For consulting, vCISO and audit

Tabletop exercises for your clients,
without building a workshop every time.

Your clients fall under NIS2 or face an ISO 27001 or TISAX audit, and the question about the crisis exercise lands with you. You could write a scenario every time, build the materials and type up the minutes afterwards. With SecDrills you take a ready-made scenario, guide the client through the exercise and hand over a report at the end that they can present in the audit.

Request a demo

What you get out of it

Ready-made scenarios

You do not have to develop an exercise design. The scenarios are prepared and can be used with any client straight away.

One tenant per client

In the Group package you run each client as a separate tenant, with separate exercises and evaluations.

A result for the client

Every exercise ends with a report that your client can present to the auditor. You no longer have to write the minutes yourself.

How to build SecDrills into your offer

Facilitating exercises at the client

You offer tabletop exercises as a service of your own. Process and report are the same every time, you only pick the suitable scenario.

vCISO and GRC mandates

Your mandate gains regular crisis exercises that can be evidenced. Your client sees that their procedures are being tested.

Before the audit

Before a NIS2, ISO 27001 or TISAX audit you play through a scenario with the client. Afterwards the documented exercise evidence is in place.

One fixed date per quarter

Quarterly exercises can be agreed as a fixed service component. That gives you predictable revenue instead of a one-off project.

From a one-off project to a recurring engagement

Writing a good exercise scenario takes days: design the situation, formulate the injects, build the materials. With SecDrills that disappears. You take a ready-made scenario, follow the guided process and can start straight away with the next client.

During the exercise SecDrills feeds in the injects and records every decision with a timestamp. You can concentrate entirely on the discussion. If you look after several clients, the Group package separates them as tenants of their own. At the end of every exercise there is an after-action report that you hand to the client.

NIS2, ISO 27001 and TISAX require regular exercises and tests. So your clients need the evidence anew every year. For you that means: the exercise fits as a recurring service into your vCISO, GRC or audit mandate.

How to get started

1

Choose a package

To get to know it, Professional is enough: all scenarios, up to 10 participants, €4,900 net a year. For several clients with separate tenants there is Group on request.
2

Set up clients as tenants

In Group every client gets its own organisation. The results stay separate, and you manage everything in one place.
3

Agree a quarterly date

Agree a fixed exercise date per quarter with every client. After every exercise the client receives their report for the audit.

Test the format from your clients’ point of view

In the demo we play through a scenario with you and show you the report your client receives at the end. Then you can judge whether the format fits your offer. We get back to you within two working days.