Tabletop exercise
A practice run of an incident response plan — walking through a simulated scenario as a team, without touching live systems.
For small firms
An hour spent on a tabletop exercise reliably finds the gaps in a plan before a real incident does.