--- title: 1 unread message | daily.dev description: Board-level tabletop and crisis simulation exercises help directors experience the pressure of real incidents rather than just hearing about plans,... canonical: https://daily.dev/posts/1-unread-message-xiypoybv9 twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: 1 unread message | daily.dev og:description: Board-level tabletop and crisis simulation exercises help directors experience the pressure of real incidents rather than just hearing about plans,... og:url: https://daily.dev/posts/1-unread-message-xiypoybv9 og:image: https://api.daily.dev/og/posts/XIYpOYbv9.png og:image:alt: 1 unread message og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # 1 unread message **[Sliver C2 Documentation](https://daily.dev/sources/bishopfox)** · 9 min read · 0 upvotes · 0 comments ## Summary Board-level tabletop and crisis simulation exercises help directors experience the pressure of real incidents rather than just hearing about plans, strengthening decision-making, governance, and trust between executives and boards. Examples from Delta, Colonial Pipeline, Maersk, Uber, Cisco, and Amazon illustrate how simulations build strategic muscle, deepen oversight, and demonstrate governance to regulators. Five tips are offered for running effective sessions: define purpose first, keep scenarios realistic and cross-disciplinary, foster collaboration over competition, limit sessions to 60-90 minutes, and close with a structured debrief. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### How long should a board-level crisis tabletop exercise last? A board-level crisis tabletop exercise should run 60-90 minutes to remain high-impact without overtaxing limited board time. Cisco's crisis leadership team runs 90-minute simulations with directors annually, focusing on key inflection points like when to go public, coordinating customer communications, and when to activate legal counsel. Pre-reads with context and objectives help participants arrive prepared so the session stays brisk and consequential. _daily.dev helps security leaders track practical frameworks for running effective incident response exercises._ ### What should happen after a corporate crisis simulation ends? A structured debrief, or after-action report, should capture what went well, what didn't, and what needs to change, feeding directly into governance and strategy discussions. One manufacturer that simulated a product safety recall updated its escalation policy, board communication framework, and internal training within weeks of the debrief, turning the exercise into lasting organizational standards rather than a one-off event. _Teams refining incident response playbooks can follow ongoing coverage of crisis management practices on daily.dev._ ## Similar posts on daily.dev - [7 tabletop exercise mistakes that sabotage incident response](https://daily.dev/posts/7-tabletop-exercise-mistakes-that-sabotage-incident-response-srzfylrfl) · CSO Online · 0 upvotes · 0 comments - [The Role of Tabletop Exercises in IR Planning I Arctic Wolf](https://daily.dev/posts/the-role-of-tabletop-exercises-in-ir-planning-i-arctic-wolf-chjalfoz3) · Arctic Wolf · 0 upvotes · 0 comments - [Tabletop exercises look a little different this year](https://daily.dev/posts/tabletop-exercises-look-a-little-different-this-year-kxrpqopw8) · The Register · 0 upvotes · 0 comments - [CISOs must rethink the tabletop, as 57% of incidents have never been rehearsed](https://daily.dev/posts/cisos-must-rethink-the-tabletop-as-57-of-incidents-have-never-been-rehearsed-0mfal6ntu) · CSO Online · 0 upvotes · 0 comments - [Improve financial resilience with Google Cloud](https://daily.dev/posts/improve-financial-resilience-with-google-cloud-bvdgjfjmy) · Google Cloud · 1 upvotes · 0 comments --- Tags: [#cyber](https://daily.dev/tags/cyber) [View this post on daily.dev](https://daily.dev/posts/1-unread-message-xiypoybv9) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"1 unread message","url":"https://daily.dev/posts/1-unread-message-xiypoybv9","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/1-unread-message-xiypoybv9"},"datePublished":"2026-08-23T12:19:03.764Z","dateModified":"2026-08-23T12:31:11.089Z","description":"Board-level tabletop and crisis simulation exercises help directors experience the pressure of real incidents rather than just hearing about plans,...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/95e270c39f463922b99568c4a7f54853?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/95e270c39f463922b99568c4a7f54853?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"Sliver C2 Documentation","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Sliver C2 Documentation","logo":"https://media.daily.dev/image/upload/logos/placeholder.jpg","url":"https://daily.dev/sources/bishopfox"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/1-unread-message-xiypoybv9","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"cyber","timeRequired":"PT9M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Sliver C2 Documentation","item":"https://daily.dev/sources/bishopfox"},{"@type":"ListItem","position":3,"name":"1 unread message"}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/1-unread-message-xiypoybv9#faq","mainEntity":[{"@type":"Question","name":"How long should a board-level crisis tabletop exercise last?","acceptedAnswer":{"@type":"Answer","text":"A board-level crisis tabletop exercise should run 60-90 minutes to remain high-impact without overtaxing limited board time. Cisco's crisis leadership team runs 90-minute simulations with directors annually, focusing on key inflection points like when to go public, coordinating customer communications, and when to activate legal counsel. Pre-reads with context and objectives help participants arrive prepared so the session stays brisk and consequential. daily.dev helps security leaders track practical frameworks for running effective incident response exercises."}},{"@type":"Question","name":"What should happen after a corporate crisis simulation ends?","acceptedAnswer":{"@type":"Answer","text":"A structured debrief, or after-action report, should capture what went well, what didn't, and what needs to change, feeding directly into governance and strategy discussions. One manufacturer that simulated a product safety recall updated its escalation policy, board communication framework, and internal training within weeks of the debrief, turning the exercise into lasting organizational standards rather than a one-off event. Teams refining incident response playbooks can follow ongoing coverage of crisis management practices on daily.dev."}}]} ```