root@oem-plant:~/incident-response$ _
STATUS: STANDBY
> initializing tabletop_exercise.sh

RANSOMWARE READINESS

Your team will make decisions under time pressure, with incomplete information — the way a real incident actually unfolds. There are 10 challenges, 3 minutes each. Each challenge has 3 required questions — you can't move on until all 3 are answered, and every answer must be discussed and agreed on by the whole team. When the clock hits zero, the screen advances on its own, so lock in your answers before it runs out.

01–03
Detection, first technical call, and the incident spreading
04–07
Root cause, extortion, media pressure, and public exposure
08–10
Safety risk, customer pressure, and the final business decision
TEAM: UNIT
04:00
CHALLENGE 1 of 6
INCOMING TRANSMISSION

unsaved

DEBRIEF // PRESENTATION LOG

Team