Saint field guide / Readiness
Make the first tabletop
worth the time
A good exercise explores decisions and dependencies. It should leave the organization with practical improvements, not just a completed meeting.
Saint Media Group / Readiness / 4 minute read
Choose one useful objective
Decide what you want to learn. That might be how leadership escalates a suspected incident, how the business continues without email, or how technical facts become an approved customer update. A focused objective makes the exercise easier to evaluate.
Bring the decision-makers
Include the people who would actually own technical response, operations, leadership, communications, and relevant external coordination. Identify where an absent stakeholder would become a dependency.
Use a plausible scenario
Choose a situation that reflects your business and current environment. A facilitated discussion can introduce new information gradually and ask what the team would decide, who would act, and what information they would need.
Capture uncertainty honestly
Record unknown contacts, missing access, conflicting assumptions, and decisions that could not be made. The exercise is useful when it exposes a problem early enough to address it. Avoid turning the session into a performance with predetermined answers.
Close with owners and priorities
Review the observations, assign action owners, and agree how follow-up will be checked. Decide whether the next exercise should test a corrected process or explore a different dependency.
Further reading: NIST Cybersecurity Framework ↗. The checklist and examples above are Saint’s editorial guidance; the reference is not an endorsement or certification.