Cybersecurity drill checklist

A cybersecurity drill needs more than a threat scenario and a room full of laptops. Set clear practice goals first, then build the scenario, assign participant groups and confirm access needs. The final week is for testing the network, presentations and backup plan—not for discovering missing adapters or an incomplete contact list. Use this checklist to organize the exercise in a practical order, from registration and room setup to evaluation.

Organize this event for free with Lizzt

The plan, step by step

Every task with its own sub-checklist, in the order you'll actually need them.

Preparations

Set practice goals
2 people
Determine the scenario and threat
3 people
Form participant groups
2 people
Send invitations
Process registrations
Keep track of the participant list
Collect dietary requirements
Collect access requirements
2 people
Make reservations
Arrange the spaces
2 people
Confirm participants
Finalize the run sheet
3 people
Write intros and messages
3 people
Create evaluation forms
2 people
Check contact list
Run a technical test
3 people
Set up backup scenario
2 people
Check presentations
Print name badges
Collect materials
2 people
Do the shopping
2 people
Chill drinks
Clean rooms
2 people
Set up tables and chairs
3 people
Set up registration desk
2 people
Set up presentations
2 people
Check practice systems
3 people
Set up whiteboards and materials
2 people
Set up catering
2 people
Distribute briefing sets
2 people

Event

Reception and registration
3 people
Serve coffee and tea
2 people
Give safety instructions
2 people
Explain the practice objectives
Guide teams to their workspaces
2 people
Distribute the first scenario inject
2 people
Register incident reports
2 people
Observe decision-making
3 people
Distribute additional injects
2 people
Refill drinks
Handle technical questions
2 people
Record interim observations
3 people
Serve break snacks
2 people
End the first rehearsal phase
Provide participant briefing
2 people
Set up the dinner buffet
3 people
Serve dinner
3 people
Clear away dishes and waste
2 people
Start the second scenario phase
2 people
Distribute escalation injects
2 people
Practice crisis communication
3 people
Record recovery decisions
2 people
Distribute the final injection
2 people
Officially close the exercise
Hold the first debrief
3 people
Hand out feedback forms
Collect feedback forms

Aftercare

Secure equipment
2 people
Securely archive practice dates
2 people
Collect participant feedback
Compile observations
3 people
Formulate improvement points
3 people
Assign action items
2 people
Prepare final report
2 people
Report back the results
2 people
Clean up the rooms
3 people
Wash dishes
2 people
Collect waste
2 people
Put tables and chairs back
3 people
Return materials
2 people
Clean rooms
2 people

What to bring

Grouped the way you'd shop for it, with quantities.

Furniture

Tablesqty 8
Chairsqty 36
Registration desk
Coat racksqty 2

Equipment

Laptopsqty 12
Projector
Projection screen
Presentation laptop
HDMI cablesqty 3
HDMI adaptersqty 3
Extension cordsqty 6
Power stripsqty 8
Network cablesqty 20
USB sticksqty 12
Headsetsqty 12
Wireless miceqty 12
Wireless presentersqty 2
Timer clocksqty 4
Mobile phonesqty 6
Power banksqty 6
Walkie-talkiesqty 6
Label printer
Laser pointer

Tableware

Coffee cupsqty 36
Glassesqty 48
Platesqty 36
Cutlery setsqty 36
Serving bowlsqty 8
Serving plattersqty 6

Kitchen

Coffee machinesqty 2
Kettlesqty 2
Thermos flasksqty 4
Coolersqty 3
Ice cube traysqty 2
Scissorsqty 4
Cutting boardsqty 3
Bread knivesqty 2
Serving utensilsqty 8
Pitcherqty 4
Bottle openersqty 3

Office supplies

Name badgesqty 36
Pensqty 50
Notepadsqty 36
Flipchart padsqty 4
Whiteboard markersqty 24
Markersqty 12
Sticky notesqty 12
A4 printing paperqty 500
A3 printer paperqty 100
Envelopesqty 50
Foldersqty 40
Paper clipsqty 2
Staplersqty 3
Rolls of tapeqty 6
Paper cutter
File traysqty 6

Security

Privacy filtersqty 12
Cable locksqty 12
Seal stickersqty 100
Paper shredder

Cleaning

Waste binsqty 6
Vacuum cleaner
Mop set
Microfiber clothsqty 12
Hand soap dispensersqty 3

Catering

Groceries

Tips

Set the scenario and learning goals before inviting participants. Define what threat they will face, what decisions you want to observe and how success will be evaluated.
Close registration and access details at least 5–7 days before the drill. Confirm the participant list, dietary requirements and access requirements before arranging rooms, groups and catering.
Run a full technical test 1–2 days beforehand. Test every laptop, presentation connection, HDMI adapter, network cable, headset, power strip and timer, and keep a backup scenario on a USB stick.
Prepare the registration desk before participants arrive. Print name badges, check the contact list, arrange tables and chairs, and place spare cables, adapters and power banks where the drill team can reach them.
Keep the run sheet and evaluation forms ready before the opening message. Assign someone to track time and disruptions so the exercise can be reviewed using specific observations rather than general impressions.

Frequently asked questions

How long does it take to organize a cybersecurity drill?: Allow 3–4 weeks for a structured drill with invitations, registrations, room arrangements and technical preparation. Reserve the final 48 hours for testing equipment, confirming participants and finalizing the run sheet.
When should I send invitations for a cybersecurity drill?: Send invitations at least 3 weeks before the exercise if participants must register or provide access requirements. Close registrations 5–7 days before the event so groups, rooms and materials can be finalized.
What equipment do I need for a cybersecurity drill?: Plan one working laptop per active participant or team, plus a presentation laptop, projector, screen, network cables, HDMI adapters, power strips and extension cords. Keep at least one spare adapter and a backup copy of the scenario available.
How do I test a cybersecurity drill before the event?: Run the complete technical test 1–2 days before the drill, using the same room, network and presentation setup. Test the backup scenario, contact list, timers and communication tools as well as the main equipment.

Start this plan in Lizzt

Every task and item on this page, ready in your own event. Invite people, split the work, and see who has done what.