Template
Tabletop Exercise Template
This template defines a reusable structure for designing, running, and learning from tabletop exercises. It supports the resilience testing programme by providing the scenario template, injects schedule, evaluation criteria, and after-action format that the Resilience Owner uses to commission each exercise. Adopting organizations select a scenario, populate the placeholders, and run the exercise.
- Type
- Template
- Version
- 1.1.0
- Date
- 2026-10-20
- Owner
- Resilience Owner
- Approving authority
- Governance Library Maintainer
- Classification
- Public
- Confidentiality
- Public
- Category
- Resilience
- Review frequency
- Annual and upon material change to scenario library, regulatory expectation, or organizational structure
- Licence
- CC BY-SA 4.0
Read the full text on GitHub (opens in a new tab)
Outline
- Purpose
- Scope
- When to use a tabletop exercise
- Scenario library (illustrative; expand per organization)
- Exercise design
- Inject schedule
- Evaluation criteria
- After-action report
- Operating expectations
- Framework alignment
- Limitations
Frameworks it maps to
- ISO 22301:2019
- ISO/IEC 27001:2022
- ISO/IEC 27035-2:2023
- ISO/IEC 27031:2025
- NIST SP 800-84
- NIST SP 800-61 Rev. 3
- NIST CSF 2.0
- NIST SP 800-184
- DORA
- DORA RTS (EU) 2025/301
- NIS 2
- NIS 2 Implementing Regulation (EU) 2024/2690
- OSFI Guideline E-21
- PRA SS1/21
- PCI DSS v4.0.1
- TIBER-EU
Related documents
- Business Continuity and Resilience Frameworkresilience
- Business Continuity and Disaster Recovery Standardresilience
- Continuity and Recovery Testing Procedureresilience
- Cross-Domain Incident Coordination Procedureresilience
- Resilience Metrics and Testing Log Registerresilience
- Security Incident Response Proceduresecurity
- Data Protection and Privacy Breach Response Procedureprivacy
Next
All Documents