Board workshops and tabletops
Two cyber risk formats for boards and senior leadership teams.
Regulatory requirements now mean boards, not just IT teams, own cyber risk in real terms.
NIS2 and DORA make senior leadership accountable, and the UK Cyber Security and Resilience Bill widens who is in scope. Boards need to know what they are accountable for, and whether their governance would hold up in a live incident.
We offer two formats for boards and senior leadership teams. Our workshop covers your cyber governance landscape, the regulatory frameworks that apply to you, and potential gaps. The tabletop is a facilitated scenario where the board walks through a simulated cyber incident, testing decision-making, accountability and escalation in a realistic, constructive environment.
Our cyber work covers regulatory and governance advice; not penetration testing, technical security assessment, or managed security services.
Formats
| Format | What it involves | Delivery & Output |
|---|---|---|
| Board workshop | Maps your cyber governance landscape, applicable regulatory frameworks, accountability lines, and potential exposure gaps. | Facilitated session for the board or senior leadership team, plus a summary of key governance priorities. |
| Tabletop exercise | Places leadership inside a realistic, simulated cyber incident to test decision-making, accountability, and escalation under live pressure. | Facilitated crisis simulation followed by a findings report on how governance held up, and where it fractured. |
Book individually or as a sequence. Running the workshop first gives the board a shared view of its obligations before the tabletop tests them.
Where it leads
Workshop and tabletop findings often point to the next step: an independent review of your cyber governance arrangements through KYData Cyber Governance, or a review of how you govern supplier risk through Third-party cyber risk.