Should Your Company Have a Tabletop Exercise?

Let’s think about a scenario – hackers accessed your network and deployed ransomware. Or there was a crazy weather event and now your main location is non-functional.

Is your team prepared if something were to happen? Do they know where those procedures are, what to do, what questions to ask, who needs to be involved, and what those people's unique roles are, and are they trained and ready to handle them? It's important to go through doing those because if you're not practicing, how prepared are you going to be when the security event happens, and time is of the essence.

This is where a tabletop exercise can be valuable. A tabletop exercise is an opportunity for your organization to practice what happens in the event of an incident. The most common tabletop exercises are incident response and disaster recovery. This is where people within your organization can work in a simulated environment to resolve a problem using the process and procedures that you should have in place. The goal is that when an actual event happens, they are well prepared.

If you don't know what to do, you're going to waste valuable time that could allow the threat actors to continue to gain initial access, exfiltrate data, or cause additional harm.

It's the same reason why we did fire drills and tornado drills. It’s so, when bad situations happen, everyone who has a role to play knows what to do and is ready to execute their responsibilities. Contact us if we can help!