Tabletop Exercise (TTX)
Tabletop Exercise (TTX)
A security plan is only as good as your team’s ability to execute it under pressure. Iron Fist Labs provides professional Tabletop Exercise (TTX) services designed to test your “paper plans” against reality. This is a focused, discussion-based session where key stakeholders from IT and security to executive leadership, HR, and legal counsel navigate a simulated cyber crisis scenario (e.g., ransomware attack, data breach, or insider threat).
We offer a low-stress, high-impact environment to validate your readiness. Whether you are a financial firm or a regional manufacturer, our simulations identify critical weaknesses in processes, gaps in communication, and misalignment between technical teams and executive decision-makers, ensuring everyone knows their battle station when chaos strikes.
The Challenge
Many SMBs and mid-market organizations invest in Incident Response Plans (IRP) but never test them, creating a “paper tiger”—a plan that looks good in a binder but fails during a real event. Without practice, confusion reigns during the critical first hours of a breach.
Our Approach
Custom Scenario Design
We collaborate with you to create a specific, realistic narrative (e.g., a supply chain compromise halting production lines, or BEC fraud targeting your accounts payable). We align scenarios with NIST and ISO frameworks to challenge your specific Incident Response and Business Continuity Plans.Custom Scenario Design
We collaborate with you to create a specific, realistic narrative (e.g., a supply chain compromise halting production lines, or BEC fraud targeting your accounts payable). We align scenarios with NIST and ISO frameworks to challenge your specific Incident Response and Business Continuity Plans.
Facilitated Discussion & “Injects”
Our certified facilitators guide participants through the scenario, introducing evolving complications known as “Injects” (e.g., “The attackers just leaked customer data,” or “Your backup server is encrypted”). This forces real-time decision-making.Facilitated Discussion & “Injects”
Our certified facilitators guide participants through the scenario, introducing evolving complications known as “Injects” (e.g., “The attackers just leaked customer data,” or “Your backup server is encrypted”). This forces real-time decision-making.
Cross-Functional Participation
We bridge the gap between the server room and the boardroom. We ensure IT, Legal, HR, Finance, and Executive Management are all present to identify crucial procedural disconnects.Cross-Functional Participation
We bridge the gap between the server room and the boardroom. We ensure IT, Legal, HR, Finance, and Executive Management are all present to identify crucial procedural disconnects.
Actionable Debrief
The exercise is immediately followed by a “Hot Wash” debrief to capture fresh feedback on what worked and what failed.Actionable Debrief
The exercise is immediately followed by a “Hot Wash” debrief to capture fresh feedback on what worked and what failed.