Dry Run ReadyStart a drill

Sample report · Fictional exercise

The organization, consultant, score, findings and dates are illustrative—not a real customer's results.

Northstar Services · Fictional organization

Incident readiness exercise report

Northstar Services · Ransomware on a busy morning

Prepared by Example Advisory · Fictional consultant

Illustrative score
78/100
Objectives exercised
4 of 4
Participants
3
Exercise date
23 October 2026

For your leadership

Clear containment decisions. A communications process to strengthen.

The team isolated affected systems and assigned a response lead. Evidence preservation was considered, but responsibility for the incident log remained unclear. Customer communications lacked an agreed approval path.

Prioritize the evidence checklist and communications approvals, then rehearse those changes. This example records exercise performance—not operational readiness or a predicted outcome in a real incident.

Results by objective

  • Contain affected systems3/3
  • Assign response ownership3/3
  • Preserve evidence2/3
  • Coordinate stakeholder communications1/3

Corrective actions

  1. Document the evidence-preservation checklist and confirm who maintains the incident log.

    Owner: IT lead · Target: 2026-11-06 · Open

  2. Agree an approval path for customer updates and prepare a holding statement.

    Owner: Communications lead · Target: 2026-11-13 · Open

  3. Rehearse the revised communications process in a follow-up exercise.

    Owner: Exercise lead · Target: 2026-11-20 · Open

This summary documents a self-directed, AI-facilitated tabletop exercise. It is not independently verified, is not an insurer approval or acceptance, and is not a compliance certification. Participant answers, transcripts, email addresses, and scoring criteria are excluded.

Sample framework references illustrate process alignment only—not clause coverage or certification.

Run your own drillBack to Dry Run Ready