Tabletop Offerings

---

Operating Through the Outage: A Ransomware & Business Continuity Simulation

Test your district's ability to lead through a ransomware crisis.

This immersive tabletop exercise places district leaders in the middle of a rapidly escalating ransomware attack that disrupts critical operations. Participants make time-sensitive decisions around instructional continuity, payroll, transportation, public communications, and recovery while balancing student safety and stakeholder expectations. The exercise evaluates incident response, business continuity, crisis leadership, and organizational resilience before a real-world event occurs.

Duration: 2 hours

Funds in the Crosshairs: Payroll &

Vendor Fraud Simulation

Strengthen your defenses against payment fraud and business email compromise.

This realistic tabletop exercise challenges finance, payroll, business, and IT leaders to respond to fraudulent changes to employee and vendor banking information. As the scenario unfolds, participants assess verification processes, approval workflows, communication, and incident response while identifying opportunities to improve financial controls and reduce the risk of costly payment fraud.

Duration: 2 hours

The Cost of Keeping Everything: A Data Governance Simulation

Discover how data governance impacts cybersecurity, compliance, and public trust.

This executive-level tabletop exercise explores how years of unnecessary data retention can transform a cyber incident into a district-wide crisis. Participants examine data ownership, retention practices, legal obligations, and organizational accountability while identifying governance strategies that reduce risk, improve resilience, and strengthen stewardship of district information.

Duration: 2 hours

The Principal's Voice: An AI Impersonation Attack

Prepare your front office to recognize and stop AI-powered social engineering.

This interactive tabletop exercise helps administrative staff respond to increasingly convincing AI-driven impersonation attacks delivered through email and voice messages. Participants practice verifying urgent requests, protecting sensitive student information, and knowing when to escalate concerns. Designed specifically for registrars, administrative assistants, attendance staff, and front office personnel, the exercise reinforces the vital role non-technical employees play in defending the district against modern cyber threats.

Duration: 2 hours