Playbook Module

Privacy & Cybersecurity Simulation & Response Checklist

An interactive tabletop simulation template and recorder for privacy and cybersecurity exercises focused on patient safety, evidence preservation, communications, and accreditation readiness. Includes scenario selection, evidence-gathering checklists, notification lists, metrics, communications templates, and a post-exercise improvement log.

Interactive Tool

Privacy & Cybersecurity Tabletop Simulation & Response Recorder

Purpose

Use this interactive tabletop simulation template to run, record, and learn from privacy and cybersecurity exercises that matter to patient safety, accreditation readiness, and operational resilience. Complete the fields during or shortly after the exercise to capture decisions, evidence actions, communications, and follow-up tasks.

How to use

  1. Choose a scenario template or describe your own.
  2. List participants and assign roles.
  3. Run the tabletop, prompt decision points, and capture timestamps and evidence actions in the fields below.
  4. Record findings, prioritized actions, owners, and due dates in the Post-Exercise Improvement Log.

Where possible, save or link to captured artifacts (logs, images, email headers) in your secure evidence repository and reference them in the Attachments field.

Short name for this simulation (e.g., 'Ransomware tabletop - ED')
YYYY-MM-DD or local date/time of exercise
Where the exercise was run (room, video link, phone)
What you want to test (e.g., notification, evidence preservation, communications)
Choose a pre-built scenario or select Custom and describe below.
List participants and roles (Name — Role — Contact)
Short script for internal notification (who, what, immediate actions)
If yes, paste or link template in Attachments
If Yes, note responsible person in Facilitator Notes
High-level sequence (isolate, acquire, analyze, remediate, communicate)
Examples: when to notify patients, when to engage law enforcement, when to take systems offline
Target metric to test during the exercise
Capture timestamps for key messages and approvals
Operational gaps, decision delays, unclear authorities
For each finding record: Finding — Action — Owner — Priority (High/Med/Low) — Due date
1.0 10.0
If yes, schedule owners and dates in Post-Exercise Improvement Log
Links to templates, evidence artifacts, images or secure repository references
You can explore this tool now. Sign in or create an account to save your responses and return to them later.
Sign In to Save Create an Account
Make this tool part of your work

Save a personal copy, bring it to your team, or tailor the questions and workflow to fit what you are hungry to improve.

Member customization and team collaboration are coming soon.
Discuss Ask the Librarian

Discussion

Comments and conversation will live here.