Dry Run Ready

Incident tabletop · AI facilitator

Prove you're ready,
in 20 minutes.

Rehearse your worst day with an AI facilitator. Walk away with a scorecard, a leadership summary, a playbook, and a report you can hand your insurer. Free to start, no login.

Scenario → Injects → Decisions → Score → Playbook
Cover of the Dry Run Ready field guide to incident response exercises

Read the field guide →

What you walk away with

Not just a drill. Proof.

  • Scorecard — every decision graded against a written rubric
  • Leadership summary — plain-English findings for your boss or board
  • Playbook — best-practice steps tailored to your organization
  • Insurer summary — branded, shareable, aligned to NIST and ISO

Documents a self-directed exercise; not an insurer approval or certification.

Scorecard

78/100

For your leadership

Three things to fix this quarter

Playbook

First 60 minutes

  1. 1Isolate affected systems
  2. 2Call the incident lead
  3. 3Preserve evidence
  4. 4Notify insurer hotline

Insurer summary

YOU

Your logo, your brand

NIST CSF · ISO 27001 aligned

How it feels

A real bad day, without the damage.

Practice on your commute.

Dry Run Ready reads the crisis aloud and you answer out loud. Spoken answers are scored exactly like typed ones — no keyboard needed.

Try a drill free

Facilitator

It's 6:40 a.m. Your file server shows a ransom note. What's your first call?

You (spoken)

Disconnect it from the network and phone our IT lead.

Consultant or advisor? Run exercises for all your clients under your own brand.

See Enterprise →

Available drills

Solo

Your email just got hijacked

A client says they received an invoice from you with new bank details. You didn't send it.

~10 min

Small business

Storm at Shift Change

You face a severe storm warning with staff still on site and a client delivery due today. You must choose safe shelter or safe closure without sacrificing clear accountability for people and commitments.

~12 min

Small business

The Only Supplier Burns

Your sole key supplier loses its warehouse to a fire and cannot deliver for weeks. You must protect customer commitments and cash while resisting unverified substitutes and impossible promises.

~12 min

Solo

Your Account, Your Mistake

An offensive post from your own business account is spreading, and it is a genuine posting mistake, not a hack. As a solo operator, you must take responsibility, limit harm, and keep customer service running under scrutiny.

~10 min

Solo

The person with all the access is unavailable

Your key person is hospitalized. An urgent client deadline and a locked password vault expose continuity gaps.

~12 min

Small business

Evacuate now

A fire next door forces an evacuation. People are unaccounted for and the building will be closed for days.

~12 min

Small business

Someone inside is misusing access

A trusted employee is viewing client records they have no work reason to see, and they just gave notice.

~12 min

Solo

No power, no water, no end date

A major utility failure cuts power and water to your premises. Restoration could take a week, and you have perishable stock.

~12 min

Small business

The vendor changed their bank details

A trusted supplier emails new wire instructions. The owner is traveling. The invoice is due Friday.

~12 min

Solo

Your payouts have stopped

Your payment processor freezes payouts just before payroll. A fake support message offers a shortcut.

~12 min

Small business

They left. Their access did not.

A departed employee still has a working session, shared secrets, and a recent customer export.

~12 min

Solo

The missing work laptop

A stolen laptop, a suspicious cloud login, and client files you cannot account for.

~12 min

Small business

The busiest day goes dark

Your checkout fails during a paid campaign. Retried orders may have charged customers twice.

~12 min

Small business

Your cloud platform is down

Your main cloud provider has a regional outage. Your app and files are unavailable and there is no estimated fix time.

~15 min

Solo

Confident Advice, Real Loss

You send AI-drafted professional advice that sounds authoritative but is wrong. Your client follows it, loses money, and demands an explanation while another deadline approaches.

~12 min

Mid-size

The Public Chatbot Spill

Your staff member sends a client's personal and financial records to a public AI chatbot. The client discovers the disclosure and demands containment, answers, and accountability.

~15 min

Small business

Files locked. Operations stopped.

Ransomware spreads to a second system while your backup console and an extortion message complicate recovery.

~15 min

Mid-size

Your product may hurt someone

Three customers report the same safety defect. One reports a minor injury, and the regulator may need to hear from you.

Draft scenario · review pending

~15 min

Small business

Allegations against your director

An employee alleges serious misconduct by a director, who wants it to go away. Staff are whispering.

Draft scenario · review pending

~12 min

Small business

The backups do not restore

A server fails and the restore fails too. The backup jobs reported success for months.

~15 min

Mid-size

Your AI agent exceeded its authority

An AI agent creates an unapproved purchase, then retries through a second tool.

~12 min

Mid-size

The notification clock is running

A developer finds your customer data on a public paste site. Legal, press, and the board are about to call.

~15 min

Mid-size

Injury on the Floor

You must respond to a serious on-site injury while protecting others and preserving a reliable record. Within hours, you face urgent questions from the employee's family, a safety regulator, and a reporter.

~15 min

Mid-size

Your software supplier was breached

A vendor whose software runs on every workstation announces a security incident, and their update system may be compromised.

Draft scenario · review pending

~15 min

It plays every role

The attacker, the worried client, the bank, the regulator. Twists arrive mid-drill.

It scores silently

Every decision is graded against a written rubric, revealed only at the end.

You leave with a plan

A one-page playbook built from what you actually said. Print it. Pin it up.