CyberPlay · Train Inside the Breach
Cybersecurity is not learned from slides. Train your team inside a simulated incident before facing a real one.
CyberPlay is a licensed cyber-incident simulator that trains teams through realistic scenarios adapted to the organisation’s sector, functions and operating context — without touching its real systems.
What happens inside the simulation
It is not a slide presentation or a classroom course. The team lives through an incident and decides.
- The team enters a simulated incident directly in the browser, with no agent or software installation.
- Information arrives progressively, as in a real incident.
- Participants make decisions under time pressure.
- Every decision affects how the scenario develops.
- The AI engine analyses the decisions and the scenario evolves based on those choices.
- No real infrastructure, production system or company data is touched.
How it works
- 01Define the contextIdentify the organisation’s sector, participant roles and exercise objective.
- 02Select and configure the scenarioAlign the exercise with the relevant sector, functions and incident type.
- 03Run the simulationParticipants respond to the incident in real time through the browser.
- 04Assess the decisionsThe platform evaluates the choices and how the team responds under pressure.
- 05Review the resultThe organisation receives a readiness score and a clearer view of capability gaps.
What the organisation can learn
CyberPlay can help reveal:
- unclear responsibilities;
- delayed escalation;
- weak communication between functions;
- uncertainty about legal or regulatory notification;
- gaps between written procedures and actual decisions;
- weak coordination between technical and management teams;
- training priorities;
- areas where incident-response or business-continuity procedures require improvement.
The result is a training and preparedness indicator — not a certification decision or a guarantee of resilience.
Not only for the IT team
A cyber incident requires coordinated decisions from technical, operational, legal, communication and leadership teams. CyberPlay suits technical and non-technical participants; the functions involved in each exercise are defined in the proposal.
- IT and information security
- Operations
- Risk and compliance
- Legal
- Communications
- Human resources
- Business continuity
- Senior management
- Reception or frontline functions, where relevant
Scenarios adapted to the sector
The exercise can be adapted to the organisation’s operating context. The final level of adaptation depends on the agreed proposal; a fully custom scenario is not automatically included in every licence.
- Banking and insurance
- Energy, oil and gas
- Healthcare
- Industry
- Logistics
- Retail
- Technology
- Education
- Public sector
- Professional services
CyberPlay or cybersecurity consulting?
| CyberPlay | Cybersecurity consulting |
|---|---|
| Licensed simulation platform | Technical advisory and implementation service |
| Trains decisions during a simulated incident | Improves governance, risks, controls and systems |
| Runs in the browser without touching real systems | May review the organisation’s real processes and controls |
| Reveals preparedness and capability gaps | Helps design and implement corrective improvements |
| Does not certify or audit the organisation | May prepare the organisation for an independent audit |
CyberPlay shows how the team makes decisions under pressure. Cybersecurity consulting helps address the technical, organisational and governance gaps the exercise may reveal.
Relationship with ISO 27001 and ISO 22301
CyberPlay can support awareness and incident-response exercises, help test whether documented roles and procedures are understood, contribute to training and continual improvement, and help identify gaps relevant to information security and business continuity.
It does not replace:
- implementing ISO 27001;
- implementing ISO 22301;
- internal audits;
- certification audits;
- independent certification.
What the organisation receives
Subject to the licence and the agreed proposal:
- access to the simulation;
- the agreed scenario;
- a readiness score on a 0–100 scale;
- feedback on decisions;
- identification of skills or preparedness gaps;
- results that can support an internal improvement plan.
Where appropriate, results can be aligned or compared with relevant frameworks such as ISO 27001, NIST CSF and GDPR.
Frequently asked questions
What exactly is CyberPlay?
A licensed, browser-based cyber-incident simulator. The team makes decisions inside a simulated incident; the AI engine analyses the choices and the scenario adapts to them.
Is it only for cybersecurity or IT teams?
No. It is designed for technical and non-technical participants: operations, risk and compliance, legal, communications, human resources, business continuity and senior management, among others. The functions for each exercise are defined in the proposal.
Does it touch our real systems or data?
No. The simulation runs in the browser, with no agent or software installation and no contact with the organisation’s infrastructure, production systems or data.
Can the scenario be adapted to our sector?
Yes, the exercise can be adapted to the organisation’s sector and context. The level of customisation depends on the agreed proposal.
Does CyberPlay replace a penetration test or vulnerability assessment?
No. CyberPlay trains human decisions in a simulated incident; it does not test or attack technical infrastructure. Penetration tests and vulnerability assessments are different work.
Does it serve as ISO 27001 certification evidence?
Not by itself. It can support awareness and incident-response exercises and contribute to continual improvement, but it does not replace implementing the standard, audits or independent certification.
What does the readiness score mean?
It is a 0–100 indicator of how the team responded in the exercise, used to guide training and improvement. It is not formal proof of conformity and is not recognised as such by auditors or regulators.
How is access licensed?
Under licence. The scenario, number and profile of participants, sector, duration and level of customisation are defined in the proposal.
Can we request a demonstration before deciding?
Yes. Use the “Request a demo and proposal” button and describe your organisation’s context; Export Lab will reply with the next steps.
What happens after the simulation identifies gaps?
The results can support an internal improvement plan. If the organisation wants help addressing technical, organisational or governance gaps, that is done through cybersecurity consulting, under its own scope.