Cyber Readiness in 30 Days
We learn your business. Build a realistic cyber scenario. Exercise your team. Identify the gaps. Give you a plan to fix them.
Schedule a ConsultationWhat the exercise feels like
Your team works through a scenario built around your operations. New developments arrive as the clock moves, and leaders decide what to do with the information they have.
Four weeks. One focused outcome.
Understand
We learn your critical operations, systems, vendors, leadership structure, dependencies and existing plans.
Build
We develop a realistic cyber scenario around your organization, not a generic exercise.
Prepare
We finalize participants, scenario developments, exercise materials and logistics.
Exercise
We facilitate a live two-hour remote tabletop exercise with the people who make decisions.
Improve
You receive an Actionable Improvement Plan documenting observations, gaps, priorities and corrective actions.
What we test
- Leadership decision authority
- Critical operations and workarounds
- Internal and external communications
- Technology and vendor dependencies
- Recovery priorities
- Coordination with legal, insurance and technical partners
What you receive
- A scenario built around your organization
- A facilitated two-hour remote exercise
- Key observations and identified gaps
- An Actionable Improvement Plan and After-Action Report
- Prioritized corrective actions with owners
A plan your team can act on.
Each finding ties what happened in the exercise to why it matters, what to do and who owns it.
- Observation
- No one could confirm who has authority to shut down billing systems after hours.
- Why it matters
- The decision stalled for 25 minutes of exercise time while encryption continued to spread.
- Corrective action
- Name a primary and alternate decision-maker and document the criteria for shutdown.
- Owner and priority
- Chief Operating Officer · High · 30 days
Who should take part
The exercise is for the people who would actually be making decisions, not only the people who manage technology.
- Executive leadership
- Operations
- IT or your technology provider
- Communications and customer-facing leads
- Finance, legal and insurance contacts as appropriate
Common questions
Is this a penetration test or security assessment?
No. Mitigate America is not a technical cybersecurity provider and does not test your network. We test how the business operates, decides and communicates when technology fails. It complements the work your IT or security provider does.
Do we need an incident response or continuity plan first?
No. If you have plans, the exercise tests them. If you don't, it shows which decisions and procedures most need to be written down.
How much of our team's time does it take?
Short discovery conversations in the first week, a brief review before the exercise and the two-hour exercise itself. We do the scenario development and documentation.
Is it delivered in person?
The engagement is designed for remote delivery, so leaders in different locations can take part.
What does it cost?
After a discovery conversation, we propose objectives, scope, deliverables, timing and a fixed professional fee. There is no hourly billing.
What happens after the exercise?
You decide. Some organizations act on the improvement plan themselves. Others ask us to strengthen continuity or crisis management and then retest.
Start the 30 days with a short conversation.
We'll discuss your operations, what you have in place and whether the engagement fits.