Cybersecurity desktop exercises are a critical component of a robust defence strategy, serving as a simulated battleground to prepare for real-world cyber threats. These exercises are vital for testing and improving an organisation’s incident response protocols, ensuring that when an attack occurs, the response is swift, effective, and coordinated. They help identify vulnerabilities in people, process and technology, allowing teams to address these issues proactively. Moreover, desktop exercises foster a culture of security awareness, keeping cybersecurity at the forefront of employees’ minds. By regularly conducting these simulations, organisations can not only gauge their preparedness but also strengthen their resilience against cyber attacks, ultimately safeguarding their operations, reputation, and stakeholder trust in an increasingly hostile digital environment.  They are a brilliant way to demonstrate the necessity of linkage between the Incident Response Plan and the Business Continuity Plan.