What is Tabletop Exercise?
A tabletop exercise is a 60-90 minute discussion-based scenario walk-through where your team practices responding to a simulated security incident - without the cost or risk of an actual disruption.
The exercise puts your team in the room (physical or virtual), reads a prepared scenario aloud, and walks through how each role would respond at each phase. A facilitator injects complications ('the email server is down, how do you communicate?') and scores the response against a rubric.
Most security reviewers in 2026 ask whether you've run a tabletop in the last 12 months and require a sign-in sheet + summary document as evidence.
Done well, tabletops surface gaps in your Incident Response Plan, identify training needs, and build confidence in the team. Done poorly, they're a meeting nobody takes seriously.
Why it matters for Florida small business
A tabletop is the cheapest test of your Incident Response Plan you can run - and the evidence folder it produces is what reviewers want to see.
What to do
Schedule a 90-minute tabletop this quarter using a real ransomware or BEC scenario. Use a realistic scenario, assign a note taker, and keep the sign-in sheet with your security records.