Cyber security certifications have had an identity problem for a long time. That gap is only getting wider as LLMs become easily available to provide copy-paste answers. If certifications are going to stay relevant, they need to fundamentally change.

Tabletop exercises are widely accepted as essential to incident readiness, yet many security leaders struggle to justify their cost and impact. When exercises are infrequent, overly theoretical, and slow to deploy, they fail to improve real-world response. There is a better way.