Create a facilitator-ready tabletop exercise titled [ScenarioName] triggered by [TriggerEvent] impacting [SystemsImpacted]. Plan a [DurationHours]-hour session with timed injects, decision gates, and artifacts (tickets, logs, alerts). Define objectives and [SuccessCriteria] linked to RPO/RTO, escalation, and evidence creation. Include evaluation rubric and observer guidance.
Output format:
Agenda & Objectives.
Inject Script Table: Time | Inject | Expected Action | Evidence | Role.
Decision Log template.
Evaluation Rubric: Criterion | Scale | Evidence.
After-Action Report outline with action owner and due dates.
Ensure realism (e.g., partial corruption, permission errors) and cross-team coordination (IT, SecOps, Legal, Comms).