Best practices for using tabletop exercises to prepare for cyberattacks

Based on the Sophos Cybersecurity team's own approach, this guide aims to help organisations prepare for potential attacks. It covers:

• The different types of security tabletop exercises
• Examples of cybersecurity scenario themes we have run at Sophos
• 17 best practices for developing an effective tabletop exercise

Additionally, the report includes a link to a ransomware tabletop scenario we developed and executed at Sophos, which you can use directly or adapt to create your own.