Skip to Content
▸ SECURinsights 2026 · 4 Sep · Laboratory · 09:00–10:30
MASTERCLASS
Threat-Led Tabletop Exercises · Facilitated by Salvatore Arcidiacona
↗ Agenda
THREAT ACTORS
03
Ransomware, APT, Insider
ORGANIZATIONS
03
Bank, Insurer, Fintech
SCENARIO PATHS
03
3 injects per path
MODIFIERS
13
Advantages, Setbacks, Wildcards
About this Masterclass

This masterclass starts by introducing a practical methodology for threat-led tabletop exercises that participants can take back to their own organizations. Rather than focusing on abstract frameworks, the methodology shows how realistic threat scenarios are designed, how organizational context is incorporated, and how exercises can be structured to meet both operational and regulatory expectations.

Building on this foundation, participants jointly take part in a rapid live threat-led tabletop exercise. All groups work on the same scenario, facing a realistic cyber threat under time pressure and uncertainty. While the scenario is shared, the decisions, priorities, and discussions differ.

This approach allows participants to continuously compare the exercise dynamics with how their own organization would actually respond. Where would decisions be slower or faster? Which roles are missing or unclear? What assumptions no longer hold under pressure?

The session concludes with guided reflection, helping participants identify concrete lessons learned and capability gaps they can take back to their organizations.

This is not a presentation. It is an interactive, experience-based masterclass designed to help security and risk leaders move from theoretical preparedness to actionable insight.

To support the live exercise, we built this interactive tabletop platform — use the to explore the threat actors, organizations, scenarios, and modifiers used in the session, or go straight to to run a full exercise with your own team — before, during, or after the masterclass.

Ideal for
  • Incident Response Leaders
  • Threat Intelligence and Security Analysts
  • CISOs
  • Risk and Compliance Leaders
  • Professionals responsible for cyber resilience and regulatory readiness
⬡ MASTERCLASS
Card Library
⬡ MASTERCLASS

Run a Round

Select your configuration. The facilitator will guide the room through each inject.