Security Incident Response Tabletop Exercise Resource Center

Resource Center

Security Incident Response Tabletop Exercise Resource Center

Helping higher ed IT leaders prepare for the next security incident


This resource center will help your institution prepare for short-term security incidents that require significant mobilization of IT staff and resources.

When a security incident strikes campus, IT leaders must be able to mobilize staffing and resources in an efficient manner across teams and departments to ensure an effective response. City and state governments, public health agencies, and the military rehearse security incident response procedures using tabletop exercises. Tabletop exercises are team-based simulation activities that allow leaders to practice staff and resource mobilization in response to a short-term incident. EAB’s Security Incident Response Tabletop Exercise Resource Center includes tools and prompts specifically designed for college and university IT leaders to help them navigate campus crises.

The resource center includes a facilitation guide, editable PowerPoint presentation, and an after-action report template, which together provide start-to-finish guidance for IT teams.

This guide provides detailed instructions to facilitators and observers on how to conduct security incident response tabletop exercises, including sample questions, timing recommendations, and issues to look out for.

This PowerPoint presentation should be used during the exercise, and provides participants with an introduction to tabletop exercises, an agenda, ground rules, and the incident response prompt and scenarios that they will be responding to. The deck can be modified by facilitators to fit team needs.

This guide includes debriefing questions and a template so leaders can complete an after-action report, following the tabletop exercise. This report documents strengths and weaknesses of the team’s approach, identifies vulnerabilities in current protocol, and lays out concrete next steps to improve future incident response.

More on information technology

person sitting at a desk working on a laptop

5 key takeaways from an analysis of the U.S. IT labor market

By Abhilash Panthagani and Anna Dolder | November 2, 2022

To compete in today’s cutthroat IT labor market, higher ed leaders need to understand the latest labor market trends from higher ed and across industries to inform how they advertise jobs and recruit talent. Read EAB’s analysis of nationwide IT job postings in higher ed and explore our five key takeaways from this data.


Creating a data-informed campus part 1

By Jason P. Browning, Ph.D., MBA | September 21, 2022

From tracking student success metrics to operational efficiency, data and analytics provide colleges and universities crucial information in this period of enhanced scrutiny. This blog post discusses 3 elements of tech infrastructure necessary for a data-informed campus.


Campus 2030: Envisioning Tomorrow’s Multi-Modal Campus

June 10, 2022

Explore our infographic to learn about the future of the multi-modal campus and how seven spaces will change over the next decade due to trends in student expectations, hybrid work, and more.

5 technology investment tips to guide your digital transformation strategy

By Matt Hagerty | May 26, 2022

For data and technology to truly deliver value and drive change, you need an intentional technology investment strategy. Learn 5 steps you can take to enact a tech investment strategy that supports your institution’s digital transformation.

Strategies to prepare for a security breach

We outline four high-value components that should be included in your IT breach response plan.

EAB asks you to accept cookies for authorization purposes, as well as to track usage data and for marketing purposes. To get more information about these cookies and the processing of your personal information, please see our Privacy Policy. Do you accept these cookies and the processing of your personal information involved?