. industry benchmark analysis
- Priority recommendations matrix with timeline and resource requirements
- Validated quick reference contact sheet and escalation procedures
- 3-5 relevant walkthrough scenarios based on threat intelligence
- Detailed after-action report from tabletop exercise
- Process improvement recommendations with implementation roadmap
- Team readiness assessment with skills gap analysis
- Insurance and legal coordination optimization plan
- Communication template library for various incident types
- Regulatory compliance mapping and requirements
- Executive summary with board-ready metrics

## Tiers

### Essential IR Assessment & Tabletop: $25K

IR policy review and maturity rating, insurance and legal contact validation, then one 3-4 hour tabletop with up to 2 scenarios for up to 15 participants. 45 consulting hours, after-action report and priority recommendations.

Limits: participants 15, scenarios 2, sessions 1, hours 45

Includes:
- IR policy gap analysis and maturity rating
- Insurance carrier and legal coordination check
- One 3-4 hour facilitated tabletop
- Validated contact sheet and escalation procedures
- After-action report with priority matrix

Excludes:
- Stakeholder interviews beyond the core IR team
- Full-day exercise
- Regulatory reporting requirements mapping
- Follow-up review after the report

### Comprehensive IR Readiness Program: $42.5K

Adds up to 10 stakeholder interviews, one full-day tabletop with up to 3 scenarios for up to 30 participants, a 15-20 page after-action report, regulatory reporting requirements mapping, and a 90-day follow-up review. 80 consulting hours.

Limits: participants 30, scenarios 3, sessions 2, hours 80, months 3

Includes:
- Everything in the Essential tier
- Up to 10 stakeholder interviews
- Full-day immersive tabletop
- Regulatory reporting requirements mapping
- Communication template library
- 90-day follow-up review session

Excludes:
- Separate executive-only exercise
- Crisis simulation gaming platform access
- Recurring quarterly assessments

### Enterprise IR Transformation: $67.5K

Advanced incident response program with multi-scenario exercises, crisis simulation gaming platform access, executive briefings, custom scenario development, and quarterly maturity assessments

Limits: participants 50, scenarios 5, sessions 5

Excludes:
- Incident response retainer or live incident handling
- Rewriting the full IR plan
- Technical attack simulation against production systems

## Terms

Starting price shown is the lowest published tier. A written proposal fixes scope, tier and price before anything is signed. Timeline is set in the SOW.

Scope this engagement: https://cisomarketplace.services/scope?service=incident-response-readiness-tabletop-exercise