Build a tabletop scenario locally in your browser. Export JSON to import into Breachday after you subscribe, or download DOCX / PDF to share offline.
Your work auto-saves in this browser only. Export JSON before clearing cookies or switching devices.
Drag inject cards across lanes to shape scenario flow. The fixed phase structure remains unchanged.
Phase 1
Initial detection, assessment, and notifications that trigger both IR and continuity tracks.
Inject cards
1 injectInject 1
Add at least one question to choose how participants respond (freeform, vote, slider, etc.). Use the menu to add a group-wide question or target a specific role. Add participant roles in Participants & Roles to enable role-specific questions.
Group-wide
No group-wide questions yet.
Phase 2
Concurrent activation of incident response and business continuity structures and cadence.
Inject cards
0 injectsPhase 3
Joint view of technical compromise and business impact across security and continuity teams.
Inject cards
0 injectsPhase 4
Technical containment alongside continuity strategies to maintain critical operations.
Inject cards
0 injectsPhase 5
Remove threats while stabilizing workarounds and recovery paths for critical functions.
Inject cards
0 injectsPhase 6
Safe restoration of systems and transition of business functions toward normal operations.
Inject cards
0 injectsPhase 7
Aligned external messaging, regulatory, and stakeholder obligations across IR and BCP.
Inject cards
0 injectsPhase 8
Unified hotwash and improvement actions for both security and continuity programs.
Inject cards
0 injects