The Value of a Tabletop Exercise

The Value of a Tabletop Exercise

by Michael Nouguier | Jul 24, 2025

Performing a Tabletop Exercise or a “practice” of your incident response plan is an essential part of preparing for a cybersecurity incident. These exercises enable you to identify what’s most important to your business during a breach, define roles and responsibilities, and determine the resilience of your business in a safe environment.

Just as altitude training builds an athlete’s ability to maintain cognitive function under oxygen debt, tabletop exercises build your organization’s capacity to think clearly during cyber incidents. This goes beyond having an incident response plan: it’s about creating the neurological pathways that enable clear thinking, effective communication, and strategic decision-making when under extreme pressure.

The most effective tabletop exercises mirror altitude training principles: learn more here.

Watch the full webinar on Reaching Cyber Resilience here.

View other key moments from this webinar:

The Power of a Basic Incident Response Plan

Downtime Dollars: How Fast Incident Response Saves Your Bottom Line

The Right Amount of Cyber Insurance

Explore More Insights

  • There are no suggestions because the search field is empty.

Some of these items predate Richey May’s restructuring to an alternative practice structure. Richey May is no longer a CPA firm. All Attest services are provided by Richey, May & Co., LLP.

Our Latest Insights

Looking for more industry expertise and to stay up to date? Check out more from the experts at Richey May below:

When Geopolitics Goes Digital: What Iranian Cyber Activity Means for Businesses

A wise wizard’s job is to warn people before things go wrong. Staying alert before the danger...

When Nobody Owns the Problem: IT/OT Convergence Failures at U.S. Utilities

Nation-state actors are exploiting the organizational gap between IT and OT security teams. For...

Lessons from Unanticipated OT and IoT Vulnerabilities at Major Airports

August 24, 2024. Saturday morning at a major international airport in the Pacific Northwest....

Freddie Mac’s Updated Cybersecurity Requirements: January 1, 2026 effective

As of January 1, 2026, Freddie Mac’s enhanced information security requirements are now in effect,...