Iron Table by Arca Secure
Command under pressure is a discipline. We make it measurable.
AI-conducted resilience exercises, scored against the regulations you answer to.
The problem
Proving you can hold together under pressure isn't just a compliance box anymore. Regulators want rehearsed, independent evidence, and so do the investors and boards whose capital is on the line. Most firms still can't provide it.
Self-marking isn't assurance.
A crisis facilitated and graded by the same executives who'd act in it isn't independent evidence.
Consultant-run exercises are slow.
Weeks to design, a day to run, so they happen once a year if that.
Most tools are cyber-only.
Operational, third-party, data, AI and board-level resilience go unrehearsed.
What Iron Table is
The structurally independent crisis exercise.
An AI facilitator convenes your leadership and runs a live incident in real time. Your team decides; every decision is scored on the spot against a pre-committed answer key. No consultant, no self-marking.
-
Convene
Pick a scenario, set the team
-
Live injects
The AI runs the incident, inject by inject
-
Decisions scored
Immediate, rule-led, evidence-linked
-
Board-grade report
Score, maturity, playbook, actions
Scope
Nine exercise families, growing. Not just cyber: operational resilience, IT outage, fraud and financial crime, business continuity, third-party, data and privacy, AI and model risk, board governance.
9
Exercise families
L1-L3
Difficulty tiers
3
Audience tiers
Measurement that holds up
A score that holds up to scrutiny.
60/40 deterministic score
Critical-action coverage plus decision quality. Fixed maths, not model judgement.
Maturity L1-5
A supervisory-style read alongside the score.
Evidence-linked
Every mark quotes the team's own words.
Mapped to your frameworks
DORA, NYDFS, APRA, EU AI Act, GDPR, FCA op-res, ISO 27001 today, with more as the platform expands.
What you walk away with
Resilience score & maturity
A defensible L1-5 read for the board and auditors
Evidence-linked report
Capability radar, KRIs, every decision quoted back
Living risk register
RAG findings mapped to obligations, exportable to CSV
Response playbook
Gold/Silver/Bronze command structure and comms templates
Why Iron Table
| Criterion | Typical tools | Iron Table |
|---|---|---|
| Independence | Facilitated by people you hired | AI-conducted, pre-committed criteria |
| Breadth | Cyber tabletop only | Cyber, operational, IT, fraud, third-party, data, AI, board |
| Measurement | Qualitative debrief | Deterministic score, L1-5 maturity |
| Benchmarking | Your results in isolation | Anonymised cross-sector benchmark |