CISOs Urged to Revamp Tabletop Exercises Amid Unpreparedness for Cyber Incidents

What's Happening?

A recent report from Cytactic highlights a significant gap in cybersecurity preparedness among U.S. organizations. The 2025 State of Cyber Incident Response Management (CIRM) Report surveyed 480 senior cybersecurity leaders, including 165 Chief Information Security Officers (CISOs), revealing that 57% of major cyber incidents involved attacks that teams had not rehearsed for. This indicates a need for CISOs to reassess their tabletop strategies, which are exercises designed to simulate cyber threats and prepare teams for real-world incidents. The report suggests that while organizations often train for known threats like ransomware, the real challenge lies in handling unexpected attacks. It emphasizes the importance of continuously updating tabletop exercises to reflect the evolving threat landscape, making them relevant and realistic to the organization's specific risk and threat profile.

Why It's Important?

The findings underscore a critical vulnerability in the cybersecurity defenses of U.S. organizations. As cyber threats become increasingly sophisticated and unpredictable, the ability to respond effectively to novel attacks is paramount. The lack of preparedness for unforeseen incidents can lead to significant financial and reputational damage. By revamping tabletop exercises, organizations can enhance their resilience against cyber threats, ensuring that security teams are equipped to handle both known and unknown challenges. This proactive approach not only strengthens the organization's security posture but also aligns cybersecurity strategies with broader business objectives, fostering a culture of preparedness and agility.

What's Next?

Organizations are likely to prioritize the development of more dynamic and tailored tabletop exercises. This involves creating simulations that are specific to the organization's industry, sector, and threat profile. By doing so, security teams can better anticipate and respond to emerging threats. Additionally, there may be increased collaboration between cybersecurity leaders and other business units to ensure that these exercises are integrated into the overall business strategy. As the threat landscape continues to evolve, ongoing assessment and adaptation of tabletop exercises will be crucial in maintaining robust cybersecurity defenses.

Beyond the Headlines

The report's findings may prompt a broader discussion on the role of continuous learning and adaptation in cybersecurity. As threats evolve, so too must the strategies and tools used to combat them. This could lead to a shift in how organizations approach cybersecurity training, emphasizing the need for flexibility and innovation in response strategies. Furthermore, the emphasis on tailored simulations highlights the importance of understanding the unique risks faced by different sectors, potentially driving more sector-specific cybersecurity initiatives.