Exercise in a Box

An online tool which helps organisations find out how resilient they are to cyber attacks and practise their response in a safe environment.

Exercise in a Box is an online tool from the NCSC which helps organisations test and practise their response to a cyber attack. It is completely free and you don’t have to be an expert to use it.

The service provides exercises, based around the main cyber threats, which your organisation can do in your own time, in a safe environment, as many times as you want. It includes everything you need for setting up, planning, delivery, and post-exercise activity, all in one place.

This iteration of Exercise in a Box has been piloted with small and medium enterprises, local government and the emergency services, but other private and public sector communities could benefit from using it, depending on their needs.

To use Exercise in a Box you need to register for an account. This enables us to provide you with a tailored report, helping you identify your next steps and pointing you towards the guidance which is most relevant for your organisation.

Once you have registered, you set your profile, pick your exercise(s), and download the materials.

Exercise in a Box is a live tool which will keep evolving, based on user feedback, to ensure it stays current, relevant, and engaging.

Register for an account.