What is the importance of tabletop exercises in security readiness under Annex F?

• A. Practice response, identify gaps, improve coordination, validate plans and communications
• B. Replace all full-scale exercises
• C. Optional and rarely beneficial
• D. Focus only on hardware resilience

Answer: (A)

Tabletop exercises focus on practicing how a response would unfold in a real incident through discussion and walkthroughs, testing people, processes, and communications without the need for a live event. Under Annex F, their value is in practicing the actual response, uncovering gaps in plans, improving coordination across teams, and validating that incident response, recovery, and communications protocols align with what the organization can actually do. They reveal where decisions are slow, who communicates with whom, and what information is needed to move the response forward, allowing teams to update plans and timelines accordingly. They’re a foundational step that prepares teams and clarifies roles before any live, full-scale exercises, and they address more than just hardware, focusing on people, procedures, and interdependencies across the organization.