A cybersecurity manager has scheduled biannual meetings with the IT team and department leaders to discuss how they would respond to hypothetical cyberattacks. During these meetings, the manager presents a scenario and injects additional information throughout the session to replicate what might occur in a dynamic cybersecurity event involving the company, its facilities, its data, and its staff.
Which of the following describes what the manager is doing?
A . Developing an incident response plan
B . Building a disaster recovery plan
C . Conducting a tabletop exercise
D . Running a simulation exercise
Answer: C