Beyond the Checkbox: Making Cybersecurity Tabletop Exercises in Higher Ed More than Just an Exercise

Effective crisis management requires proactive planning, robust communication, and practiced responses. While many institutions recognize the importance of preparedness, the traditional approach to tabletop exercises (TTXs) often falls short, focusing on procedural compliance rather than fostering critical thinking, collaborative problem-solving, and practical application. This presentation argues for a paradigm shift in TTX design and implementation, advocating for the development of custom, scenario-based exercises that reflect the unique vulnerabilities and operational realities of each institution. It offers a practical framework for creating and facilitating such exercises, moving beyond mere "checking the box" to achieving tangible improvements in institutional preparedness and resilience. The proposed framework that will be reviewed emphasizes needs assessment, realistic scenario development, facilitated discussion, and post-exercise analysis. It will provide a practical roadmap for creating TTXs that are not only engaging and informative, but also contribute to tangible improvements in institutional crisis management capabilities.