This masterclass starts by introducing a practical methodology for threat‑led tabletop exercises that participants can take back to their own organizations. Rather than focusing on abstract frameworks, the methodology shows how realistic threat scenarios are designed, how organizational context is incorporated, and how exercises can be structured to meet both operational and regulatory expectations.

Building on this foundation, participants jointly take part in a rapid live threat‑led tabletop exercise. All groups work on the same scenario, facing a realistic cyber threat under time pressure and uncertainty. While the scenario is shared, the decisions, priorities, and discussions differ.

This approach allows participants to continuously compare the exercise dynamics with how their own organization would actually respond. Where would decisions be slower or faster? Which roles are missing or unclear? What assumptions no longer hold under pressure?

The session concludes with guided reflection, helping participants identify concrete lessons learned and capability gaps they can take back to their organizations. 

This is not a presentation. It is an interactive, experience‑based masterclass designed to help security and risk leaders move from theoretical preparedness to actionable insight.

To support the live exercise, we built an interactive tabletop platform. Use the Card Library to explore the threat actors, organizations, scenarios, and modifiers used in the session, or go straight to Run a Round to run a full exercise with your own team, before, during, or after the masterclass.

Ideal for:

• Incident Response Leaders
• Threat Intelligence and Security Analysts
• CISOs
• Risk and Compliance Leaders
• Professionals responsible for cyber resilience and regulatory readiness