Ransomware Simulation

Ransomware Event Tabletop Excercise

Ransomware Event Similation

Documentation for facilitators including instructions, handbooks, feedback form, executive briefing templates, and lessons learned templates.

Revision Date: June 01, 2025

Our tabletop toolkit helps security leaders run effective incident simulations. These pre-built templates guide you through planning, facilitation, participant engagement, feedback collection, and post-exercise lessons learned analysis. Designed for both internal security teams and external security consultants, this material is ready-to-use for self-facilitated workshops or client-facing engagements

ExerciseThis toolkit is a full scenario covering initial detection, containment, communications, regulatory notifications, and recovery planning in the event of a significant ransomware event at your company.  It includes customizable timeline, partiipant roles, and templates. 

For more information or to request a custom workshop, Contact Us.

Tabletop Toolkit Materials (Sample set)


Resource Name File Type File Size Language
Introduction Letter .PDF 120 KB EN
Exercise Planner Handbook .DOCX 723 KB EN
Facilitator Guide & / Evaluator Handbook .DOCX 629 KB EN
Participant Invitation Letter Template .DOCX 87 KB EN
Participant Feedback Template .DOCX 253 KB EN
Exercise Briefing Slide Deck Template .PPTX 499 KB EN
Lessons Learned & After Action Report Template .DOCX 450 KB EN


How to Get Started