A fixed-price gap analysis, remediation through to your audit, and upkeep after it. All in a workspace you keep.
All compliance →Led by a published security researcher with five CVEs. One standard report, letters for your buyers, and retests of your fixes.
All security →To the people you sell to, raise from or answer to.
All industries →Original research, free tools, and plain-language guides on security and compliance, from a published security researcher.
Read the blog →Pick a scenario and tell it how you run. You get an exercise you can run with your team this week: who to invite, what happens when, the questions to ask and what to write down after.
Pick the one that would hurt most, or the one you have never rehearsed.
Used to name the systems in the injects.
A walk-through of a realistic incident with the people who would handle it, around a table or on a call, with no systems touched. A facilitator reveals the incident in stages (injects) and the team talks through what they would do. It finds the gaps in the plan, the contact list and who decides what, before a real incident does.
Plan on 90 minutes to two hours for the exercise itself, and about the same again afterwards to write up the gaps and owners. Shorter sessions tend to stop just before the hard decisions.
Someone who is not also a player. If your incident lead facilitates, nobody tests the incident lead. A colleague from another team can run it from this pack; an outside facilitator can push harder on decisions people would rather not make in front of each other.
The date, who attended, the scenario, what went well, the gaps found, and an owner and due date for each fix, then evidence the fixes were made. SOC 2, ISO 27001, PCI DSS and CyberSecure Canada auditors commonly ask for exactly that record.
Yes, free and no signup. The exercise is built in your browser.
We tailor the scenario to your systems, facilitate the session so your team can play rather than run it, and write up the gaps, owners and fixes as the record your auditors and insurer ask for. From $3,000 CAD.
See the tabletop exercise Talk about a tabletopNot ready for a call yet?
Your exercise with every inject and the facilitator notes to keep, then a few short notes from Jacob on running tabletops that find real gaps. Unsubscribe in one click. Reply anytime; it reaches him directly.
From Jacob Masse, principal of traztech: the files by email, then a few short notes over the next month. No spam, unsubscribe in one click.
Want it done for you?
Incident response tabletop
A tailored scenario, facilitated with your team, written up as audit evidence.
Explore Incident response tabletop →This gives you the shape of the problem. traztech Workspace walks you through every control of whichever frameworks apply to you, in plain English, with an evidence register, policy templates, a risk register, vendor questionnaires, and an audit-readiness score. Start a free assessment and walk every control.
No credit card, no trial clock, no locked features. TrazTech makes money when someone wants help closing the gaps, not from the Workspace itself.