A well-known Australian retail organisation engaged CRG to carry out a Tabletop Exercise focused on a ransomware threat for their Cyber Security Operations Team, IT operations teams, and Major Incident Management Team, under the guidance of their CISO and CTO. CRG developed and led an exercise that mirrored the progression of a ransomware threat actor, starting from initial access to the deployment of ransomware. This required the organisation to navigate the situation from the helpdesk's first response to notifying the C-Suite and implementing store closures. Furthermore, CRG provided a briefing on the threat landscape and conducted an educational session for all participants involved in the exercise.