01
Agreement and scope
Bilateral NDA and proposal with scope, rules of engagement and windows defined in writing. Nothing starts without authorization.
← All services// Services · Training
Crisis Simulations (Cyber Drills)
Tabletop exercises and realistic crisis simulations to train technical and executive teams for the worst-case scenario.
// What it is
What it is about
In a real incident, the hardest decisions are not technical: who decides, who communicates, what to say to clients, to the press and to the authorities. Crisis simulations train those decisions before they are needed.
We run tabletop exercises, in discussion format, and hands-on cyber drills, with scenarios based on real incidents.
// When to hire
When it makes sense
- To test the incident response plan before you need it.
- To prepare the board and the communication, legal and IT areas to act together.
- After changes in the team or in the company structure.
// How we do it
From first contact to delivery
A predictable flow, under NDA, with the client informed at every step.
02
Scenario
Building of a realistic scenario for your sector, such as ransomware or a data leak.
03
Exercise
Conduction of the simulation with the technical and executive teams, with decisions under time pressure.
04
Lessons learned
Report with what worked, the gaps found and the improvements to the plan and to the playbooks.
// Deliverables
What you get
- Report of the exercise with the gaps found.
- Recommendations for the response plan and the playbooks.
- Technical and executive teams trained for the scenario.
Every engagement starts with a bilateral NDA. We do not disclose client names, vulnerabilities or incidents without written authorization, and sensitive communication uses encrypted channels (Signal and PGP).
// Related services
You may also like
Incident Management
When the attack happens, we move fast: containment, eradication, recovery and a full forensic report of the incident.
See the serviceRed Team Operations
Complete APT attack simulations, with social engineering and physical and digital intrusion, to assess your organization's real resilience.
See the serviceDigital Forensics
Technical investigation of cyber incidents to determine how the attack happened, collect evidence and support legal action.
See the service