Governance, Risk & Compliance (GRC)

Build Cyber Resilience Through a Real-World Tabletop Exercise

The TTX aims to assess the CIIOs’ capabilities and operational processes to detect, respond and recover from cyber incidents by exercising the relevant operational plans and Standard Operating Procedures (SOPs), Business Continuity Plan (“BCP”) and Disaster Recovery Plan (“DRP”) to ensure that its CIIs remain resilient and can continue to deliver essential services in the event of disruptions due to a cybersecurity incident.

FIRMUS uses a threat intelligence driven approach to develop scenarios, including for the purpose of wargaming exercise, not limiting to establishing case studies on noteworthy past incidents and cyber-attack campaigns, and profiling known threat actors and their tactics, techniques and procedures (TTPs) using the MITRE ATT&CK framework or equivalent framework.

Table Top Exercise

Our Approach & Methodology

Our approach & methodology also assess Sector Lead to coordinate and manage cyber incidents at the sectoral level.

  • Phase 1 (Understand and Plan): To conduct planning and engagement workshops for the Sector Lead and ICM CIIOs for information gathering and schedule of activities leading to actual conduct of exercise

  • Phase 2 (Design and Develop): To design and develop cybersecurity scenarios for the Sector Lead and ICM CIIOs on a threat assessment that established realistic and emerging cyber threats that are relevant to ICM sectors.

  • Phase 3 (Deliver and Report): To conduct TTX and Crisis Communications to assess and grade the cyber readiness of each CIIO and the ICM sector via specific criteria that was discussed. Exercise After Action Report (AAR) to be delivered after the conduct of the exercise.

Key Benefits of Running TTX (Table-Top Exercise)

1. Validate Incident Response Readiness

A TTX tests whether your incident response plan actually works in practice, not just on paper. Teams quickly discover gaps in:

  • Escalation flow
  • Roles & responsibilities
  • Communication channels
  • Decision authority
  • Technical coordination

2. Improve Executive Decision-Making

Cyber incidents are no longer purely technical. A TTX helps management practice:

  • Crisis leadership
  • Business continuity decisions
  • Regulatory response
  • Public/media communication
  • Legal and reputational risk handling

This is especially valuable for C-level executives and board members.

3. Identify Process & Communication Gaps

Most failures during incidents happen because of coordination issues, not lack of tools. TTX reveals:

  • Delayed escalation
  • Confusion between IT/SOC/legal/comms
  • Missing contact points
  • Vendor dependency issues
  • Slow approval processes

4. Strengthen Cross-Functional Collaboration

A well-run exercise aligns multiple stakeholders:

  • Security team
  • IT operations
  • Legal
  • HR
  • PR/Communications
  • Management
  • Third-party vendors

Teams learn how to work together before a real crisis happens.

5. Meet Compliance & Audit Expectations

Many frameworks and regulators increasingly expect organisations to conduct cyber crisis simulations, including:

  • ISO 27001
  • NIST CSF
  • SOC 2
  • MAS TRM
  • PDPA-related governance expectations

A TTX demonstrates operational maturity and preparedness.

6. Increase Confidence During Real Incidents

When teams have rehearsed scenarios before, response becomes:

  • Faster
  • More structured
  • Less emotional
  • More coordinated

This directly reduces downtime and business impact.

7. Test Business Continuity & Recovery Assumptions

TTX helps validate:

  • Backup recovery assumptions
  • RTO/RPO expectations
  • Alternate communication methods
  • Third-party recovery dependencies

Many organizations realize their recovery expectations are unrealistic only during exercises.

8. Build Cybersecurity Culture

A TTX changes cybersecurity from “IT’s problem” into a business-wide responsibility. It increases awareness among leadership and non-technical stakeholders.

Why Firmus?

Firmus combines offensive security expertise, governance consulting, and real-world cybersecurity implementation experience to deliver practical, risk-driven, and business-aligned security services. Our consultants work closely with organizations to strengthen cybersecurity resilience while ensuring security initiatives remain operationally effective and aligned with business objectives.

Firmus is also recognized through multiple industry-leading certifications and accreditations, including:

  • CREST Accredited Company with CREST Certified Consultants

    Firmus is CREST accredited, validating our capabilities, methodologies, and quality standards in delivering professional cybersecurity assessment and penetration testing services aligned with internationally recognized best practices.

  • ISO/IEC 27001:2022 Certified

    Firmus is certified to ISO/IEC 27001:2022, demonstrating our commitment to maintaining a robust Information Security Management System (ISMS) and protecting the confidentiality, integrity, and availability of information assets.

  • Cyber Trust Mark — Advocate Level Certification

    Firmus is certified at the highest Cyber Trust Mark tier, demonstrating advanced cybersecurity maturity and operational excellence.

These certifications and accreditations reflect Firmus’ commitment to maintaining high cybersecurity standards, operational discipline, and trusted service delivery for enterprise and regulated environments.