03 · Testing
A plan that has not been exercised remains a document. We review the roles, the contact tree, and the detection path, then facilitate a tabletop based on a scenario the organisation could face: ransomware during business hours, a misused finance or rates mailbox, exposed personal information, or failure of a public portal.
Readiness means your people can make a decision quickly when an incident occurs.
Review of the plan, the roles, and the contact tree
A tabletop built from a credible scenario
Detection and escalation, including after hours
Decisions for executives and for public communications
Evidence-handling expectations
An after-action record with owners and dates
A readiness assessment in plain language
The drill record, including where time was lost
A short list of changes to roles, access, and communications
Material a general manager or deputy can take to the executive
Engagement. A read of the current arrangements, then a facilitated drill and an after-action record.
Suitable for. Organisations that have a plan, a provider, or both, and need to know whether staff can use them under pressure.
Contact
Book a call about the system, your sector, and what you need to achieve.
Book a call