Learn · 1 min read
How security teams stay sharp between tabletops
A practical model for keeping AppSec and security team skills fresh with weekly drills between large simulations and tabletops.
Published 2026-07-23
Tabletops are necessary but infrequent
Large exercises create shared muscle memory, then skills decay until the next event. Teams need a lighter habit that keeps judgment warm without another full simulation.
Weekly drills beat quarterly cram sessions
Assign short missions across app security, cloud, and detection. Track who completed practice and where gaps repeat so managers can coach before an audit or incident exposes the blind spot.
Track coverage and explanation quality
Useful manager views show domain coverage, explanation quality, and recommended next drills. Activity minutes alone do not prove the team can prioritize risk.
Related guides
Cyber training for university and bootcamp cohorts
How universities and bootcamps can add practical cybersecurity training that reinforces lectures and produces employability evidence.
Introduction to penetration testing: a workshop for software security engineers
A twelve-mission workshop outline that walks software security engineers with no offensive background through proxy tooling, authorization bypass, and injection.