Tools and templates
Breach Response Tabletop Simulator
Walk through a fictional data incident, step by step, from first alert to lessons learned. Each decision shapes a score across containment, documentation, communication and governance. Educational only — nothing you enter is saved.
This tool runs entirely in your browser. Your answers are not sent to us, stored, or associated with you in any way.
Fictional scenario
Aurorafit is a fictional mid-sized wellness-app company operating in several regions. At 08:40 on a Tuesday, a support engineer notices unusual export activity on the customer database. This simulation walks through the first weeks of the response. Your choices shape four scores: containment, documentation, communication and governance.
There are 11 decision points. Notification timelines vary significantly by jurisdiction — this exercise never states a universal deadline. See privacy laws by country and the law comparison tool for how requirements differ, and always confirm against current official guidance.
Privacy Practice Lab publishes educational and technical guidance. Nothing on this site constitutes legal advice, and it should not be relied on as a legal determination for your organisation.