DON'T MAKE THE INCIDENT YOUR FIRST EXERCISE.
Choose a scenario, audience and duration and rate how often your team exercises, to build an indicative blueprint for an executive, technical or cross-functional tabletop exercise. Free, with no login required.
Get your detailed C3SA results
Receive a copy of your result and recommended next steps without leaving this page.
Your assessment result is submitted with the form so C3SA can provide the requested report and relevant follow-up. Do not enter sensitive, classified or controlled information into public web forms.
A DRAFT BLUEPRINT FOR YOUR EXERCISE.
The planner helps you choose a scenario, participants, objectives and the decisions to test. It produces an indicative blueprint, not a finished exercise.
C3SA then develops realistic injects, facilitates the session and manages the after-action process, so the exercise leads to accountable improvements.
Which scenario should we choose?
The one most likely to hurt you. For most organizations that is ransomware or business email compromise; for industrial operators, OT disruption; for organizations with critical suppliers, a supply-chain compromise.
How long should the exercise be?
90 minutes suits a focused executive session. A half day allows cross-functional discussion. A full day suits multi-phase or technical scenarios.
Is my information shared?
Your answers are processed in your browser. The site may record an anonymous completion event (tool name and score) in its analytics. Your contact details and full result are only sent to C3SA if you choose to request detailed results through the form. Do not enter sensitive, classified or controlled information into public web forms.
FROM SELF-ASSESSMENT TO NEXT STEP.
An indicative exercise blueprint for your scenario, audience and duration.
C3SA develops injects, facilitates the session and manages the after-action process.
A facilitated exercise with a record and prioritized corrective actions.