ISA/IEC 62443 emphasizes preparedness and coordinated response as part of incident handling and response requirements.
Step 1: Purpose of tabletop exercises
Tabletop exercises simulate cyber incidents and require participants to practice decision-making, communication, escalation, and coordination without impacting live systems.
Step 2: Alignment with SP Element 7
SP Element 7 focuses on incident handling and response. Tabletop exercises directly validate these processes and identify gaps before a real incident occurs.
Step 3: Why other options are less effective for response readiness
Password hygiene improves prevention, not response. Architecture workshops build awareness, not reaction capability. Operator anomaly drills focus on detection, not coordinated response.
Step 4: Operational benefit
ISA/IEC 62443 stresses that response effectiveness depends on people and processes being exercised in advance.
Thus, tabletop exercises are the most appropriate activity.
