Understanding Customer Requirements and Custom Scenario Preparation
The first step in our Tabletop Exercise process is to gain a thorough understanding of the specific requirements of the customer. We work closely with the clients to gather their needs and expectations. On the basis of these insights, we custom tailor a scenario that aligns with the type of attack the customer desires, e.g., ransomware attack, supply chain attack. This scenario is prepared to mimic the client's real-world environment and challenges.

Scenario Execution
The exercise is then executed, typically in a theoretical format. During this phase, we describe the situation, which typically escalates, and provide 'clues' that defenders would see or discover. Each exercise involves an ethical hacker, a facilitator guiding the exercise, and a note-taker.

Flexibility and Adaptation
Within the exercise, there is room for flexibility. We can deviate from the initial scenario and adapt to new situations as they arise. This improvisational aspect allows us to simulate real-world uncertainties and challenges that organisations may face during an actual incident.

Evaluating Organisational Response
The primary goal of the exercise is to assess the organisation's ability to respond to the incident. We carefully observe how the participants react, communicate, and make decisions throughout the exercise. This evaluation is a critical aspect of gauging the organisation's preparedness, and we provide feedback immediately after the exercise concludes.

Final Report and Workshop
Following the tabletop exercise, we provide a comprehensive final report that outlines the exercise's findings and highlights areas for improvement. We also conduct a workshop and provide materials for scenario analysis, allowing clients to delve deeper into the results of the exercise and enhance their incident response capabilities if desired.