Skip to content

Exercise in a Box is an online tool from the NCSC which helps organisations test and practise their response to a cyber attack.

It is completely free, and you don’t have to be an expert to use it. The service provides exercises, based around the main cyber threats, which your organisation can do in your own time, in a safe environment, as many times as you want. It includes everything you need for setting up, planning, delivery, and post-exercise activity, all in one place.

Most organisations rely upon suppliers to deliver products, systems, and services. You probably have several suppliers yourself; it is how we do business. But supply chains can be large and complex, involving many suppliers doing many different things. Effectively securing the supply chain can be hard because vulnerabilities can be inherent or introduced and exploited at any point in the supply chain. A vulnerable supply chain can cause damage and disruption to an organisation and its customers. It is important for organisations to conduct cyber exercising to enable them to prepare for a potential cyber attack within their business and mitigate that threat as much as possible. 

Some of the benefits and key takeaways of cyber exercising include: 

  • Understanding actual versus perceived capabilities of people and technology. 
  • Figuring out where to invest budgets in training or new technology. 
  • Building muscle memory and reducing stress for security teams and management. 
  • Improving morale and team building. 
  • Meeting regulatory requirements. 

*If you are a private sector organisation and interested in attending an Exercise in a Box session, send an email to [email protected] and we will get in touch with you.

Register Here

We recommend 3 – 7