Cybersecurity Tabletop Exercises, On Demand
Run a professional incident-response tabletop exercise without hiring a consultant.
IncidentKit builds a fully customized tabletop exercise for your organization — executive overview, timed injects, facilitator instructions, and after-action templates — delivered as a polished PDF and editable PowerPoint in minutes.
Educational material only — not legal, regulatory, or incident-response advice.
How it works
- 1
Choose your scenario
Organization type, size, scenario, roles, duration, and difficulty.
- 2
Preview the outline
See a concise, free outline before you pay anything.
- 3
Get your package
A complete PDF and PowerPoint package, ready in minutes, delivered by email.
Choose from five realistic scenarios
Ransomware
Core systems are encrypted and a ransom note demands payment. Practice detection, containment, business continuity, and disclosure decisions.
Business Email Compromise (BEC)
An attacker impersonates an executive or vendor to redirect a payment or extract sensitive data through email.
Third-Party / Vendor Breach
A key third-party vendor discloses that their systems — which touch your data — have been compromised.
Insider Data Theft
An employee or contractor is suspected of exfiltrating sensitive data before departing the organization.
Lost or Stolen Device
A laptop or phone with access to company systems is lost or stolen in a public place.
Every package includes
- Executive overview
- Exercise objectives
- Preparation checklist
- Participant roles
- Initial scenario briefing
- 6-10 timed injects
- Facilitator instructions for every inject
- Discussion & decision questions
- Expected actions
- Decision log template
- Observer notes template
- After-action report template
- Remediation tracker
- High-level NIST CSF references
Ready to run your first exercise?
Free to preview. $39 for one exercise, or $69 for a five-exercise bundle.
Build Your Exercise