A discussion-based cyber security exercise, often called a tabletop exercise, is a simulated, non-physical event where participants discuss a hypothetical cyber incident and their organisation's response. It focuses on communication, decision-making, and role clarity without any actual systems being impacted.
- Duration ranges between 30 to 120 minutes
- Includes instructions, scribe sheet, presentation and a post-activity exercise report.