Cybersecurity Tabletop Exercises: How Far Should You Go?

The report advocates expanding cybersecurity tabletop exercises beyond common scenarios like ransomware and data breaches to include high-impact geopolitical contingencies, such as a potential China–Taiwan conflict. Citing recent warnings about Chinese cyber actors’ access to U.S. critical infrastructure and evolving global threats, it urges government and private-sector organizations to test people, processes, and technology against uncomfortable, paradigm-shifting events to avoid complacency and strengthen preparedness.