Skip to content
All insights

Exercises6 min read

TabletopExercisesThatActuallyChangetheWork

A tabletop that ends in a slide deck has already failed. The value is the change in who can act, and how quickly they can do it.

By Dev Kapoor

Team collaborating around a conference table

Introduction

Exercises are often designed to demonstrate preparedness rather than test it. People read from scripts, the scenario stays polite, and nothing in production changes.

A useful tabletop pressures a real decision: who can isolate a system, who informs a regulator, who speaks to a partner. If those answers are unclear in the room, they will be unclear in an incident.

Capture the friction

PCS runs exercises so the output is a shorter path to action, not a longer report.

  1. 01

    Pressure a real decision

    If nobody in the room can isolate a system, inform a regulator, or speak to a partner, that is the finding.

  2. 02

    Write down what broke

    A step that depended on a missing person or a locked tool is worth more than a coloured heat map.

  3. 03

    Change the work

    A tabletop that ends in a slide deck has already failed. The value is who can act afterwards.

Exercises6 min read

Written by Dev Kapoor

Tags

  • #exercises
  • #response
  • #operations

Keep reading 

All insights →
  • Team discussion in a modern office

    Vendors7 min read

    Vendor Risk Is an Operating Model, Not a Spreadsheet

    Questionnaires expire the moment a vendor ships a change. Treat third parties as part of the same operational surface you already own.

    By Vikram Panchariya

  • Laptop showing analytics on a desk

    Leadership5 min read

    What Boards Need From Cyber Without the Theatre

    Boards do not need more red charts. They need a clear account of exposure, ownership, and what will be true after the next quarter of work.

    By Priya Shah

  • Analyst reviewing cybersecurity dashboards

    Operations8 min read

    Seeing Risk Before It Reaches Operations

    How intelligence teams turn noisy telemetry into a shared picture of exposure — and why visibility has to precede every control decision.

    By Neha Iyer

Want this applied to your environment? 

PCS works with teams who need intelligence, security, and control in one operating picture.

Next step

Tell us what you need to protect. 

Share the service area, expected scope and any timeline. We’ll review it and come back with the appropriate next step — a proposal, a capability presentation, or a review of an existing programme.

Active incident? Call +44 7387 119386 or email us. Please don’t send credentials or sensitive data in writing.

Request a consultation

Your enquiry is directed to the team closest to the requirement.

Please don’t include passwords, credentials or other sensitive data.