Three ways to improve readiness.
Tabletops for the moments that matter. Operational Simulations for the muscle memory in between.
Run one-off exercises, test policies and training on demand, or build an ongoing readiness cadence across your organization.
Tabletop Exercises
Multi-participant · 45-120 min
The exercises auditors, insurers, boards and regulators expect to see. Holly facilitates the exercise across your team, with the evidence ready when the session ends.
- Multi-participant, role-specific delivery
- Questions tailored to each participant’s role
- Scenario tailored to your business, frameworks and regulatory context
- Scenarios adapt based on your team’s responses
- Structured audit-ready report with timeline, decisions, gaps and evidence
- Recommended actions, owners and target dates
- GRC integrationComing soon
Operational Simulations
Single participant · 5-20 min
For the readiness work between tabletops. Test whether an SOP works in the hands of the person who runs it. Walk a policy. Pressure-test training. Short, repeatable.
- Single participant, on-demand
- Scenario specific to the SOP, policy or training being tested
- Report with strengths, gaps and recommendations
- Fast rollout across teams
- Run as often as you need
Readiness Programs
built around your cadence
Ongoing readiness programs and volume pricing for organizations running exercises continuously or at scale.
- Volume pricing across Tabletop Exercises and Operational Simulations
- Scheduled readiness cadences
- Scaled rollout across teams, vendors or partners
- Customized scenario and report templates
- Dedicated readiness lead
- Cross-exercise tracking and trendingComing soon
Compare options
| Feature | Tabletop Exercises | Operational Simulations | Readiness Programs |
|---|---|---|---|
| Used for | Coordinated response exercises with evidence capture
| Role-play testing of procedures, policies and training
| Running readiness as an ongoing function
|
| Price | $400 / exercise | $20 / simulation | Custom |
| Format | Multi-participant | Single participant | Both |
| Duration | 45 to 120 minutes | 5 to 20 minutes | Your cadence |
| Report | Audit-ready: timeline, decisions, gaps, evidence | Strengths, gaps and recommendations | Cross-exercise reporting and trending |
| Scenario | Tailored to your business, frameworks and regulatory context | Tailored to the SOP, policy or training being tested | Custom templates and framework mapping |
| IntegrationsComing soon | Yes | - | Yes |
| Dedicated readiness lead | - | - | Included |
Pricing, answered
Which one do I need?
If an auditor, insurer, customer or regulator is going to read the output: Tabletop.
If you're testing whether an SOP actually works in the hands of the person who runs it, or whether someone remembers what last quarter's policy update actually said: Operational Simulation.
Can I run them together?
Yes, and most teams do.
Tabletops are typically run around major operational risks. Operational Simulations run continuously underneath to reinforce training, validate SOPs and keep teams sharp.
Readiness Programs bundle both with volume pricing and ongoing coordination.
How quickly can I run my first exercise?
Immediately.
Operational Simulations can be run on demand in minutes. Tabletop Exercises can also be launched immediately, with Holly facilitating the exercise across your team without the traditional coordination overhead of external facilitators or consultants.
What does Holly actually do?
Holly is our AI agent that acts as the facilitator. She runs the session as a conversation, asks the questions, adapts to your team's answers, and writes the report.
No facilitator scheduling. No transcripts to clean up afterward.
What's included in a Readiness Program?
Two common models.
The first is ongoing readiness: a continual cadence across Tabletop Exercises and Operational Simulations, with volume pricing, customized scenarios, reporting templates and cross-exercise tracking.
The second is scaled outreach: pushing exercises to vendors, franchisees, partners or distributed teams, commonly used for TPRM and operational assurance programs.
Are the scenarios customized?
Yes.
Tabletop Exercises are tailored to your business, operational environment, frameworks and regulatory context.
Operational Simulations are tailored to the SOP, policy, process or training material being tested.
How do you handle regulated industries?
We support organizations operating against frameworks and regulations including SOC 2, ISO 27001, CMMC / NIST SP 800-171, PCI DSS, HIPAA, DORA, APRA CPS 230, the SEC cyber rule, SQF, BRCGS and FSMA.
If your framework is not listed, ask. We have likely already built a scenario for it.
Test it before it's tested for you.
Run your first exercise in minutes, not weeks.