# Tabletop Exercises Program

> From $28K · Managed Security & Incident Response · https://cisomarketplace.services/services/tabletop-exercises

Structured, facilitated simulations of cybersecurity incidents designed to test your organization's incident response capabilities, processes, and decision-making. Our exercises create realistic scenarios to identify gaps, improve coordination, and enhance your incident response effectiveness.

## In scope

- Incident response plan review
- Custom scenario development
- Exercise facilitation
- Decision point evaluation
- Interdepartmental coordination assessment
- Communications procedure testing
- Executive decision-making assessment

## Deliverables

- Exercise findings report
- IR plan improvement recommendations
- Incident response procedure gaps
- Response timeline analysis
- Communications effectiveness assessment
- Executive briefing
- Follow-up exercise roadmap

## Tiers

### Basic Response Exercise: $28K

Single scenario tabletop exercise focused on technical incident response procedures

Limits: participants 15, scenarios 1, sessions 1

Excludes:
- Management and communications team exercise
- Executive participation and executive briefing
- Multiple scenarios
- Follow-up exercise

### Advanced Exercise Program: $45K

Up to 3 scenarios over up to 3 sessions for up to 30 participants, testing technical, communications and management response separately. Adds communications effectiveness assessment, executive briefing, and a follow-up exercise roadmap.

Limits: participants 30, scenarios 3, sessions 3

Includes:
- Everything in the basic tier
- Up to 3 scenarios across technical, communications and management teams
- Communications procedure testing
- Executive briefing of results
- Follow-up exercise roadmap

Excludes:
- Single combined simulation with executives, legal and PR in the room
- Escalating injects across business units
- Crisis communications drafting

### Comprehensive Crisis Simulation: $75K

Full-day crisis simulation plus preparation sessions: up to 5 escalating scenarios over up to 4 sessions for up to 60 participants from executives, technical teams, legal, PR and business units, with live injects and decision-point scoring.

Limits: participants 60, scenarios 5, sessions 4

Includes:
- Everything in the advanced tier
- Full-day multi-team crisis simulation
- Up to 5 escalating scenarios with live injects
- Executive decision-making assessment
- Interdepartmental coordination assessment
- Executive and board-level briefing

Excludes:
- Technical attack simulation against live systems
- Rewriting the IR plan
- Recurring quarterly exercises

## Terms

Starting price shown is the lowest published tier. A written proposal fixes scope, tier and price before anything is signed. Timeline is set in the SOW.

Scope this engagement: https://cisomarketplace.services/scope?service=tabletop-exercises