What best describes a cyber tabletop exercise?

What best describes a cyber tabletop exercise?

• A. A scenario-based exercise to test cyber incident response and coordination; builds readiness and reveals gaps in plans and procedures.
• B. A purely theoretical tabletop discussion.
• C. A live, hands-on network stress test with real traffic.
• D. A standard compliance review checklist.

Answer: (D)

A cyber tabletop exercise is a scenario-based, discussion-driven drill that tests how an organization would respond to a cyber incident and coordinate across teams, all in a controlled, non-operational setting. The focus is on decision-making, roles, and communication, using realistic injects to walk through actions and reactions against documented plans and procedures. This approach helps reveal gaps in readiness, training, and interdepartmental coordination so improvements can be made before real events occur. This differs from a purely theoretical tabletop, which would be limited to abstract talk without a concrete scenario to challenge how plans are executed. It also isn’t a live, hands-on network stress test with real traffic, which would fall under a live exercise rather than a tabletop. And it isn’t simply a compliance checklist, which reviews documentation and standards rather than practicing incident response and coordination.

A cyber tabletop exercise is a scenario-based, discussion-driven drill that tests how an organization would respond to a cyber incident and coordinate across teams, all in a controlled, non-operational setting. The focus is on decision-making, roles, and communication, using realistic injects to walk through actions and reactions against documented plans and procedures. This approach helps reveal gaps in readiness, training, and interdepartmental coordination so improvements can be made before real events occur.

This differs from a purely theoretical tabletop, which would be limited to abstract talk without a concrete scenario to challenge how plans are executed. It also isn’t a live, hands-on network stress test with real traffic, which would fall under a live exercise rather than a tabletop. And it isn’t simply a compliance checklist, which reviews documentation and standards rather than practicing incident response and coordination.