Amidst all of the ransomware attacks, it is evident that organizations need to believe that it is not an if they will be subject to such threats, but when.
Tabletop testing is certainly necessary, though more comprehensive testing would be prudent as well.