Incident Response
Incident response around the clock. When a cyberattack hits, our team responds right away and limits the damage to your…
ViewDefensive Services
Tabletop exercise for companies
In the middle of a cyberattack it is too late to work out who decides, who informs the authorities and where the emergency numbers are kept. In a tabletop exercise we play through a realistic attack with your management, IT and business units. Afterwards you know what works in an emergency and where things get stuck.
Process
How the exercise works
The exercise takes place at the table. We do not change anything on your systems.
01
Preparation
we agree the scenario, participants and goals with you and look at your incident response plan and reporting channels, if they already exist.
02
Exercise
we guide you through the scenario for half a day, on site or online. The situation develops in rounds, and participants decide as they would in a real incident: who do we inform, what do we shut down, what do we report and to whom?
03
Debrief
right afterwards we go through together what went well and where information, responsibilities or approvals were missing.
04
Report
you receive the results in writing, with a list of measures ranked by urgency.
Scenarios
Possible scenarios
We tailor the scenario to your industry, your systems and your processes. The closer it is to your everyday work, the more you get out of the exercise.
01
Ransomware encrypts servers and brings production or accounting to a halt
02
The managing director's mailbox is taken over and customers receive fake payment instructions
03
A service provider reports an attack, and your data is affected
04
An extortion group threatens to publish stolen data
01
Participants
Who should take part
Management, IT and information security always take part. Depending on the scenario, communications, legal and data protection, HR and the affected business units join them. The coordination between these roles is where most gaps show up in a real incident.
02
NIS2
Tabletop exercise and NIS2
The exercise is a good way to run through the NIS2 reporting chain under time pressure: early warning to the BSI within 24 hours, notification within 72 hours. The report can also serve as evidence that your incident response plans have been tested. More on the overall implementation on the NIS2 consulting page.
03
Real incident
When it gets serious
If an attack actually happens, our incident response takes over. Teams that have practised the procedures lose far less time in the first hours. For technical teams we also offer hands-on workshops on detecting and repelling attacks.
Get in touch. In a first conversation we agree the scenario and participants, and then you receive a quote.
FAQ
Frequently asked questions
How long does an exercise take?
The exercise itself takes half a day. On top of that come a preparatory call to agree the scenario and the written debrief.
Does the exercise take place on site or online?
Both are possible. On site there is usually more energy in the room, while online makes it easier to include several locations.
Do we need an incident response plan first?
No. If there is none, the exercise shows very clearly what it should contain. On request we help you write it afterwards.
How often should we practise?
Once a year is a good rhythm, and also after major changes such as a new IT service provider or a change in management.
Defensive Services
More in this area
Quantum Cryptography (QaaS)
Harvest now, decrypt later already affects data encrypted today. Cryptographic inventory, assessment by lifetime and hy…
ViewAI Threat Detection
Signatures catch what is known. NeoI catches deviations from your normal state, so attackers who use only legitimate to…
ViewFirewall & Intrusion Detection
Firewall, segmentation and intrusion detection as one architecture that we plan, implement and operate. With Valar as a…
ViewLeak Check
We check which data breaches affect your company domains and which accounts appear in them. With a report and concrete …
ViewContact
Reputation takes years. Destruction takes seconds.
Talk to us before somebody else does. The first conversation is free and we reply the same business day.