DR drill tabletop template for clients
Overview
Tabletops exercise decisions, not cables. Use a scripted scenario per quarter.
Scenario examples
- Ransomware encrypts ERP VM Friday 4 PM.
- ISP cut severs primary site 8 hours.
Roles
Executive, IT liaison, legal, communications, MSP incident lead.
Outputs
Decision log: who declares disaster, who talks to press, RTO clock start, vendor call tree.
Follow-up
Tickets for gaps found (outdated WAN failback steps, missing VPN creds in vault).
Related Articles
EDR deployment checklist for new workstations
## Overview Use this runbook when onboarding a new Windows workstation or re-imaging a device that...
Handling Defender for Business false positives
## Overview False positives waste analyst time and train users to ignore alerts. This article stand...
Application allowlisting with Windows Defender ASR rules
## Overview Attack Surface Reduction (ASR) rules reduce exploit surface by constraining Office macr...