Tabletop Exercise

Advance planning with police, fire and other key stakeholders gives everyone clear expectations and limits. Where it can, the organization should cultivate links with police at all levels, national, state, local, tribal and territorial, bring them into its tra...

The RMP must give the name, phone and email of the local emergency planning and response organisations with which the source last coordinated, the date of the most recent coordination and the federal or state emergency plan requirements that apply;

Management selects exercise and test methods by size, complexity and business, using the more thorough methods to verify the plan's viability: full-scale exercises that recover business processes with full resources and validate internal and external interdepe...

Test each recovery plan at least once every 15 calendar months by recovering from an actual incident, a paper drill or tabletop exercise, or an operational exercise.

Operate recovery capability aligned with FIPS 199 impact level + NIST RMF integration per NIST SP 800-34 Rev 1 Appendix F (Sample Plans per Impact Level) + Chapter 4 (Information System Contingency Plan Development).

Conduct regular game days and tabletop exercises for credential compromise, ransomware and data breach scenarios to test plans, tools and team readiness.