The National Cyber Security Centre (NCSC) provides an ‘Exercise in a Box’ online tool that can help businesses check how resilient they are to cyber attacks as well as practise their response in a safe environment.


The tool will give you some exercises that can be carried out in your own time as many times as you want. The exercises include:


-A ransomware attack delivered by phishing email;
-Mobile phone theft and response;
-Being attacked from an unknown Wi-Fi network;
-Insider threat leading to a data breach;
-Third party software compromise;
-Threatened leak of sensitive data;
-Home & remote working; and
-Managing a vulnerability disclosure.


Micro-exercises are also included, covering areas like use of passwords and identifying and reporting a suspected phishing email.


To use ‘Exercise in a Box’ you need to register for an account with NCSC, and you’ll be provided with a tailored report that helps you to identify what to do next and sets out where you can find helpful guidance.


See: https://www.ncsc.gov.uk/information/exercise-in-a-box