Our corporate site Contact us

Cyber tabletop services

Conducting cyber tabletop exercises is an effective way to improve incident preparedness, identify gaps, and strengthen response capabilities.

Cyber tabletop exercises can significantly reduce the potential impact and cost of cyber incidents.

Marsh tailors tabletop exercises to align with your business, technology and regulatory requirements. We design scenarios grounded in leading practice and our hands‑on experience responding to real incidents.

After each exercise, we deliver a detailed report summarising the tested scenario, response strengths, participant feedback and prioritised recommendations for improvement.

Features and benefits

Test incident plans and procedures: Evaluate the effectiveness of existing cyber incident response plans in a controlled setting.
Identify gaps: Uncover weaknesses in response strategies, processes and protocols and receive remediation recommendations.
Clarify roles: Ensure stakeholders understand responsibilities and decision pathways before an incident.
Scenario planning: Explore multiple cyberattack types (e.g., AI and fake worker schemes) and the potential business impacts to improve situational awareness and preparedness.
Tailored exercises: Bespoke scenarios for incident response teams, executive leadership, and boards.

For clients embarking on their first cyber tabletop exercise, Marsh cybersecurity specialists emphasise learning and improvement. The main objective is to help organisations navigate the complexities of a cybersecurity incident in a low-stress environment using real-world situations. We recommend tabletop exercises for the Cyber Incident Response Team (CIRT), Executive Leadership Team and the Board of Directors to increase understanding and resilience improvement across the organisation.

Why Marsh?

Organisations across the world collaborate with Marsh to simplify cybersecurity efforts, strategically manage risks, and enhance resilience through unbiased expertise, data-driven insights, and proven mitigation strategies tailored to their needs. At Marsh, we help clients better understand, measure, manage, and respond to cyber risk, enhancing resilience and reducing exposure.