The Best Way to Know How You’ll Respond
Our Cyber Security Exercises – Tabletop Exercises service offers a comprehensive suite of realistic, interactive scenarios designed to test and enhance organisations’ cyber resilience across all areas, including Boards, Information Technology, Cybersecurity, and end-users.
With extensive experience across various sectors, our exercises are tailored to simulate real-world cyber incidents, challenging participants to actively engage in the decision-making process, thereby enhancing their preparedness and response capabilities.
Types of Exercises Provided
- Crisis Management and Incident Response: Test the organisation’s incident response plan through the simulation of major cybersecurity incidents.
- Business Continuity and Disaster Recovery: Assess the organisation’s resilience in maintaining or quickly resuming operations during/after cyber-attacks.
- Risk Assessment and Risk Management: Highlight different cyber risks to guide strategic risk management practices.
- Regulatory Compliance and Legal Implications: Explore regulatory or legal scenarios to emphasise the organisation’s compliance obligations.
- Supply Chain and Third-Party Risks: Focus on the implications of third-party and supply chain-related cyber incidents.
- Cybersecurity Awareness and Culture: Promote a security-conscious culture within the organisation through engaging discussions and activities.
Sectors with Experience
- Banking and Finance
- Federal, State, and Local Government
- Emergency Management
- State Security and Law Enforcement
- Information Technology Industry
- Legal
- Consulting
- Critical Infrastructure (Energy, Ports, Defence, Data Centres, Water and Sewage, Communications, Healthcare and Medical, Data Processing and Storage, Food and Groceries, Space Technology, Transport, Higher Education)
- Casinos
- And more…
Exercise Frameworks Used
- NIST Special Publication 800-61R2
- ISO/IEC 27035
- SANS Institute Incident Handlers Handbook
- CERT Division’s Computer Security Incident Response Team (CSIRT) Service Framework
- The Incident Response Consortium IR Framework
- Cyber Kill Chain
- MITRE ATT&CK Framework
- Excite Cyber Custom Framework
Customisation and Realism
All exercises are hyper-realistic, placing participants as close as possible to real-world scenarios.
Our approach ensures active engagement, not passive observation, providing a true taste of incident response.
Exercises are based on Critical Incident Management and Critical Incident Response and can be customised to meet client organisations’ specific needs and target audience requirements.
Outcomes and Objectives
- Improved crisis communication and teamwork under pressure.
- A detailed understanding of their roles during cyber incidents.
- Enhanced ability to apply cybersecurity protocols effectively.
- Increased speed and efficiency in incident response and decision-making.
- Insight into organisational cyber risk profile and readiness state.
Follow-Up Services
- Detailed Debriefing Sessions: To analyse performance, highlight successes, and identify areas for improvement.
- Actionable Improvement Plans: Tailored recommendations for enhancing policies, procedures, and responses based on exercise outcomes.
- Progress Assessments: Scheduled follow-ups to assess improvements and update plans as necessary.
- Retesting Services: Option to conduct subsequent exercises to measure progress against initial benchmarks and ensure readiness over time.
Who Should Use This Service
- Boards, IT departments, cybersecurity teams, and end-users interested in experiencing realistic cyber incident response scenarios.
- Any organisation aiming to enhance its cybersecurity preparedness and incident response capabilities.
About Excite Cyber
We are cyber, technology and business experts who asked ourselves, what would the world look like if you could be truly fearless with your business, and what if the very best cyber expertise could be integrated into robust, outcome-focused technology solutions?
Our approach is to be deeply consultative and deliver pragmatic and strategic services that work for your business. With an uncompromising approach to cyber security, we deliver solutions that will get you excited about the potential for technology all over again.
Our Latest Perspectives
How to best address remote working risk in the Australian energy sector
The status of remote working is an interesting and dynamic one. On the one hand, employees do appreciate the flexibility and potential for work-life balance,
“Human Error” Continues To Plague Cyber Security Efforts… Can More Be Done?
Most data breaches have nothing to do with hackers coding in the sinister darkness somewhere, as Hollywood likes to portray. In fact, the latest Australian
How AI Can Enhance Cyber Security For The Energy Sector in Australia
You only need to look at what happened in the US when the Colonial Pipeline was taken down via a cyber attack to understand why
Get Started with Excite
We are ready to collaborate with you every step of the way to protect your business and enable you to benefit from decades of experience in providing managed services.
To get started, schedule a complimentary call using the form below today.
Frequently Asked Questions
Absolutely. Our exercises are designed to be adaptable, ensuring relevance to your organisation’s unique cyber landscape, including specific sector-related challenges and regulatory requirements.
Our exercises are aligned with internationally recognised frameworks such as NIST SP 800-61R2, ISO/IEC 27035, and the MITRE ATT&CK Framework, ensuring a comprehensive approach to cyber incident response.
The frequency of tabletop exercises can vary depending on the organisation’s size, complexity, and industry. However, it is generally recommended to conduct them at least annually or whenever significant changes occur in the business or IT environment.
