Establish what is known
Read incident summaries and access records. Separate confirmed disruption from an attacker’s claims; identify what the technical team must verify.
Ransomware & crisis decisions
Cyber crisis war room
Rehearse the decisions before the incident.
Systems are unavailable. A ransom demand arrives. Your people, advisers and customers need answers before the facts are complete.
1 day · £750 per personIncludes applicable VAT · Private teams from £4,950 + VAT where applicable
Inside the exercise
Facilitated tabletop exercise
A ransomware incident develops through timed updates: interrupted operations, a claim of stolen data, an unexpected supplier dependency and a journalist’s enquiry. Participants take different responsibilities and build a shared account as the situation changes.
Work through a fictional scenario with a facilitator, compare decisions and examine their consequences in the debrief.
Coordinate the response
Decide who owns containment, evidence preservation, business continuity and external advice. Record decisions, assumptions and the information needed to revisit them.
Respond as the story develops
Handle a simulated customer question and media enquiry while new information challenges the first explanation. Prepare a factual briefing and identify notification decisions for legal review.
Turn the rehearsal into improvements
Debrief the handovers, dependencies and decisions that slowed the team down. Identify owners for practical changes to the response plan.
The Cato & Veil approach
Connect the whole problem.
The technical incident is the starting point. We follow its consequences through people, evidence, commercial dependencies and the public account of what happened.
Who it is for
Leadership, security, IT, legal, operations and communications teams; professionals preparing to work across those boundaries.
What you take away
A worked decision log, a stakeholder briefing and a prioritised list of response improvements drawn from the exercise.
New programme / Register interest
Choose how to take part.
An individual place
Join a public cohort when dates are announced. Register your interest and tell us what you want to develop.
£750 per person1 day · Includes applicable VAT
Includes facilitated exercises, course materials and the debrief. Dates to be announced.
Register interest in a place ↗A private team exercise
Discuss a session built around your organisation, the roles in the room and the decisions you want to rehearse.
From £4,950 per team1 day · Up to 10 participants · Plus VAT where applicable
Arrange private team training ↗Individual fees are in GBP and include any applicable VAT. Travel and accommodation are not included unless expressly stated in your booking. Private team prices are in GBP and exclude VAT where applicable. Starting fees cover a one-day programme at your UK premises for the stated group size, a preparation call, adaptation of the course scenario, facilitation and an exercise debrief. Venue hire, travel, accommodation and additional specialist work are quoted separately before booking. An enquiry does not commit you to a booking. Dates, scope and the final total are agreed before you decide.