A ransomware attack delivered by a phishing email exercise
Understand how well you are protected against phishing emails, and how you could recover from a ransomware infection.
Tabletop exercises
Table-top group discussion exercises, each designed to identify your potential responses to an un-folding cyber incident.
Help shape the future of Exercise in a Box
Your feedback matters—whether it’s a suggestion, an issue, or an idea, we’d love to hear from you.
Choose an exercise
Third party software compromise exercise
Understand the risks of using third party software, discuss how your organisation would respond to the compromise of a third party software supplier.
Bring your own device exercise
Minimise risk from a bring your own device policy, specifically when a user’s personal device is compromised or when business data is leaked from a personal device.
Heightened cyber threat exercise
Understand how your organisation will respond in a period of heightened cyber threat, and actions to counter the apparent cyber risk with your defence measures.
Home and remote working exercise
Understand the controls your organisation has in place to minimise the risks of data compromise where home or remote working is required for employees.
Insider threat resulting in a data breach exercise
Understand how your organisation would respond to an insider threat, specifically a user allowing unauthorised third parties access to sensitive information.
Managing a vulnerability disclosure exercise
Understand best practice for handling a vulnerability disclosure on one of your online systems.
Mobile phone theft and response exercise
Explore how you would be protected from a thief who steals a mobile phone and tries to use it to extract confidential information.
Supply chain exercise
Understand the risks associated with relying upon suppliers to deliver products, systems and services, and the processes that your organisation has to mitigate these risks.
Supply chain software exercise
Understand the risks associated with relying upon suppliers to provide software systems in your organisation, and the processes in place to mitigate a supply chain attack.
Supply chain ransomware attack exercise
Understand how your organisation would respond to a ransomware attack in your supply chain, and mitigate the impact of a ransomware attack on your organisation.
Being attacked from an unknown Wi-Fi network exercise
Understand the risks of connecting to an unknown wifi network and running outdated software.
Threatened leak of sensitive data exercise
Understand the controls your organisation has in place to prevent against the leak of sensitive information and to identify and respond to threats to leak data.