Test your response before an attacker tests it for you.
You can’t know how your leadership team will perform under a live ransomware attack until you put them through one. In a focused three-week engagement, we design, facilitate, and summarize an executive ransomware tabletop built around your environment — pressure-testing the decisions, escalation paths, and communications that matter most when every minute counts.
What’s included
- Week 1 — Design: We build a realistic ransomware scenario and injects tailored to your business, systems, and threat profile.
- Week 2 — Facilitate: We run a live, executive-level tabletop that stresses your people, plans, and tools.
- Week 3 — Summarize: We deliver an After-Action Report and a prioritized resilience roadmap to close the gaps we surfaced.
Outcomes: Executive ransomware tabletop, After-Action Report, and a risk-prioritized resilience roadmap.
“Theron led our cybersecurity tabletop engagement to a highly successful outcome. He communicated early and often, stayed on schedule, and consistently delivered thoughtful, well-organized work that influenced our team. Theron is one of the most effective and professional consultants I have worked with—and a true partner committed to shared success.”
Mary Youngman
Senior Project Manager, Large Professional Services firm
Aligned with NIST guidance
Our tabletop methodology maps to the NIST frameworks your auditors, regulators, and cyber insurers expect:
- NIST SP 800-61 Rev. 3 (2025) — Incident Response Recommendations and Considerations for Cybersecurity Risk Management. Tabletop exercises are a High-priority activity under the Improvement category (ID.IM-02).
- NIST Cybersecurity Framework (CSF) 2.0 — exercises the Govern, Respond, and Recover functions and feeds the continuous-improvement loop at the core of the framework.
- NIST SP 800-84 — Guide to Test, Training, and Exercise Programs for IT Plans and Capabilities. Our design, facilitation, and after-action reporting follow its methodology.
- NIST SP 800-53 — supports Contingency Plan Testing (CP-4) and Incident Response Testing (IR-3) control requirements.
The offer: A fixed-fee tabletop package — clear scope, clear price, no surprises.