During an audit as a third party security consultant you are told that the organization being audited conducts an exercise annually during which prominent IT staff and the security team gather in a meeting room and discuss how they would handle various security incidents and disaster scenarios. This exercise is then used to update any policies and playbooks. What type of exercise are they describing?
Incident Response Planning (IRP)
Tabletop Exercise
DR Planning
Business Impact Exercise (BIE)
Dungeons and Dragons (DND)