Scenario Exercise: When a major cyber incident strikes, attempting to “recover everything” is often unrealistic — and sometimes unsafe. What matters is knowing your Minimum Viable Company (MVC): the smallest set of capabilities your organisation must restore to continue operating, communicate clearly, and retain trust under pressure.

In this fast‑paced, hands‑on workshop, participants are placed into a shared cyber crisis scenario where trust in systems, identity, and data is already compromised. Working in mixed leadership roles — spanning board, executive, financial, operational, and security perspectives — each table must make a series of real‑world recovery decisions as the situation escalates.

Each industry specific table produces clear, practical outputs: explicit MVC trigger statements, ownership of key decisions, chosen recovery posture, and the risks they are prepared to accept. In just 45 minutes, participants experience the tension of making high‑impact decisions with incomplete information — and leave with a sharper understanding that cyber resilience is not about more tools, but about fewer, clearer decisions made early and rehearsed before they are needed. 

This workshop is ideal for CISOs, business leaders, board‑level stakeholders, and anyone responsible for operational resilience, crisis decision‑making, or organisational continuity.