Training
Featured CourseView All Courses

SEC595: Applied Data Science and AI/Machine Learning for Cybersecurity Professionals

SEC595Cyber Defense, Artificial Intelligence
SEC595: Applied Data Science and AI/Machine Learning for Cybersecurity Professionals
View course detailsRegister
Get a Free Hour of SANS Training

Experience SANS training through course previews.

Learn More
Learning Paths
FeaturedView all Focus Areas
NEW - AI Security Training
Can't find what you are looking for?

Let us help.

Contact us
Free Resources

SANS Community Benefits

Connect, learn, and share with other cybersecurity professionals

Customer Case Studies

Discover how organizations and individual cyber practitioners use SANS training and GIAC certifications

AI Risk & Readiness

Explore expert-driven guidance, training, and tools to help defend against AI-powered threats and adopt AI securely

Join the SANS Community

Become a member for instant access to our free resources.

Sign Up
For Organizations

Public Sector

Mission-focused cybersecurity training for government, defense, and education

Partnerships

Explore industry-specific programming and customized training solutions

Sponsorship Opportunities

Sponsor a SANS event or research paper

Interested in developing a training plan to fit your organization’s needs?

We're here to help.

Contact Us
Contact Sales
Contact Sales

Prepare with Confidence. Prevail Under Pressure: The Power of SANS Cyber Crisis Exercises

From uncertainty to readiness: Pressure-test your people, processes, and decision-making so your organization can respond decisively, coordinate effectively, and build true resilience.

Contact UsFree Introductory Session
SANS Crisis Exercise

Readiness Starts Here

SANS Cyber Crisis Exercises are immersive, scenario-based experiences that prepare organizations to navigate today’s complex cyber threat landscape. Designed for technical teams, business leaders, and executive stakeholders, these exercises replicate real-world cyber incidents in a controlled, facilitated environment with realistic injections. Each engagement includes a comprehensive performance report highlighting strengths and opportunities for improvement. By transforming strategy into practice, SANS Cyber Crisis Exercises validate response plans, strengthen cross-functional coordination, and elevate leadership decision-making. Ensure your organization is not reacting for the first time when a crisis strikes but executing a well-rehearsed response.

Free Introductory Session

From Technical Teams to the Boardroom

These exercises are ideal for medium to large organizations across all industries seeking to validate performance under pressure and close critical gaps.

Participants may include:

  • Technical Subject Matter Experts (IR, SOC, IT, Security Operations)
  • Departmental Managers
  • Business Executives and Division Leaders
  • C-Suite Leaders (CEO, CIO, CISO, CFO, CLO, CMO, etc.)
  • Board of Directors
Man Smiling at the Camera and Holding Tablet

Structured for Impact. Built for Flexibility.

Our structured, flexible model is designed to match your organizational needs and maturity, delivering private, confidential exercises tailored to your environment and objectives in-person, live online, or in hybrid formats. These customizations allow organizations to test a specific team, connect multiple levels of leadership, or run a fully integrated enterprise-wide exercise. The choice is yours.

Delivery formats:

Tabletop (TTX), conversation-based or fully immersive simulation (SimEx)

Organizational levels:

Technical Response Operations, Cross-Functional Business Leaders, or Executives & Board Members

Flexible Engagement Models:

Single-team exercise, Multi-team coordination, Enterprise-wide simulation

What global security leaders are saying about attending a SANS Cyber Crisis Exercises

  • Slide 1 of 4
    The SANS ECE allows executives and leadership teams to walk through response plans, identify gaps, and refine cyber crisis management skills in a risk-free environment by simulating various incident scenarios.
    OscarCISO
  • Slide 2 of 4
    The scenarios and "injects" incorporated into the exercise provided real-life examples of cyber threats and incidents that the participants could relate to and apply actual processes and mitigation actions.
    US Federal Agency Participant
  • Slide 3 of 4
    It was a very engaging activity; all executives liked the content and left the room appreciating the importance of cybersecurity.
    AlzubaidiCISO
  • Slide 4 of 4
    The exercise and instructors created a safe place to ask questions and gain insight into different workgroup's internal processes. Bottom line, Chris and Mike are excellent instructors.
    JorgeCybersecurity Manager
Slide 1 of 0

Inside a SANS Cyber Crisis Exercise

Each exercise challenges your teams to operate as they would during a real incident, validating readiness across technical response, business operations, and executive leadership.

Designed for your organization and aligned to participant level, exercises are built to:

  • Assign roles and responsibilities
  • Validate detection, response coordination, and technical execution
  • Evaluate tools, processes, and real-time operational performance
  • Strengthen communication between technical, business, and executive teams
  • Test executive and board decision-making
  • Identify gaps across people, processes, and crisis management plan
  • Evaluate business continuity and operational resilience
  • Meet regulatory and reporting obligations
SANS Tabletop Exercise

Why Cyber Readiness Pays Off

Cyber incidents don’t just disrupt operations. They can carry measurable financial consequences. The latest data shows just how quickly costs escalate, and why preparation can significantly reduce impact. Data Breach Cost (IBM, Cost of Data Breach Report 2025)

$250K

Worth of fines paid by 25% of organizations that experienced a data breach

$1.9M

Cost savings, in USD, from extensive use of AI in security, compared to organizations that didn’t use these solutions.

$4.4M

The global average cost of a data breach, in USD, a 9% decrease over last year—driven by faster identification and containment.

Facilitators

Mike Barcomb

Mike Barcomb

Director, SANS Cyber Crisis Exercises

Mike has a 30-year career serving in the United States Army Reserve as a Military Intelligence Officer and recently retired from IBM Corporation after 31 years working in various software development, operational, and executive consulting roles.

Learn more
Chris Wilkes

Chris Wilkes

Senior Leader

Chris is responsible for preparing and leading SANS Executive Cyber Exercise engagements for customers globally. He has over thirty years of working with all forms of technology in complex, global corporate environments.

Learn more
Daniel King

Daniel King

SANS Cyber Crisis Exercises Facilitator

Daniel is responsible for developing and leading SANS Cyber Crisis Exercises to evaluate and improve organizational leadership, readiness, and enterprise resiliency.

Learn more

Connect with a Business Cyber Exercise Advisor

Put your readiness to the test. Connect with a SANS advisor to learn how customized cyber exercises can test your plans and strengthen your organization’s response.

Contact Us Today

Recommended Reading

Enhancing Your Cyber Defense: Comparing Simulations and Tabletop Exercises

Read Now
Graphic of a lock.