← Case index

CASE./001

Incident response readiness

Tabletop Forge

Developed an AI-powered tabletop-exercise platform covering ransomware, phishing/BEC, and data-breach scenarios aligned with NIST, HIPAA, FERPA, and PCI DSS.

Date
June 2026
Format
GitHub project
Platform
AI-powered tabletop exercises
Scenarios
Ransomware, phishing/BEC, data breach
Alignment
NIST, HIPAA, FERPA, PCI DSS

Make the first exercise easier to run.

Observed need

Many smaller organizations know they need to test incident response plans, but realistic tabletop exercises can feel too complex, too expensive, or too technical to start.

One scenario enters. A working exercise packet leaves.

Scenario library
  • Ransomware
  • Phishing / BEC
  • Data breach
TF Exercise builder AI-powered platform
  1. 01 NIST
  2. 02 HIPAA
  3. 03 FERPA
  4. 04 PCI DSS
Tabletop Forge covers ransomware, phishing/BEC, and data-breach scenarios with content aligned to NIST, HIPAA, FERPA, and PCI DSS.

Trace the build from input to deliverable.

Developed an AI-powered platform for cybersecurity tabletop exercises.

Scenario coverage

  • Ransomware
  • Phishing and business email compromise (BEC)
  • Data breaches

Framework alignment

  • NIST
  • HIPAA
  • FERPA
  • PCI DSS

Turn discussion gaps into visible work.

EscalationWho needs to know?
AuthorityWho can decide?
CommunicationWhat is already prepared?
Follow-throughHow is remediation tracked?

The generator guides a team toward missing escalation paths, unclear decision authority, weak communication templates, and gaps in lessons-learned tracking.

A useful security product also has to help people make decisions under pressure, document those decisions, and convert findings into remediation work.

This project pushed the work beyond alerts and tools and toward the people who have to use an incident response plan.