🛡️ Pentest from €539 · Compliance from €89. See All Services →
Optimum Web
Multi-FrameworkDORAISO 27001CR-NIS2-14

Incident Response Tabletop Exercise

Annual IR tabletop: ransomware / breach / supply chain scenario. GDPR 72h simulation. Audit-ready after-action report for NIS2, DORA, ISO 27001. €449. 7 days.

Incident Response Tabletop Exercise by Optimum Web is a fixed-price compliance service covering NIS2 Art. 21 + DORA Art. 11 + ISO 27001 A.5.24–A.5.28. It costs €449 with 7 business days delivery by senior security engineers. Facilitated 3-hour scenario exercise (online or onsite). 14-day warranty included.

€449
Fixed price, VAT excluded
7 business daysSenior only
Facilitated 3-hour scenario exercise (online or onsite)
Structured after-action report with date, attendees, decisions, and lessons learned
Remediation list with prioritised gaps identified during exercise
GDPR 72-hour and NIS2 24/72-hour notification timeline simulation
🛡️
14-Day Warranty
If the delivered pack does not match your ISMS scope and Statement of Applicability, we rework it at no cost, or refund in full within 14 days of delivery.

Secured by PayPal · 256-bit SSL encryption

or order without payment
+373 22 843569
PayPal · SSL
👨‍💻 Senior only
14-day warranty
🆔 CR-NIS2-14

This Service Covers

NIS2Article 21 — Incident handling
DORAArticle 11 — Testing of ICT business continuity and disaster recovery
ISO 27001A.5.24–A.5.28 — Information security incident management

What You Get

Facilitated 3-hour incident response tabletop exercise for leadership and technical teams. One scenario from the library — ransomware, mass data exfiltration, supply chain compromise, insider threat, DDoS extortion — adapted to your industry. Decision points covering containment, eradication, recovery, communications, legal/regulator notification (GDPR 72-hour simulation, NIS2 24/72-hour timeline). After-action report and remediation list.

Who Needs This

  • NIS2 essential and important entities ahead of June 2026 deadline
  • DORA-regulated financial entities (banks, insurance, fintech)
  • ISO 27001 certified companies needing annual exercise evidence
  • Organisations whose last tabletop is more than 12 months old
  • Teams that have an IR plan but never tested it

How It Works

  1. 1
    Prep Call

    1-hour briefing to review your IR plan and select/adapt the scenario

  2. 2
    Tabletop Exercise

    3-hour facilitated session with structured injects and decision points

  3. 3
    Hot Debrief

    Immediate post-exercise discussion of key observations

  4. 4
    After-Action Report

    Written report with findings, decisions, gaps, and remediation recommendations in 7 days

ONGOING COMPLIANCE

Don't Want to Think About Compliance Every Quarter?

Compliance-as-a-Service: €729/month. Quarterly reviews, scans, documentation, and security questionnaire support — as an extension of your team, not a replacement for your compliance owner.

Start CaaS — €729/month

Ready to Start?

€449 · 7 business days · 14-day warranty

+373 22 843569

Secured by PayPal · 256-bit SSL encryption

or order without payment

Want ongoing compliance? Compliance-as-a-Service — €729/month

Learn more
Read verified client reviews on Clutch →

Frequently Asked Questions

Is this just a meeting?+
It's a facilitated workshop with structured injects, time pressure, decision points, and a written record. Not a discussion — an exercise.
Who should attend?+
CEO/COO, CISO/Head of Security, Head of Engineering, Head of Legal/DPO, Head of Communications. 4–10 people typically.
How long does it take?+
3 hours facilitated + 1 hour prep call beforehand. We prepare based on your IR plan.
What scenarios are available?+
Ransomware, data exfiltration via insider, supply chain compromise via vendor, business email compromise, DDoS with extortion, GDPR breach with 72-hour notification window, NIS2 essential entity incident.
Will regulators accept this as evidence?+
Yes — we produce a structured after-action report with date, attendees, scenario, decisions, and lessons learned that matches what auditors expect.
Online or onsite?+
Both. Onsite is more engaging; online works well for distributed teams.

Service page last reviewed 15 August 2026 by the Optimum Web compliance team.

Also Relevant

NIS2

Incident Response Plan

€359 · 5–7 business days
NIS2

Incident Reporting Workflow Automation

€319 · 5–7 business days
Multi-Framework

Business Continuity & Disaster Recovery Test

€539 · 8 business days
DORA

ICT Incident Reporting Workflow

€319 · 5–7 business days
+373 22 843569

Secured by PayPal · 256-bit SSL encryption

or order without payment
📞Call Us💬Get Free Quote