FREE TEMPLATE · WORD TEMPLATE
Cyber tabletop exercise kit
A complete kit to plan, run and document a two- to three-hour cyber tabletop exercise. It contains a planning sheet, four ready-to-adapt scenarios with timed injects, a facilitator script, an evaluation form and an after-action report structure that supervisors and auditors can follow.
What's inside
- Exercise charter and planning sheet with objectives, scope, roles and logistics
- Four scenario outlines with 10 to 12 timed injects each: ransomware with exfiltration, MSP compromise, business email compromise and prolonged SaaS outage
- Facilitator script with ground rules, stage prompts and hot debrief questions
- Observer log and evaluation form scored per objective
- After-action report template with improvement plan and management body approval
- Evidence checklist mapped to NIS2, Implementing Regulation 2024/2690, DORA and CyFun
Sections
How to use it
- Complete the charter and planning sheet four to six weeks before the exercise and get it approved.
- Choose one scenario, adapt the injects to your systems, suppliers and reporting obligations, and keep it away from the players.
- Run the session using the facilitator script while observers complete the log.
- Score each objective on the evaluation form within a week and write the after-action report.
- Transfer every improvement action to your action register and present the report to the management body.
Companion playbook
Cyber tabletop exercise playbook: plan, run and evidence it →
Same house style as every Secrato template: a start sheet with instructions, light blue cells to fill in, and version control. Free to use within your organisation. This template is practical guidance, not legal advice.
Get the template
Enter your work e-mail and we will send you a personal download link straight away. We may follow up with related guidance; you can opt out at any time.
