Cyber Wargames & Tabletop
Exercises Australia
Intrix delivers structured cyber wargames and tabletop exercises for Australian organisations under APRA CPS 234, the SOCI Act, and Essential Eight. We run board-level scenarios and technical purple team simulations that expose gaps in your incident response before a real attack does.
Will Your Plan Work Under Pressure?
Having an IR plan is only the first step; knowing it works under real pressure is what truly matters. When systems fail, and everyone demands answers, untested plans fall short.
Testing isn’t optional, it’s required by APRA CPS 234, the SOCI Act, and Essential Eight. More importantly, it builds muscle memory, exposes gaps early, and strengthens team confidence.
Intrix runs realistic, high-impact simulations that mirror real crises, testing technical response, communication, legal coordination, and leadership under pressure.
Our Solution: Intrix Incident Response Testing
We run tailored exercises for both executives and technical teams, each ending with clear, actionable steps to boost resilience
C-Suite & Board Tabletop Exercises
A scenario workshop for executives focused on crisis decisions, communication, continuity, and compliance under CPS 234 and the SOCI Act
Strategic decision-making under pressure
Crisis communication and media management
Regulatory notification and legal coordination
Board governance and accountability testing
Business impact and recovery priority assessment
Stakeholder and customer notification protocols
Technical Wargames (Purple Team Exercises)
A live simulation where your Blue Team defends against our Red Team’s attack, testing detection, analysis, containment, and response skills in real time
Live adversary simulation by expert red team
Detection capability and SIEM rule effectiveness testing
Incident response playbook validation
Team coordination and communication testing
Containment and eradication procedure effectiveness
Mean time to detect (MTTD) and respond (MTTR) measurement
Gap Analysis & Improvement Plan
After each exercise, we deliver a detailed report, a prioritized gap analysis, and clear recommendations to strengthen your response before the next test
Detailed findings report with executive summary
Gap identification across people, process, and technology
Response timeline and decision-point analysis
Prioritized remediation recommendations
IR plan and playbook update guidance
Compliance documentation for regulatory requirements
Why Regular IR Testing Matters
Identify Gaps Before Attackers Do
Exercises uncover gaps in detection, response, communication, and decision-making—so they can be fixed before a real incident
Build Team Confidence & Muscle Memory
Realistic practice builds confidence, reduces panic, and helps teams respond instinctively under pressure
Validate Technology Investments
Test whether your SIEM, EDR, and other security tools actually detect real attacks and whether your team knows how to use them effectively
Meet Regulatory Testing Requirements
Documented exercises prove compliance with APRA CPS 234, SOCI Act, ISM, and Essential Eight requirements
Additional Exercise Formats
Ransomware Response Simulation
Focused scenario testing your response to a ransomware attack, from initial detection through containment, recovery decision-making, and regulatory notification
Data Breach Notification Exercise
Simulated data breach testing NDB scheme assessment, APRA/regulator notification timelines, customer communication, and legal coordination
Business Email Compromise Response
Testing detection and response to executive impersonation, fraudulent wire transfers, and credential compromise scenarios
What is a cyber tabletop exercise?
A tabletop exercise is a structured workshop where your team works through a simulated cyber incident scenario. Participants talk through their response decisions in real time, exposing gaps in your IR plan, communication protocols, and team coordination without disrupting live systems.
Who should attend a tabletop exercise?
It depends on the format. Board and C-suite exercises focus on crisis decisions, regulatory notification, and business continuity. Technical wargames involve your SOC, IT, and security operations teams. Intrix runs both formats and can combine them into a full organisational exercise.
How often should we run tabletop exercises?
APRA CPS 234 and the Essential Eight both require regular testing. Most Australian organisations run at least one exercise per year, with higher-risk sectors like financial services and critical infrastructure running them twice yearly or after significant changes to their environment.
Do we need an existing IR plan to run an exercise?
No. Intrix can run a tabletop exercise with or without a formal IR plan in place. If you do not have one, the exercise will surface what needs to be documented. We include IR plan update guidance in every post-exercise report.