performing-soc-tabletop-exercise - Run SOC tabletop exercises for incident response
Conducts discussion-based SOC incident simulations to test response procedures, communication workflows, and decision-making without affecting production systems.
Tags
Updated: 2026-10-02Capabilities
Typical Inputs
Typical Outputs
What this skill does
- Design incident scenarios
- Create timed injects
- Facilitate scenario discussions
- Evaluate participant responses
- Identify response gaps
- Assign corrective actions
Inputs
- Participant list
- Scenario injects
- Evaluation scorecard
- Incident response plan
- Response playbooks
- Conference or video call
Outputs
- Exercise scenario
- Timed inject schedule
- Evaluation findings
- Recorded decisions
- Identified response gaps
- Assigned action items
Requirements
- Incident response experienced facilitator
- Screen sharing capability