Free Webinar:

What’s causing the divide between OT and IT teams? Learn from CISOs bridging the gap.

Skip to main content
Tabletop Exercise

Tabletop Exercise

Test and strengthen your ICS cybersecurity strategy in a collaborative workshop

Despite the increased connectivity between IT and OT networks, many industrial organizations have an enterprise IT incident response plan that does not adequately account for ICS incident response requirements. The Dragos Tabletop Exercise (TTX) Service is a step-by-step method that demonstrates how a realistic attack may occur within your unique ICS environment based on your organization’s most concerning risks. Dragos TTXs include collaboration between all stakeholders, including IT and OT security teams and operations leaders, to strengthen internal communication strategies and develop relationships.  

Benefits

Learn first-hand from Dragos ICS security experts in a workshop format icon
Learn first-hand from Dragos ICS security experts in a workshop format
Strengthen communication between IT and OT teams icon
Strengthen communication between IT and OT teams
Understand potential attack vectors icon
Understand potential attack vectors
Reduce operational and financial impacts icon
Reduce operational and financial impacts
Improve readiness in the event of an incident in your OT environment icon
Improve readiness in the event of an incident in your OT environment

Lessons Learned from the Front Lines

62% of Tabletop Exercise workshop customers did not have communications plans linked to incident response activations.
Source: 2020 Year in Review
A cover photo for Dragos 2020 ICS Cybersecurity Year in Review.

How Tabletop Exercises Work

The Dragos team of expert ICS threat hunters, penetration testers, and incident responders create a threat scenario based on your unique environment that simulates an attack on the industrial process, not just individual OT systems, to demonstrate steps attackers might take.

cover graphic for Dragos Tabletop Exercise Participation Manual.

What You Get

The exercise control package is considered the testing “control” and ensures that all participants receive exercise material in the same manner at the same time. The control package will detail rules of engagement and scenario content necessary for gameplay. 

The narrative briefing is an interactive scenario briefing that will lead participants through mock investigations, analysis, discussions, and decisions. This will include scenario injects and artifacts. 

A detailed report of continued best practices and findings that include recommended corrective actions, evaluation rating, and detailed planning considerations. 

Ready to Get Started?