- Incident Response (Table Top Exercise)

Practice the Crisis
Before It's Real.

We run tabletop exercises that walk your leadership and IT teams through realistic incident scenarios, so the first time your team handles a real breach isn’t the first time they’ve thought about how.

What We Cover
- Industries We Serve

Incident Response with Tabletop Exercises Built Around Your Sector

The scenario that matters most depends on what your business stands to lose, since a ransomware attack threatens a retailer’s holiday sales differently than it threatens a bank’s regulatory standing.

We build every exercise around your specific exposure, so your leadership team rehearses the decisions they would actually need to make during a real incident.

Finance

We run exercises simulating incidents affecting financial systems, where regulatory notification timelines are strict.

Healthcare

We run exercises around patient data breach scenarios, supporting UAE MOHAP notification obligations.

Legal

We run exercises around confidential data exposure scenarios relevant to legal sector obligations.

Retail & E-Commerce

We run exercises around payment system breach scenarios relevant to PCI DSS incident requirements.

- Why AWJ Tech

What Our Tabletop Exercises Deliver

A tabletop exercise from AWJ Tech tests your response plan while the stakes are still low.

01

Realistic Scenario Design

Scenarios are built around threats genuinely relevant to your industry and environment.

02

Cross-Functional Participation

Exercises include IT, leadership, legal, and communications stakeholders, not just technical staff.

03

Role Clarity Under Pressure

Participants leave knowing exactly what’s expected of them during a real incident.

04

Communication Plan Testing

We test whether your escalation and communication plan actually works in practice.

05

Regulatory Notification Walkthrough

We walk through the notification obligations your business faces under UAE regulations.

06

Low-Risk Learning Environment

Mistakes happen in the exercise room, not during an actual crisis.

07

Actionable Gap Identification

We identify gaps in your incident response plan before they cost you time during a real event.

08

Facilitated, Not Just Presented

Our team actively facilitates the exercise, adapting scenarios based on how your team responds.

09

Post-Exercise Improvement Plan

You receive a clear set of recommendations to strengthen your incident response plan.

Your Incident Response Plan
Has Never Actually Been Tested.

AWJ Tech Tests It Before You Need It for Real

A response plan that only exists on paper often falls apart under the pressure of an actual incident. AWJ Tech’s tabletop exercises test it safely, while there’s still time to fix the gaps.
- Why Do Businesses Trust AWJ Tech?

The Standards Behind Every Exercise We Run

- Procedure Behind The Exercise

From Scenario Design to Improvement Plan

Six stages take your team from scenario design to a clear, actionable improvement plan.
Stage 1

Scenario Design

We design a realistic incident scenario relevant to your industry and environment.

Week 0

Stage 2

Participant and Objective Planning

We agree on which stakeholders participate and what the exercise should evaluate.

Days 1–2

Stage 3

Exercise Facilitation

We facilitate the exercise live, guiding participants through the evolving scenario.

Days 3–7

Stage 4

Real-Time Observation

We observe decision-making, communication, and escalation as the scenario unfolds.

Day 8

Stage 5

Debrief and Discussion

We lead a structured debrief covering what worked and where gaps emerged.

Days 9–10

Stage 6

Improvement Plan Delivery

You receive a report with clear recommendations to strengthen your incident response plan.

Within 90 days

- Client Reviews

What Clients Say About Our
Incident Response Service

Stephen Stanton (COO)
★★★★★
A Public Listed Investment Bank (UAE)
"An effective business partner! Throughout our rapid business growth, we were ensured world-class security services despite budget and schedule constraints. Anticipated issues well in advance and provided timely recommendations...."
Vijay C. (Head of IT)
★★★★★
A Major Airlines Company | UAE
"Proactive and well liked by our staff due to their 'can do' attitude. When faced with problems, proactively suggested solutions. Took actions and decisions as appropriate to the business."
Ian Anderson (CTO)
★★★★★
A Top 5 Financial Institution | Australia
"I have had the privilege of working with Sadiq. He possesses expert security skills, broad and deep industry knowledge and in-depth understanding of regulatory requirements within the finance industry…”
Andre Herbst (Director Growth & Partnerships)
★★★★★
A Leading Business | Australia
"A rare breed of folks who are able to hold both deep technical and cyber conversations whilst combining and communicating the business context that helps bridge the gap for all involved."
- Common questions

What Clients Ask About
Incident Response

We recommend IT, leadership, legal, and communications stakeholders, since real incidents involve all of them.
Most exercises run two to four hours, depending on scenario complexity and number of participants.
No. Exercises can help you build a plan from scratch, or test and improve an existing one.
Yes. Scenarios are built around the threats most relevant to your business and industry.
Both formats are available, depending on your team's location and preference.
We recommend at least annually, or after any significant change to your systems or response plan.
- Get In Touch

Let's Talk About Testing Your Response Plan

If your incident response plan has never actually been tested, our engineers are ready to scope a tabletop exercise. Reach out and get a straight answer about which scenario to run first.

Office 55, Al Khaimah Building Port Saeed, Dubai, UAE

Response time

01 Business Day

- Ready When You Are

Practice the Crisis Before It Becomes Real

Most teams wait until after an incident to find out who was supposed to do what.

Partner with AWJ Tech and get a session that leaves your leadership with clear roles, a tested plan, and a written list of what to fix before you need it for real.