Advanced 90 min 5-10 players
Your organization wakes up to every CISO's nightmare: critical systems encrypted, backups potentially compromised, and a ransom demand ticking down. This advanced tabletop exercise forces your incident response team to make high-stakes decisions about containment, communication, and whether to pay the ransom or attempt recovery. Teams will navigate executive pressure, legal obligations, law enforcement coordination, and the technical challenge of restoring operations while preserving forensic evidence.