Blog

Incident readiness, in practice

Tabletop exercises, NIS2, and how teams actually get better at incident response — from the poisettx team.

What NIS2 Article 21 actually requires for cybersecurity exercises

NIS2 doesn't just ask for technical controls. Article 21 expects you to test how well your organization responds — and to prove it. Here is what that means in practice.

June 13, 20264 minRead more

Tabletop exercisesGuideIncident response

How to run a tabletop exercise: a step-by-step guide

From objectives to debrief: the seven steps of a tabletop exercise that actually changes how your team responds — and the mistakes that flatten most of them.

June 9, 20264 minRead more

Tabletop exercisesAIComparison

AI-driven vs consultant-led tabletop exercises: an honest comparison

Consultant-led tabletops cost thousands and happen once a year. AI-driven exercises cost a subscription and happen monthly. Here is where each model wins — without the vendor gloss.

June 5, 20263 minRead more

RansomwareTabletop exercisesScenarios

Ransomware tabletop scenario: what a good exercise looks like

A strong ransomware tabletop is not 'your files are encrypted, discuss'. Here is the anatomy of a scenario that forces real decisions — with a sample inject timeline.

June 1, 20264 minRead more