From Knowing the Risk to Testing the Response
Two intensive, outcome-based workshops designed to help cybersecurity professionals make better decisions and build stronger organisational readiness.
Workshop Description
Two practical workshops built as a single journey: first learn to prioritise cyber risk by what matters to the business, then learn to test your organisation's response through well-designed tabletop exercises.
Each workshop is 10 hours of live, hands-on training with practical frameworks, scenario-based exercises and reusable tools you can apply at work immediately. Attend one, or take both.
From Technical Exposure to Business Risk
Learn to prioritise cyber risks based on business impact, exploitability and exposure, rather than relying on vulnerability scores alone.
The Tabletop Exercise Playbook
Learn to design realistic cyber crisis scenarios, facilitate decision-making and turn exercise findings into actionable improvement plans.
Workshop Highlights
- 10 hours per workshop
- Live on Zoom
- 10 CPE credits per workshop
- Practical frameworks & templates
- Hands-on, scenario-based exercises
- Reusable tools for your organisation
Skills you can apply immediately at work.
Workshop Coverage
From Technical Exposure to Business Risk
Move beyond vulnerability scores and technical severity. Learn how to determine which risks matter most to the business, where remediation effort should go first, and how to justify those decisions to management.
- Understanding risk-based prioritisation versus severity-based prioritisation.
- Asset criticality, business services, threat context and exposure mapping.
- Combining exploitability, attack paths, vulnerabilities and business impact.
- Building a practical risk-scoring and prioritisation model.
- Risk acceptance, remediation decisions, ownership and escalation.
- Translating technical exposure into business risk and executive reporting.
The Tabletop Exercise Playbook
Learn how to run a meaningful tabletop exercise, from defining objectives and creating scenarios to facilitating decisions, evaluating performance and turning findings into corrective actions.
- Tabletop fundamentals: objectives, scope, audience and success criteria.
- Scenario design, assumptions, roles, injects and escalation triggers.
- Facilitator, controller, observer and participant responsibilities.
- Running the exercise: timed injects, decision points and handling unexpected responses.
- Testing incident response, crisis communications, business continuity and recovery.
- Evaluating decisions, recording evidence and conducting a hotwash.
Who Should Attend
For anyone who owns, influences or advises on security decisions.
- Security Professionals (Analysts, Engineers, Consultants)
- CISOs & Aspiring Security Leaders
- IT Managers & Directors
- Risk, Compliance & Audit Professionals (GRC)
- Incident Response & SOC Leads
- Business Continuity & Crisis Management Teams
Why Attend These Workshops?
Practical, hands-on and built around the decisions you make at work.
- Practical FrameworksTake away structures and templates you can adapt for your own organisation.
- Scenario-Based LearningWork through realistic situations and defend your decisions.
- Business-Focused RiskLearn to prioritise by business impact, not just technical severity.
- Response ReadinessLearn to test and improve how your organisation handles a real crisis.
- Reusable ToolsRisk registers, inject templates, scorecards and after-action reports.
- Executive CommunicationTranslate technical findings into decisions leadership can act on.
- Immediately ApplicableSkills you can put to work the week after the workshop.
- CPE CreditsEarn 10 CPE credits for each workshop you attend live.
Your Trainers
Gaurav Batra
A Certified cybersecurity professional, result-oriented IT & IS change leader with more than 18 years of experience in implementing secure technical business decisions and delivering value-added solutions.
- Former Asia CISO at Mondelez International
- Senior IT operation Risk Manager – Axis Bank
- Resiliency risk lead – JPMorgan Chase & Co.
Industry SMEs
Industry subject-matter experts will join Gaurav across the workshops, adding practitioner perspective to the sessions. Names will be announced soon.
Frequently Asked Questions
Do I have to attend both workshops?
No. Each workshop is self-contained and can be taken individually. The combo pass covers both at a lower overall price.
How are the workshops delivered?
Both workshops are delivered live on Zoom, 10 AM – 4 PM IST. Workshop 1 runs on 30th & 31st January 2027 and Workshop 2 on 6th & 7th March 2027.
How long is each workshop?
Each workshop is 10 hours of live, hands-on training, spread over two days (10 AM – 4 PM IST).
Can these workshops help me earn CPE credits?
Yes. Each workshop carries 10 CPE credits, so the combo earns you 20 CPE credits in total.
What will I receive after the workshop?
Workshop 1 gives you a reusable risk-prioritisation framework, a worked risk register and an executive-ready summary. Workshop 2 gives you a tabletop exercise design pack, facilitator guide, scenario inject templates, an evaluation scorecard and an after-action report template.
Are there any prerequisites?
No strict prerequisites. A working familiarity with cybersecurity, risk or incident response will help you get the most out of the exercises.
How do I choose my workshop when enrolling?
For an individual workshop, pick Workshop 1 or Workshop 2 from the dropdown on the checkout page. To attend both, use the combo option.
Does the early bird price apply to the combo?
Yes. Both the individual workshops and the combo are available at early bird pricing, limited to the first 25 seats.
Ready to Prioritise and Test?
Early bird pricing for the first 25 seats. Choose one workshop or both.
Choose Your Workshop
- 10 hours live on Zoom per workshop
- 10 CPE credits
- Frameworks, templates & exercise pack
Prioritise + Test
- 20 hours live on Zoom
- 20 CPE credits
- All frameworks, templates & exercise packs
Prices in Indian Rupees (₹). Payment opens on the registration page.