What is a tabletop exercise?

What is a tabletop exercise?

• A. A live-fire simulation.
• B. A production deployment rehearsal.
• C. A discussion-based exercise to assess and improve incident response without live systems.
• D. A hardware replacement drill.

Answer: (C)

A tabletop exercise is a discussion-based drill used to evaluate and improve incident response plans in a non-operational environment. Participants gather to walk through a hypothetical incident, focusing on roles, responsibilities, decision points, escalation procedures, and communication between teams. A facilitator presents scenario injects and guides the discussion, helping the group identify gaps, bottlenecks, and areas for training or process improvement. Because no live systems are involved, it’s a safe way to rehearse how the organization would respond, refine playbooks, and agree on who does what and when. This approach differs from live-action testing, which uses real systems and active operations; from production deployment rehearsals, which test deploying changes into the live environment; and from hardware replacement drills, which center on physically swapping components.

A tabletop exercise is a discussion-based drill used to evaluate and improve incident response plans in a non-operational environment. Participants gather to walk through a hypothetical incident, focusing on roles, responsibilities, decision points, escalation procedures, and communication between teams. A facilitator presents scenario injects and guides the discussion, helping the group identify gaps, bottlenecks, and areas for training or process improvement. Because no live systems are involved, it’s a safe way to rehearse how the organization would respond, refine playbooks, and agree on who does what and when.

This approach differs from live-action testing, which uses real systems and active operations; from production deployment rehearsals, which test deploying changes into the live environment; and from hardware replacement drills, which center on physically swapping components.