Members of the ELM Group team recently took part in an enjoyable and immersive cyber security tabletop exercise, providing a valuable opportunity to explore cyber risk, organisational resilience and leadership decision-making in a practical setting.
Designed to move beyond technical cyber security concepts, the exercise challenged participants to think strategically about how organisations can prepare for and respond to an evolving threat landscape. Working in groups, team members were placed in charge of a fictional organisation with limited existing cyber protection and tasked with making a series of important decisions over a simulated five-year period.
With a defined budget available, participants had to decide where best to invest in a range of cyber and physical security measures. As the exercise progressed, each group encountered realistic cyber threats, operational challenges and unexpected scenarios that required careful consideration and quick thinking.
What made the session particularly engaging was its interactive nature. Every decision carried consequences, allowing participants to see first-hand how different approaches could influence not only organisational resilience but also financial performance, reputation and operational stability. The exercise encouraged discussion, challenged assumptions and demonstrated the complex balance organisations must strike when managing risks and resources.
One of the most important messages to emerge from the training was that cyber security is not simply an IT issue. While technology plays a significant role, effective cyber security also depends on leadership, governance, risk management, communication and organisational preparedness.
The exercise highlighted how cyber incidents can have far-reaching implications across an organisation, affecting everything from service delivery and operations to customer confidence and reputation. It also reinforced the importance of proactive planning, helping participants understand the value of making informed decisions before an incident occurs rather than reacting once a problem has arisen.
At ELM Group, we are committed to ensuring that the information, systems and services our residents, customers and colleagues rely on remain secure and resilient. Exercises such as this form an important part of that commitment, helping to strengthen awareness, encourage meaningful discussion and build confidence around cyber security at a leadership level.
As cyber threats continue to evolve, investing time in learning, preparedness and resilience remains essential. The insights gained from this exercise will help support ELM Group's ongoing focus on effective risk management, organisational resilience and continuous improvement, ensuring we remain well positioned to protect our people, our services and the communities we serve.
Key takeaways from the exercise:
Cyber security is a leadership and organisational responsibility, not solely an IT function.
Decision-making and preparedness play a critical role in organisational resilience.
Effective risk management requires balancing investment, resources and priorities.
Planning ahead can significantly reduce the impact of potential cyber incidents.
Open discussion and collaborative learning help strengthen organisational awareness and confidence.
This interactive exercise provided a highly valuable learning experience and reinforced the importance of staying prepared in an increasingly digital world.