This is a free service that your organisation can use to assess and improve its cyber security practices in your own time, in a safe environment, and as many times as you want.
Exercise in a Box provides a selection of cyber security exercises and includes everything you need to plan, set up and deliver the exercises to your organisation.
It also includes a exercise report template that allows you to capture any findings you make during the exercise and use these findings to make meaningful changes to your cyber security posture.
When ready, consider which exercise type is suitable, pick your exercise(s), and download the materials.
Discussion-based exercises:
A discussion-based cyber security exercise, often called a tabletop exercise, is a simulated, non-physical event where participants discuss a hypothetical cyber incident and their organisation's response. It focuses on communication, decision-making, and role clarity without any actual systems being impacted.
- Duration ranges between 30 to 120 minutes
- Includes instructions, scribe sheet, presentation and a post-activity exercise report.
Micro-exercises:
A cyber security micro-exercise is a short, focused activity designed to test and improve your organisation’s ability to respond to specific cyber security threats. It includes interactive and collaborative discussion to role-play and simulate real-world scenarios and potential impacts on your organisation.
- Duration ranges between 15 to 30 minutes
- Includes instructions, presentation and a post-activity exercise report.