Home/BoK/Templates/Tabletop Exercise Planning Template
Back to Hub
Last Reviewed: 2026-06-25
Reviewer Role: Insider Risk / Legal / Privacy review
Advanced Asset
Reporting ModuleInteractive Sheet

Tabletop Exercise Planning Template

A tabletop exercise planning template helps teams rehearse insider risk scenarios such as data exfiltration, sabotage, workplace violence, privileged misuse, AI data leakage, or contractor access abuse.

Primary Audience & Scope

Program leaders, Security, HR, Legal, executives, communications

When to Use

  • •Building or reviewing the related program activity.
  • •Preparing a repeatable workflow.
  • •Creating site-downloadable working content.

Interactive Work Area

Fill or track items interactively and copy out to your Clipboard

Template Table Structure

FieldWorking promptTemplate fieldReader input
Resource owner—Review date—
Scope—Relevant system/data/process—
Business owner—Control or procedure link—
Evidence location—Action owner—
StatusNot started / in progress / complete / exception——

Checklist Audit List

0% Done(0/8)
Check
Checklist item

Define exercise objective.

Evidence: Owner / date / evidence

Select scenario and assumptions.

Evidence: Owner / date / evidence

Name participants and observers.

Evidence: Owner / date / evidence

Build inject timeline.

Evidence: Owner / date / evidence

Identify decisions to test.

Evidence: Owner / date / evidence

Include Legal, HR, Privacy, Communications, Security, IAM, and business owners as needed.

Evidence: Owner / date / evidence

Define evaluation criteria.

Evidence: Owner / date / evidence

Capture after-action findings and assign owners.

Evidence: Owner / date / evidence

What Completion Looks Like

  • 1Required inputs complete.
  • 2Action owners assigned.
  • 3Evidence retained.
  • 4Related risk/control/procedure linked.
  • 5Review cadence established.

Insider Risk Capability Framework™ (IRCF™) Alignment

Primary IRCF™ Component
Governance
Programmatic RelevanceProvides concrete, reusable structure for insider risk management work.
Non-legal-advice Compliance NoteThis resource is a planning aid and does not provide legal advice. Organizations should adapt it to their policies, jurisdictions, labor obligations, privacy requirements, contracts, and risk appetite. Sensitive monitoring, investigation, employment, evidence, legal hold, and employee-data activities should be reviewed by appropriate Legal, Privacy, HR, Compliance, and labor stakeholders before use.

Operationalize This Template in RiskTKO®

Use RiskTKO® or request ITMG® support to adapt this template, align it to the Insider Risk Capability Framework™, and connect the output to measurable exposure reduction. Developer download build matrix - not page copy Resource ITMG® / RiskTKO® - Insider Risk Body of Knowledge - Templates and Checklists Real Content Pack

Request an Insider Risk AssessmentSee RiskTKO® in Action