Services / Packages
AI Incident Tabletop Exercise
A facilitated simulation of an AI failure or data exposure that tests how your team would respond.
From $3,500Half-day session
Public agencies receive quotes structured to fit their procurement rules.
You own everything we produce.
Who this is for
Organizations usually call us about this when:
Your incident response plan doesn’t cover AI failures.
Your board wants to know the organization is ready for an AI incident.
You’ve launched an AI system that handles sensitive data.
Overview
A tabletop exercise walks your leadership and response team through a realistic AI incident, such as a chatbot exposing personal data or a model making harmful decisions, and tests who decides what, who is notified, and how quickly. You receive an after-action report with the gaps found and specific fixes.
What’s included
- Scenario designed around your AI systems
- Facilitated half-day session for leadership and responders
- Notification and decision-making checkpoints
- Observations on roles, communication, and timing
- After-action report with gaps and fixes
- Updates for your incident response plan
Available under attorney-client privilege. We can perform this work at the direction of your counsel, so findings may be protected by privilege. Ask us about privileged engagements.
How it works
Design
We build a realistic scenario around your systems, data, and obligations.
Run
We facilitate the exercise, introducing new developments as it unfolds.
Improve
You receive an after-action report and updates for your response plan.
How it works for your organization
The same service, tailored to the obligations and realities of each sector.
Private Sector
Companies use tabletop exercises to prepare leadership for AI incidents before they happen.
- Data exposure through AI tools
- Harmful outputs reaching customers
- Breach notification decisions
- Board and executive readiness
Public Sector
Agencies use tabletop exercises to test how they would respond to an AI failure affecting residents.
- AI errors in resident services
- Exposure of resident or case data
- Public communication and records
- Coordination across departments
Nonprofits
Nonprofits use tabletop exercises to prepare a small team to respond calmly to an AI incident.
- Exposure of client or donor data
- Harmful chatbot responses
- Who decides and who is notified
- Board communication
Frequently asked questions
How much does AI Incident Tabletop Exercise cost?
AI Incident Tabletop Exercise starts at $3,500. The final price depends on scope, and we confirm it in writing before any work begins.
How long does it take?
The exercise is a half-day session, with preparation beforehand and an after-action report afterward.
What do we receive?
The engagement includes: scenario designed around your AI systems; facilitated half-day session for leadership and responders; notification and decision-making checkpoints; observations on roles, communication, and timing.
Can this be done under attorney-client privilege?
Yes. When your counsel engages us and directs the work for the purpose of giving legal advice, our findings may be protected by privilege. Ask your counsel to contact us and we’ll structure the engagement with them.
What if a deliverable doesn’t meet the agreed scope?
We revise it until it does, at no extra cost. And if we miss an agreed delivery date, we take 10% off that deliverable.
Who owns the deliverables?
You do. Everything we produce for you is yours to keep, use, and share.
Related Guides
- AI Vendor Assessment Checklist for Credit UnionsThe questions credit unions should ask AI vendors about member data, security, model fairness, and contract terms before signing.
- AI Incident Response Playbook for Credit UnionsWhat a credit union should do, hour by hour, when an AI tool exposes member data, makes wrong decisions, or misleads members.
- AI Tabletop Exercise Scenario for Credit UnionsA ready-to-run scenario where a member service chatbot exposes account details, with timed developments and questions for each phase of the response.
- AI Laws by StateWhere each state’s AI and privacy rules stand, with key dates and a page for every state.
Related services
AI Risk Review
An independent review of one AI tool, vendor, or use case before you adopt it or expand it.
Fractional Chief AI or Privacy Officer
A named senior executive who owns your AI governance or privacy program and reports to your leadership.
AI Governance Readiness Assessment
A gap analysis of your AI governance against the NIST AI RMF, with a prioritized plan for what to fix first.
Talk through your AI and privacy questions
Tell us what you're working on, and we'll reply within one business day.