Security Incident Tabletop Exercise Fundamentals: sample practice worksheet

Fictional practice only. Use invented details; do not enter personal, client or confidential data.
This preview is not a completed assessment, legal opinion, audit or certification.

Exercise: Practical Exercise: Turn Observations Into Actions
Produce a short after-action record with evidence from the discussion, an owner for each improvement, a target date and a recheck method. Prioritise a small set of changes for the organisation's own plan.

1. Describe the fictional organisation, process or system and its scope.

2. Identify three relevant risks or obligations. For each, record a control, owner and evidence you would request.

3. List assumptions, gaps and two questions to ask before relying on the result.

4. Propose one next action and explain how you would check that it worked.

Learning takeaway: An exercise decision log, draft holding statement and prioritised after-action improvement register.

This facilitated fundamentals exercise is not a penetration test, certification, compliance audit or proof that a real incident response will succeed. The Certificate of Completion records attendance. Organisation-specific validation and improvement remain the participants' responsibility.

Programme: https://orbixtech.my/training-security-incident-tabletop-exercise-malaysia