Skip to content

Exercise in a Box is an online tool from the NCSC which helps organisations test and practise their response to a cyber attack.

It is completely free, and you don’t have to be an expert to use it. The service provides exercises based around the main cyber threats, which your organisation can do in your own time, in a safe environment, as often as you want. It includes everything you need for setting up, planning, delivery, and post-exercise activity, all in one place.

The micro exercise session combines several fundamental aspects of cyber security with additional, broader cyber security learnings within a 90-minute session to ensure all organisations, regardless of their sector or level of cyber knowledge, can benefit. 

The exercise is divided into four topics:

  1. Password security
  2.  Identifying and reporting phishing emails
  3.  Secure remote working
  4.  Responding to a ransomware attack